Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1gt-BRnt4KbO07PXxdKhQ9m5kTQ.roa
File: 1gt-BRnt4KbO07PXxdKhQ9m5kTQ.roa (raw, json)
Hash identifier: YjCDaisnpWHnMxKy5TpWaKqpeenBeVNSpnhYdNC3RsM=
Subject key identifier: D6:0B:7E:05:19:ED:E0:A6:CE:D3:B3:D7:C5:D2:A1:43:D9:B9:91:34
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1gt-BRnt4KbO07PXxdKhQ9m5kTQ.roa
Signing time: Thu 15 Sep 2022 02:35:28 +0000
ROA not before: Thu 15 Sep 2022 02:35:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D60B7E0519EDE0A6CED3B3D7C5D2A143D9B99134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:8a:9e:b2:26:79:06:05:94:92:30:34:6a:
2b:9f:95:63:70:9f:d8:07:3b:2e:8a:43:65:e7:ef:
24:47:c1:23:47:04:f4:8b:e3:76:f6:39:31:79:ae:
31:0b:ee:e3:f6:de:cc:f0:2e:0e:dd:42:af:9d:61:
2a:75:cc:f2:a4:9d:59:08:45:7d:98:a2:79:cb:99:
4b:03:0a:af:a0:de:37:50:8d:a0:f7:38:a7:fd:66:
75:3f:b6:db:2b:6d:1e:af:2e:98:66:99:36:24:b6:
0a:7b:79:31:1a:bc:1f:cb:f6:85:f8:b5:a7:5f:e9:
b1:b4:a7:96:5f:bc:ff:de:53:b9:da:f5:ec:be:6a:
83:9a:36:7f:cc:e0:29:ad:11:20:e8:bc:93:40:3f:
b5:ad:80:17:d2:93:a2:70:5b:a3:01:7f:6f:50:94:
bd:cf:3a:d7:7a:5b:36:1d:e2:0b:3c:96:f1:43:80:
92:3e:8e:f0:7f:2e:a5:ea:71:8c:b4:3f:38:0e:ec:
08:81:a4:81:61:a2:8a:a2:5f:ae:cb:ea:95:8b:f9:
5e:7b:22:79:73:ca:99:04:19:9d:a3:71:16:2d:b8:
a5:25:44:0a:a3:34:d2:c2:ec:ca:d7:28:db:22:4d:
b5:30:e6:6b:ef:62:ed:cb:a0:d5:26:2f:24:46:0d:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0B:7E:05:19:ED:E0:A6:CE:D3:B3:D7:C5:D2:A1:43:D9:B9:91:34
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1gt-BRnt4KbO07PXxdKhQ9m5kTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.216.0/21
Signature Algorithm: sha256WithRSAEncryption
82:7e:19:47:12:ce:7f:08:df:94:24:2f:42:12:40:c1:74:b1:
9d:79:fe:24:09:00:ab:15:b6:b1:eb:56:9f:fe:81:e2:05:97:
ed:68:fd:e3:f2:5e:7f:bd:33:70:60:fd:07:aa:36:85:05:e3:
df:ba:7c:66:46:53:4e:9c:a4:13:6c:ac:64:bb:db:a4:af:b1:
e3:51:60:38:69:b3:eb:b7:e1:1e:1c:3e:74:15:9c:cb:a4:a7:
5d:54:f0:c3:f1:7d:21:2c:e5:47:8e:4c:72:cb:65:4a:19:e8:
08:b8:54:bd:dd:bd:0e:45:51:bc:32:fb:13:15:da:62:dd:be:
d0:2c:20:93:ab:4d:91:50:fa:de:cd:c9:46:22:5a:33:6c:c7:
c4:2e:a3:e1:b9:70:79:53:ac:a2:c3:02:c3:23:e1:e7:ea:f2:
5e:71:ff:b6:08:ca:89:00:83:47:73:b9:9b:f3:c2:21:2a:06:
9a:a9:26:bc:4a:09:61:2f:f8:5e:82:2e:ef:51:fe:51:e5:f4:
a0:a3:3d:d5:53:72:50:8e:d2:0b:b7:d1:8c:6a:89:7f:74:4a:
a0:22:d2:f5:3e:13:0b:0e:3c:35:52:af:9e:b4:a4:09:ee:b8:
ce:5d:92:b5:9b:ee:17:c8:67:c4:17:e8:cb:09:39:96:65:c1:
8c:72:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-fra.rpki-client.org