Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/563q-Auno2nj3bc_-kVEciWh-GE.roa
File: 563q-Auno2nj3bc_-kVEciWh-GE.roa (raw, json)
Hash identifier: pv9RnvJVLD+y3aNOpoFtE3vGQ0dUX3Svrm/ai/NNiuk=
Subject key identifier: E7:AD:EA:F8:0B:A7:A3:69:E3:DD:B7:3F:FA:45:44:72:25:A1:F8:61
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/563q-Auno2nj3bc_-kVEciWh-GE.roa
Signing time: Thu 15 Sep 2022 02:35:59 +0000
ROA not before: Thu 15 Sep 2022 02:35:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 114.198.176.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7ADEAF80BA7A369E3DDB73FFA45447225A1F861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:c0:80:d7:19:88:19:38:19:70:f0:34:da:
9a:24:85:44:03:ce:cf:82:02:54:5f:e2:91:26:2a:
34:62:17:37:48:13:76:d9:65:ef:ba:0c:16:bf:cc:
fe:e3:53:06:dc:3c:2a:6d:39:5d:0a:bb:2e:7e:94:
19:b1:e5:d0:63:ed:f1:09:a5:b8:1a:ea:c9:35:12:
2e:1b:b7:bb:7b:62:f8:ea:be:f0:ac:f5:f0:cb:12:
aa:91:5a:37:eb:66:32:f5:b5:0d:ff:ca:62:2a:df:
82:5b:bd:2f:4c:0f:58:9e:cb:fc:af:3d:16:c4:d7:
f0:13:a1:78:94:77:5e:27:6e:e2:20:9d:27:2e:e1:
3a:12:3c:80:c4:9d:0a:15:ef:2c:f3:8a:44:5a:c9:
c5:79:98:69:96:ae:63:bf:03:86:ab:61:d2:c6:bd:
b1:7a:68:3a:63:59:de:5b:a0:57:aa:3e:a7:a2:65:
42:c8:e1:1f:2a:6c:53:8b:05:ba:fc:96:e9:d8:07:
ae:c8:74:ba:9e:10:d0:2d:05:d1:b2:11:f2:25:b9:
3e:dd:50:66:10:5c:2a:c0:16:53:fb:a1:2c:c5:5c:
97:1b:d9:c1:3e:c6:3e:57:11:7b:9b:da:bc:a8:fd:
37:3e:54:38:db:a4:bc:01:64:3d:2c:9a:a7:5f:92:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:EA:F8:0B:A7:A3:69:E3:DD:B7:3F:FA:45:44:72:25:A1:F8:61
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/563q-Auno2nj3bc_-kVEciWh-GE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
53:d4:c0:d4:41:94:d8:f4:b6:00:d4:92:2a:b8:ce:43:e9:8e:
13:ff:7e:4a:33:10:77:9d:c8:ec:e9:2e:8c:66:d6:c7:9f:66:
a2:bf:22:b3:4f:2d:08:2c:dc:62:23:e5:2f:d2:7b:89:1c:f5:
94:52:70:b0:11:ec:dd:ef:89:aa:49:ec:91:d0:6d:d4:2f:3a:
f4:e2:e0:4b:f4:93:20:32:40:55:43:e6:1a:dd:cb:01:c8:c9:
a6:75:fb:6c:37:cb:9e:dc:30:c5:e1:e6:6e:ae:22:4f:44:33:
fe:2c:7b:3f:4e:9b:fc:f6:9a:99:ab:4d:08:8c:06:64:42:a1:
15:c7:4f:b4:1b:56:1d:ac:6c:df:eb:cc:28:f6:a6:db:98:de:
c9:e4:04:34:f1:a0:3d:48:9d:d5:d7:01:9b:a5:0b:75:d5:ee:
fe:27:41:8b:4f:73:82:f5:7f:19:32:87:8e:0f:e5:94:59:69:
b1:ba:3f:a4:7a:76:94:3d:10:2b:0c:d5:b6:c6:32:3d:c8:7e:
83:cf:0c:ec:87:37:70:bd:b6:36:bd:80:00:f9:9f:a9:d2:62:
7d:9a:f9:2d:c6:78:b7:34:8d:8c:f1:bb:0e:9c:39:91:24:3f:
b9:b7:a3:eb:16:cc:81:e4:93:ea:3d:41:f7:28:75:0d:70:07:
1c:da:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org