Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57ydWa1TLbUXfL_O9LDUCEwkHg8.roa
File: 57ydWa1TLbUXfL_O9LDUCEwkHg8.roa (raw, json)
Hash identifier: D7PSfKIF4ici+dXNbiFhPpumJyV402TNm/870N9gj7k=
Subject key identifier: E7:BC:9D:59:AD:53:2D:B5:17:7C:BF:CE:F4:B0:D4:08:4C:24:1E:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14CB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57ydWa1TLbUXfL_O9LDUCEwkHg8.roa
Signing time: Thu 08 Sep 2022 03:40:41 +0000
ROA not before: Thu 08 Sep 2022 03:40:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.158.240.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5323 (0x14cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 03:40:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7BC9D59AD532DB5177CBFCEF4B0D4084C241E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:94:a9:61:01:25:28:d6:6e:b1:0a:61:b0:
15:0b:78:27:7d:94:85:33:95:2a:60:2c:ba:ce:52:
27:09:88:87:b6:2f:fa:b8:d1:55:06:b9:dc:3d:5b:
2d:2b:b2:eb:73:5b:4a:6f:c3:08:44:f5:0e:24:63:
73:f9:aa:39:fb:a0:48:d3:eb:17:df:4c:88:7a:c1:
ac:be:3e:db:9b:f0:db:fe:ae:ac:c7:b7:61:ce:c9:
3f:6a:59:3c:c3:af:cf:c1:56:53:cd:6d:50:84:80:
2b:61:bf:a4:21:3a:50:3f:79:f9:82:b4:98:ff:0e:
e5:6e:46:68:7f:01:db:4a:98:36:e4:dc:8d:ac:4e:
b0:0b:11:07:61:a7:ed:53:62:0e:4b:57:a8:0d:d1:
d3:de:9f:ce:f5:60:2f:94:04:9c:f7:cc:29:40:34:
46:d7:64:ed:f4:fe:1a:ed:56:94:27:8e:04:9e:2f:
ac:31:0d:43:be:21:a8:86:bc:01:77:ae:81:73:50:
17:44:f9:f8:ca:f3:60:02:b8:cc:9e:9a:f3:72:da:
78:5f:f8:ae:b1:9d:9d:f0:e2:19:7f:ac:b0:ad:10:
45:2f:b4:98:1c:25:d7:06:d0:48:c8:b0:a3:00:b1:
65:23:d5:da:62:34:4c:16:2a:4b:19:2e:b1:77:87:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BC:9D:59:AD:53:2D:B5:17:7C:BF:CE:F4:B0:D4:08:4C:24:1E:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/57ydWa1TLbUXfL_O9LDUCEwkHg8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.240.0/21
Signature Algorithm: sha256WithRSAEncryption
28:16:5a:38:a6:ab:d8:b0:19:04:8b:cb:1a:20:bf:3e:a0:0e:
9b:5e:7d:b5:e1:8a:a7:8f:31:e0:42:86:ef:b8:60:63:3b:f7:
01:00:8e:a6:ae:1e:d6:95:75:11:de:1c:5f:21:39:fa:8b:b8:
f6:92:ac:88:2e:f5:62:c6:c5:37:8a:27:5a:ec:0e:9a:9e:04:
fc:cb:52:6b:2f:2b:f2:eb:ef:58:54:d7:e1:cb:fa:ea:69:38:
c6:86:e6:f4:f5:ec:39:18:3d:35:b1:c8:ba:51:86:ae:d7:c1:
aa:ab:47:de:43:a9:7c:aa:28:16:5a:7a:72:22:ff:ed:0c:3f:
4e:75:7e:b8:c1:b0:0f:94:8a:68:8d:9f:60:c3:1d:50:60:24:
06:4d:90:b8:7b:94:97:f6:f1:bf:49:47:7a:68:66:d8:ea:92:
21:fc:41:d5:b1:e3:16:e9:e7:8b:38:a6:72:aa:38:b5:3e:b1:
97:ca:33:34:a9:37:3d:49:74:6d:4f:a7:7a:ae:be:4e:4e:2f:
1a:82:69:25:e3:74:6a:ca:09:3d:98:76:88:38:76:00:9e:42:
a6:96:d2:98:23:15:5a:94:27:c3:7c:4c:f8:a9:6b:a7:f3:59:
19:fb:44:7f:57:2b:12:12:33:7f:50:1a:4a:ad:67:61:e5:23:
0e:3b:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org