Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/59qQtD6xwXblX7SHuoc3qdVEs9E.roa
File: 59qQtD6xwXblX7SHuoc3qdVEs9E.roa (raw, json)
Hash identifier: vVbXlcWh6aHNpaKg9vbWEVwZo/aWKn9Qo6OuoCvPlFw=
Subject key identifier: E7:DA:90:B4:3E:B1:C1:76:E5:5F:B4:87:BA:87:37:A9:D5:44:B3:D1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/59qQtD6xwXblX7SHuoc3qdVEs9E.roa
Signing time: Thu 15 Sep 2022 02:35:15 +0000
ROA not before: Thu 15 Sep 2022 02:35:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7DA90B43EB1C176E55FB487BA8737A9D544B3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:0d:9c:26:3b:55:a6:b6:82:01:7d:1a:91:
a2:11:df:db:f7:3f:13:9c:04:4c:e6:f9:41:38:fb:
b8:b1:c4:19:8c:03:e3:35:dd:49:0a:c3:5a:7d:59:
49:48:d8:c8:5a:87:18:a9:57:fa:58:be:ce:f2:73:
bd:be:41:c3:c8:8f:4e:47:11:48:cc:a3:05:0e:ce:
4d:63:2a:79:9d:bb:ec:ca:d6:9a:86:fe:d7:ad:13:
26:dc:87:3c:84:c5:5b:61:de:d8:f7:04:5d:c9:a6:
e9:ed:ce:81:6f:db:40:89:76:99:09:2d:a2:3e:19:
ea:3d:7a:e2:72:1e:13:ce:f3:7c:7e:94:11:b6:59:
25:6d:5e:f1:5d:c7:82:78:e3:52:31:6a:6d:5e:ce:
9a:26:84:9b:32:ec:ca:f1:89:bf:d6:17:35:24:ed:
53:46:1f:44:44:da:21:de:b9:9d:e8:50:52:a9:06:
88:ce:53:4f:36:6a:92:b8:b7:7b:c5:31:0c:7b:03:
01:b5:3a:8a:96:ae:e5:3b:54:f0:d9:aa:55:4f:00:
56:6b:17:20:8b:10:80:de:f1:2a:27:08:21:32:0f:
53:1a:9c:56:ab:61:40:0f:fc:02:ef:07:5c:89:8e:
5b:99:67:95:c9:d4:b5:96:6b:f6:1b:9a:0f:6f:ee:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:90:B4:3E:B1:C1:76:E5:5F:B4:87:BA:87:37:A9:D5:44:B3:D1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/59qQtD6xwXblX7SHuoc3qdVEs9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
45:de:57:a5:ef:3c:29:f7:2d:a3:a5:af:1a:d1:10:4a:fb:ab:
cc:e4:57:a0:6c:23:fa:8c:cc:9d:4e:88:2d:a0:68:3c:67:20:
f5:b3:83:c6:bc:7d:f3:55:5d:df:43:72:56:f9:21:ce:d3:3d:
6f:25:1c:2b:b4:1c:42:51:98:2c:d3:d7:a7:31:e3:75:55:59:
45:d7:6c:c3:8f:21:1b:c8:37:f4:bf:05:5a:2f:ef:c0:1f:9c:
1d:29:cf:6b:b7:41:7b:5c:b0:ca:d9:07:54:96:94:bd:14:e2:
90:b8:12:06:4a:62:d0:a7:a9:85:9b:06:9b:99:bb:5b:04:d1:
97:14:0f:44:f4:d0:09:98:4e:d0:e1:2a:d1:1a:d0:54:89:a2:
ec:d2:01:2e:ec:a3:07:fa:e4:23:f7:6b:0c:f6:ea:01:91:70:
b9:04:ce:c5:11:32:25:59:27:28:68:55:08:22:78:7a:c7:47:
e0:3a:2a:f6:40:14:a8:8d:77:b1:2b:5a:48:8c:30:9c:a1:f2:
54:bf:7b:a1:36:3d:e4:6b:8f:0c:c4:35:53:1b:63:f0:40:57:
88:79:cf:2d:49:68:a5:6d:38:fc:55:14:a3:28:b4:9f:91:48:
22:3f:c5:50:b5:9d:96:80:c3:1c:86:29:5d:ab:37:b1:d2:87:
01:3b:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org