Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6L1qq2DQ4t1e3n7w-Mh7hWHZruw.roa
File: 6L1qq2DQ4t1e3n7w-Mh7hWHZruw.roa (raw, json)
Hash identifier: Q1PmNwR8UuD2fqxhrMn7SPaek6rl+R8A6Xa3INt2JlQ=
Subject key identifier: E8:BD:6A:AB:60:D0:E2:DD:5E:DE:7E:F0:F8:C8:7B:85:61:D9:AE:EC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6L1qq2DQ4t1e3n7w-Mh7hWHZruw.roa
Signing time: Thu 15 Sep 2022 02:35:20 +0000
ROA not before: Thu 15 Sep 2022 02:35:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.126.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8BD6AAB60D0E2DD5EDE7EF0F8C87B8561D9AEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:1b:d5:63:94:eb:80:d3:f7:36:97:bc:17:
b2:af:58:54:f8:57:e4:ee:86:62:c1:b9:c1:64:58:
82:68:9d:71:1f:6b:a0:0b:fc:7e:3f:77:91:6b:55:
24:1e:23:2b:af:f2:ae:65:81:ce:33:c2:23:1b:b5:
7b:d3:52:37:a7:38:82:bf:a4:85:4f:0e:44:8d:84:
90:6e:cb:94:5c:1a:29:eb:ab:98:bf:25:3c:19:77:
d0:27:b9:91:12:a0:1e:d9:ea:6b:94:56:e8:d0:27:
46:85:c3:7b:04:6f:18:3c:5d:68:b4:d1:90:65:13:
ea:c0:85:3a:ae:e2:e3:0d:5c:9b:6d:21:0a:a0:8f:
ae:0a:85:55:20:13:27:99:d6:ef:95:bf:09:66:cc:
bf:02:55:c9:25:21:db:3d:1e:e0:17:1c:86:1f:c6:
f9:30:cc:c5:d5:34:08:98:53:7f:10:6e:1c:26:df:
e0:2b:21:db:01:5a:19:10:e1:16:a8:50:bb:6c:3f:
52:60:4a:9f:a5:39:0d:6a:d7:9c:0f:27:90:84:d8:
b1:5c:93:69:50:05:74:9c:e3:45:2e:df:f9:a3:b7:
1a:37:94:9e:0a:2b:77:fe:3d:03:b4:72:d3:09:e1:
51:b1:a7:65:b9:5d:eb:9e:6c:f5:4f:0e:02:b8:fa:
89:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:6A:AB:60:D0:E2:DD:5E:DE:7E:F0:F8:C8:7B:85:61:D9:AE:EC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6L1qq2DQ4t1e3n7w-Mh7hWHZruw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:da:ad:b8:f0:63:e8:78:ce:ba:b1:4e:f0:05:f7:cc:d9:f6:
55:3c:7b:84:58:9e:0b:01:b6:32:1c:66:57:4b:6c:0d:7c:94:
96:d7:1d:b9:a3:c5:3d:20:d9:d1:5c:b2:95:1b:62:33:f5:ca:
74:07:2e:fc:14:b2:91:66:73:a5:00:00:c9:ea:a2:5f:9c:8e:
47:47:bb:3e:02:85:67:d5:f8:da:60:44:3c:fe:94:ce:45:8e:
74:cd:4f:c2:b2:e7:6a:2d:c0:4d:7c:85:b3:2e:34:ff:13:6d:
23:d3:fb:0f:cb:94:6c:54:97:51:89:5b:ae:ee:73:bb:be:ee:
03:8f:65:34:82:96:d7:d1:f6:c2:f5:dc:3e:27:56:8b:ba:1f:
da:db:0f:df:44:20:3b:e6:f5:8a:6b:36:9c:d0:00:ef:0d:34:
8f:8b:13:4a:16:ca:46:94:8b:e7:bd:49:56:da:a7:92:8b:56:
66:2f:9d:06:1c:a1:bb:3b:57:e5:95:2b:e7:e3:8b:eb:3e:4d:
47:ef:ea:cc:87:be:91:31:4a:dd:de:c6:8e:35:b0:bd:c5:6d:
3e:e4:2e:d8:56:ea:e8:68:96:b3:60:0b:f9:82:ba:26:d2:b0:
86:ce:87:52:8e:4d:22:3a:6b:29:c8:1d:b2:ca:03:21:70:f3:
ee:92:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org