Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OntbcUCpAiNH15ozlMFd5mZ5bg.roa
File: 6OntbcUCpAiNH15ozlMFd5mZ5bg.roa (raw, json)
Hash identifier: u//uHakYIRLSCepx6c0bmwSnDlpW8hN1O1p7BxRUEmg=
Subject key identifier: E8:E9:ED:6D:C5:02:A4:08:8D:1F:5E:68:CE:53:05:77:99:99:E5:B8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1940
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OntbcUCpAiNH15ozlMFd5mZ5bg.roa
Signing time: Sat 22 Oct 2022 06:06:17 +0000
ROA not before: Sat 22 Oct 2022 06:06:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6464 (0x1940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8E9ED6DC502A4088D1F5E68CE5305779999E5B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:3b:a0:91:41:1e:73:e3:29:3a:7a:74:39:
9e:d0:4d:92:ca:e9:79:79:03:92:dd:fc:87:6a:aa:
1d:b0:99:c9:c6:49:e1:54:5d:16:4e:b7:b0:83:36:
c9:13:41:3f:48:f5:94:88:79:3b:80:d3:72:c6:f0:
92:15:40:7f:8b:fe:57:c8:37:a1:f8:b2:91:2e:35:
85:2b:57:d2:7b:5c:51:42:32:aa:6c:3a:6a:b7:c0:
a2:b0:05:f7:c1:01:a0:af:1f:37:2e:d9:e3:d1:6c:
d7:a3:95:c0:fa:d4:47:4e:ed:ee:fd:1f:f7:f1:39:
96:df:ac:f7:91:14:64:71:39:d1:ba:c8:5a:29:14:
29:5f:14:25:63:cc:2b:b0:84:94:e5:db:a6:f2:f5:
e7:b0:1f:67:ef:79:4e:80:41:78:88:03:35:a2:cd:
d5:86:89:1a:00:70:6a:e9:e2:13:76:34:0f:b9:61:
f2:42:69:49:26:4b:4c:5c:1e:6f:51:e1:9a:a6:84:
1e:82:4e:1f:26:94:27:af:7a:93:99:90:c5:2e:19:
0f:fb:09:66:5a:84:57:ee:d8:c3:14:6c:b3:48:9c:
de:8a:ca:35:7a:b9:3a:fa:58:e3:64:37:2a:a5:64:
e9:40:2c:a9:b4:a9:03:df:6a:9e:b1:57:df:8c:aa:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:ED:6D:C5:02:A4:08:8D:1F:5E:68:CE:53:05:77:99:99:E5:B8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OntbcUCpAiNH15ozlMFd5mZ5bg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.208.0/21
Signature Algorithm: sha256WithRSAEncryption
49:a5:79:28:2e:95:26:fd:98:3c:26:29:4a:1d:f1:47:fe:54:
d7:34:95:96:b9:af:c2:5a:58:6d:0f:15:40:e1:07:1a:7c:90:
91:23:3a:1b:2c:3f:26:14:39:a4:f9:1b:8e:50:8b:73:76:7b:
e7:4f:4c:e1:0c:13:9e:be:b0:ef:26:ec:20:37:97:1f:c5:31:
b4:fc:01:ce:e5:fc:00:f1:e9:75:00:52:6f:18:21:8b:2f:b7:
f4:cf:2b:87:a7:23:0f:5c:d0:89:2b:c1:51:10:fd:88:3e:a4:
6e:a1:26:25:ac:4c:8e:c3:e1:14:c9:53:5d:a7:4f:39:42:63:
db:4b:b1:66:e1:76:39:11:df:9e:7d:67:79:2e:23:d9:da:d4:
d4:f9:de:90:f5:d8:36:1b:02:77:7f:08:e4:02:17:11:d6:0d:
15:9d:b3:41:8d:0d:27:c3:52:04:00:9e:8a:7b:fd:74:57:8c:
a0:8d:e9:57:68:7e:20:1b:28:03:c4:81:5e:b9:d9:19:e2:0d:
d4:6e:61:3c:1d:66:fe:5b:9c:73:f3:07:75:23:2d:2b:bb:c4:
60:34:dd:46:cc:4b:e6:78:fb:88:03:5c:07:d4:31:43:b4:5e:
2a:e5:3d:9b:68:f4:43:c5:aa:78:c1:d8:22:93:f6:eb:0d:ec:
c8:6e:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org