Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7LmAFkoiT_hYgOR6jnMJ8CRuuT0.roa
File: 7LmAFkoiT_hYgOR6jnMJ8CRuuT0.roa (raw, json)
Hash identifier: gjtUU281w6Pclczl9oBCuWCT0F345k6sM5G890eCHg8=
Subject key identifier: EC:B9:80:16:4A:22:4F:F8:58:80:E4:7A:8E:73:09:F0:24:6E:B9:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7LmAFkoiT_hYgOR6jnMJ8CRuuT0.roa
Signing time: Thu 15 Sep 2022 02:35:25 +0000
ROA not before: Thu 15 Sep 2022 02:35:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.112.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ECB980164A224FF85880E47A8E7309F0246EB93D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:12:02:64:4c:27:4f:9d:d9:e5:78:76:8b:
c1:77:c4:4e:5f:68:d1:36:ce:13:72:17:ba:8b:3b:
9c:a3:bd:8f:34:43:f8:28:a0:fd:77:e7:77:df:87:
9a:b0:77:da:26:29:56:1c:88:cc:13:a5:f7:ea:ea:
84:54:5e:de:7e:38:56:1f:e3:fe:34:a3:53:c5:78:
54:7e:69:a6:fd:b7:6c:03:40:cd:66:28:ad:61:b4:
57:26:54:0a:c7:9e:4c:51:4d:7c:d2:dc:1c:4e:b4:
d0:1e:e4:e8:bb:d7:01:a3:e6:12:11:e6:45:84:77:
07:1e:04:35:93:dc:a3:f2:8f:c6:0b:b2:a1:9e:b4:
6b:85:f9:0d:33:bf:a6:a3:f4:9e:8e:dc:a1:68:18:
f4:7a:4f:fb:58:d6:dd:e6:a1:29:d9:23:db:51:36:
06:97:7e:66:2f:27:92:85:00:3e:52:19:d2:4f:e2:
7b:41:fa:4f:97:2b:bc:44:69:e5:25:c3:62:cb:04:
21:6d:18:d3:dc:88:db:bd:29:95:c1:7e:13:c0:72:
1f:a7:c8:c2:aa:2e:cf:92:33:e2:28:f5:0a:35:b0:
bb:cb:80:a3:05:87:86:84:9d:68:33:7b:4e:5b:bc:
57:81:3e:63:b0:69:52:4e:1c:d3:24:85:8a:22:59:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:80:16:4A:22:4F:F8:58:80:E4:7A:8E:73:09:F0:24:6E:B9:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7LmAFkoiT_hYgOR6jnMJ8CRuuT0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:24:d6:5f:ef:a8:57:d9:92:c6:67:20:c4:e7:a7:c6:e1:57:
18:dc:86:fd:f3:ab:f5:5f:eb:af:ca:27:87:da:a5:91:99:33:
09:9d:4a:8f:85:b7:50:45:db:68:c6:d1:7d:c7:4f:06:ea:d7:
f9:36:1a:be:b1:08:28:b4:bd:93:d0:50:7d:28:ea:77:ff:eb:
65:77:c2:1c:89:be:54:62:61:8f:59:8c:e9:43:3a:4a:36:10:
22:ed:64:17:92:d5:c3:6c:3f:41:1d:e3:78:92:73:44:aa:7e:
f6:22:1e:43:1b:46:d5:7f:49:71:9e:82:84:d8:1d:24:95:aa:
40:c9:f4:96:cd:88:ee:bb:31:ef:f2:64:78:b9:78:c1:96:c9:
65:19:ec:76:23:dc:fe:2f:13:27:3e:f4:7b:8a:6f:90:cd:03:
01:2d:98:3d:00:af:a5:73:09:66:e1:0f:a0:d9:f2:58:12:b5:
f8:63:3e:7e:70:ef:0d:55:1b:c9:5c:8c:7d:7e:f2:7a:4c:06:
fb:21:49:85:d5:a7:84:46:53:14:50:41:62:8f:c0:75:32:fd:
7f:a9:bc:97:ce:71:97:71:d9:d8:30:b7:c4:27:b3:aa:2c:87:
66:a9:09:58:7d:15:7e:78:5b:ad:04:ad:78:9c:bb:d9:3f:cd:
62:d3:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org