Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pSpOzrRl9RULBiiLlZNKXTGPHA.roa
File: 8pSpOzrRl9RULBiiLlZNKXTGPHA.roa (raw, json)
Hash identifier: xghftuVHqwBhjz3Cr9SrQZOkyltKRMMfZ7FHopsuphA=
Subject key identifier: F2:94:A9:3B:3A:D1:97:D4:54:2C:18:A2:2E:56:4D:29:74:C6:3C:70
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1999
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pSpOzrRl9RULBiiLlZNKXTGPHA.roa
Signing time: Sat 22 Oct 2022 06:06:43 +0000
ROA not before: Sat 22 Oct 2022 06:06:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 122.100.64.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6553 (0x1999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F294A93B3AD197D4542C18A22E564D2974C63C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:0a:b6:61:d3:dc:07:74:73:0d:a8:89:10:
b2:33:32:ec:3c:70:4e:7e:c7:73:32:00:86:eb:68:
13:d6:cb:01:7d:6e:3f:14:24:af:50:ba:c4:27:ca:
f1:ca:b7:b6:28:0a:c4:05:8e:01:47:e6:5a:ef:8a:
b6:bf:56:60:54:69:3f:8f:9e:ae:1e:8a:60:b1:06:
18:db:1f:e0:ef:b2:e3:8a:e4:2a:d4:c6:ef:ab:63:
32:89:ef:89:57:da:c8:a9:91:1e:12:eb:bc:21:e0:
be:5c:b5:84:fa:e7:9f:96:15:7a:ab:3f:f8:9c:06:
d9:17:e1:94:ae:30:90:77:2d:20:bc:de:c1:55:ca:
6c:8b:91:db:57:55:13:9c:d3:77:c9:aa:d5:9d:e0:
b6:dc:ba:58:51:3a:cd:fc:df:7a:0a:19:0c:f1:55:
5f:13:1b:d6:02:f5:1e:f1:2a:00:ea:1c:64:c4:f4:
ef:8d:bc:0f:ad:4e:56:04:5c:90:6c:f9:c0:c3:eb:
74:e5:54:41:6a:09:21:9f:58:bf:72:82:63:92:1b:
8b:55:da:b6:10:6f:0b:70:22:7f:a5:d3:30:38:c8:
8e:32:f1:05:02:60:70:57:22:06:f9:b7:b5:60:c2:
d9:d9:35:30:49:04:6e:36:0a:01:a4:45:e1:2b:72:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:A9:3B:3A:D1:97:D4:54:2C:18:A2:2E:56:4D:29:74:C6:3C:70
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8pSpOzrRl9RULBiiLlZNKXTGPHA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:2d:8b:8a:c8:07:f2:29:fc:34:b4:b2:96:f7:2f:23:1a:1a:
3d:04:c5:f9:96:48:26:0d:96:c7:fc:65:66:f7:20:cf:70:7d:
b7:d8:75:d4:3f:14:8e:46:7a:24:1a:b0:64:0a:74:42:5c:91:
d7:76:fb:42:1a:54:6a:27:c4:18:50:ba:d9:e7:e1:cc:04:bb:
fc:8f:8c:1c:ef:cf:cf:fc:c7:61:cb:39:8a:70:9a:2a:04:b1:
61:94:24:57:39:f8:63:d6:1e:d1:dc:98:44:27:9c:f5:8e:df:
a4:25:8e:94:cb:9d:d0:ac:2c:20:f2:34:24:54:27:d4:34:16:
27:fb:4c:1d:4b:7e:44:91:5e:59:d3:ef:66:c2:a6:28:61:2f:
8f:f9:28:52:5e:62:a6:a0:59:21:29:34:91:1d:67:54:f7:d2:
34:18:7a:65:8c:0c:b1:fa:0d:a9:4c:05:58:4a:f0:ac:2d:03:
1f:13:87:20:34:da:ad:98:56:1e:95:26:18:0f:5d:97:7a:13:
2c:8b:86:a6:cb:a2:f5:96:da:d2:7b:9d:84:d3:bc:85:cb:ef:
41:1f:bc:b8:6c:73:5a:d3:06:fc:76:59:38:12:1a:8a:39:a8:
fa:46:73:b7:29:49:c8:a8:ec:fd:d7:9f:77:48:72:72:c8:a7:
02:b0:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org