Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/99O1QRZRmB4S2t9-y3remv86Q2M.roa
File: 99O1QRZRmB4S2t9-y3remv86Q2M.roa (raw, json)
Hash identifier: mKksBlB+u9NpY/S9ApFWosOJFwP3oytLqePt90X2O2g=
Subject key identifier: F7:D3:B5:41:16:51:98:1E:12:DA:DF:7E:CB:7A:DE:9A:FF:3A:43:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19BA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/99O1QRZRmB4S2t9-y3remv86Q2M.roa
Signing time: Sat 22 Oct 2022 06:08:32 +0000
ROA not before: Sat 22 Oct 2022 06:08:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6586 (0x19ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:08:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F7D3B5411651981E12DADF7ECB7ADE9AFF3A4363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:52:0f:1d:dd:67:74:e8:c8:96:0b:3d:2a:
d3:6a:8a:48:31:35:fa:dc:d7:c9:7d:68:ef:e7:5b:
07:d1:8d:78:2c:63:7f:0a:33:f2:03:76:95:d2:4f:
21:06:b1:31:5e:6c:aa:9f:dc:9e:0b:a2:61:11:75:
aa:9c:eb:7a:32:7c:fc:3c:a9:d0:4e:6e:a1:86:a6:
29:cd:89:d4:75:12:e0:bd:62:aa:a0:e3:88:46:38:
06:84:81:83:c5:7d:58:e9:83:25:0a:75:3f:09:5d:
13:b0:04:17:8e:45:6b:3a:23:3b:bf:bb:96:3d:98:
f0:52:1b:11:fb:09:05:a4:e2:b9:af:8f:cc:1b:47:
df:04:aa:92:9d:d3:bc:88:b4:21:31:52:c9:40:5d:
0b:2b:8f:41:60:e8:56:69:04:88:c4:03:b3:2e:29:
d2:22:37:38:b0:9a:3f:00:76:aa:d6:63:eb:60:3b:
e5:c3:65:34:e5:0f:75:ae:40:71:30:1d:7f:1a:d1:
6a:58:3f:31:00:76:3e:5e:90:8a:fa:fc:14:82:2a:
d0:20:5f:d2:3d:bf:98:6f:f6:a4:e2:c4:38:c4:fe:
21:f3:97:d5:ce:60:1e:c3:0e:f1:91:30:bd:28:09:
1c:d6:d3:d8:57:e6:89:07:7f:eb:51:be:52:d9:cd:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:B5:41:16:51:98:1E:12:DA:DF:7E:CB:7A:DE:9A:FF:3A:43:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/99O1QRZRmB4S2t9-y3remv86Q2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
95:a1:d9:d7:de:b4:03:bf:fc:71:d8:bb:77:f8:62:1d:8c:25:
de:ae:9b:ea:80:3a:fa:0b:5d:04:ac:95:33:f5:ef:2d:16:02:
94:16:5d:54:e5:52:c6:4c:96:a5:ee:d4:f2:0f:56:68:a9:05:
8c:2c:a5:06:1f:cc:11:03:4a:99:0d:00:7f:b0:10:3f:9e:7e:
7e:71:a1:0b:6a:1b:d6:32:6e:b8:8f:58:1e:a6:4e:85:55:b0:
88:0f:e8:91:31:83:cc:ee:df:d8:15:c6:99:80:88:00:25:6c:
cb:46:4c:03:c6:b9:03:c6:e6:b8:e9:a2:17:27:a8:12:08:34:
2c:af:04:d5:e3:0b:43:3a:e0:dc:d7:10:c9:6a:d3:54:8d:ea:
f3:c5:8e:6c:c8:c2:95:98:4f:4a:d3:a3:1d:6c:db:b1:54:40:
45:a8:0e:09:78:2d:67:be:80:42:14:b1:e7:55:dc:6d:ef:d8:
10:b2:09:ec:fb:10:36:63:fa:ed:e9:4a:cc:a3:a3:8d:1c:db:
bd:0f:62:67:9b:fd:5d:1c:a1:eb:b2:7c:48:b8:d8:6a:e5:4c:
b7:4d:af:cf:6f:b3:a5:06:09:11:65:4a:83:e4:16:bc:7a:29:
4f:5b:89:e2:21:9d:17:9a:54:4e:34:49:21:f2:ef:a0:53:f9:
a7:28:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org