Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A_hPHUo3YX38ArNvjO3lCPSgD-U.roa
File: A_hPHUo3YX38ArNvjO3lCPSgD-U.roa (raw, json)
Hash identifier: SmGiNkjAhjrEzU2GQSvVBS/gMMGsrhyd39sdUiPnfuA=
Subject key identifier: 03:F8:4F:1D:4A:37:61:7D:FC:02:B3:6F:8C:ED:E5:08:F4:A0:0F:E5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18CA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A_hPHUo3YX38ArNvjO3lCPSgD-U.roa
Signing time: Sat 22 Oct 2022 06:03:52 +0000
ROA not before: Sat 22 Oct 2022 06:03:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6346 (0x18ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:03:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03F84F1D4A37617DFC02B36F8CEDE508F4A00FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:8b:f2:67:78:d1:77:2c:9b:9b:b0:20:ea:
5c:74:6a:fa:77:09:9f:97:81:7d:22:84:29:da:2b:
b7:5b:a1:22:2a:9c:fd:d1:78:f9:f1:aa:ea:fc:19:
64:26:6e:54:e2:1a:55:1c:a8:56:8c:29:0b:b7:13:
42:d6:8c:3c:22:73:74:91:36:1a:91:cb:09:58:51:
1f:ab:ef:fa:a8:33:05:80:3a:c2:93:be:02:a7:05:
31:88:bb:c9:63:8e:85:78:4a:bc:4a:81:74:08:4f:
d6:16:21:f5:99:da:3e:bf:5e:35:82:44:c6:8d:c5:
97:dc:57:dd:bb:a9:1f:2a:56:b1:fc:6a:61:9d:c9:
29:cb:53:65:de:36:7c:d7:a2:16:d8:b1:7c:82:0d:
23:63:75:dd:a1:84:af:77:9a:db:40:58:62:d6:07:
fe:b3:5d:05:e6:61:2a:67:62:80:16:ae:a4:a9:70:
23:a4:d5:ee:e8:b9:71:df:76:a7:5f:03:c0:19:d9:
8e:7c:d6:9f:27:25:16:30:77:03:76:8b:4b:a3:d6:
8b:70:fd:54:32:d6:1c:e2:33:93:3b:00:e8:66:c7:
cd:5b:4c:4d:99:dd:a6:5c:b9:2a:86:6d:56:a3:99:
97:00:01:04:1b:5b:47:e6:56:74:25:ec:cf:0a:94:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:4F:1D:4A:37:61:7D:FC:02:B3:6F:8C:ED:E5:08:F4:A0:0F:E5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A_hPHUo3YX38ArNvjO3lCPSgD-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f0:9e:d0:1b:5f:2a:0f:1d:d0:2e:b4:3f:f0:16:2b:a1:29:
0b:05:02:09:28:32:23:8a:60:e2:8b:fa:54:94:2c:6d:96:1e:
ea:08:59:51:84:83:70:44:5a:88:bd:67:3a:e1:a6:4c:0b:2f:
32:16:d4:7e:a5:8e:7a:26:3c:80:66:b8:c4:50:f4:e0:c2:be:
fb:14:ae:ed:b3:02:2f:f0:55:bb:6b:42:6f:66:17:49:ae:c0:
aa:2d:94:71:a6:11:6a:b0:bf:c3:7d:76:0f:fd:2c:18:8b:a4:
0d:ff:ad:95:a1:77:c1:37:2b:25:27:47:65:f5:5c:14:7c:bf:
65:34:53:a0:95:ca:43:41:b2:a5:d2:d3:d3:f8:1c:33:d9:e3:
2a:1e:cd:72:ce:48:95:12:8d:16:a3:0c:21:c7:89:af:b0:d5:
b5:0f:88:a8:e7:86:01:b4:5d:7a:0f:ab:84:e0:f5:7d:fc:12:
4f:b5:ae:c7:43:e7:c5:ea:17:3a:99:fe:b9:65:b1:1f:c8:43:
f0:83:23:b2:99:7d:79:4b:b8:78:c8:7e:ad:4b:8a:ce:e6:ef:
79:b9:0e:fc:33:9f:58:60:7f:86:85:53:7a:56:23:7c:de:d1:
64:2d:f7:36:97:a0:9a:f1:0a:ae:76:0b:8a:93:b3:86:bd:56:
77:af:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org