Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BNBvS7CAf5Hhzmuxj_G1u-UfVmU.roa
File: BNBvS7CAf5Hhzmuxj_G1u-UfVmU.roa (raw, json)
Hash identifier: qodvI8hSab6LoXbvb4a4wxt/aS2lbTACA5XTH4roM+I=
Subject key identifier: 04:D0:6F:4B:B0:80:7F:91:E1:CE:6B:B1:8F:F1:B5:BB:E5:1F:56:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B9E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BNBvS7CAf5Hhzmuxj_G1u-UfVmU.roa
Signing time: Tue 06 Jun 2023 08:04:36 +0000
ROA not before: Tue 06 Jun 2023 08:04:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.176.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7070 (0x1b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jun 6 08:04:36 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04D06F4BB0807F91E1CE6BB18FF1B5BBE51F5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:b4:62:11:ba:d0:05:41:9a:01:ea:4a:da:
4b:ee:ee:c5:4f:e1:ff:92:03:3a:47:5a:e4:ab:85:
19:85:0b:f8:d6:70:a2:52:c6:bf:55:61:29:58:ec:
44:98:49:61:17:2b:51:53:46:e6:4f:af:df:a6:1b:
49:11:90:a0:f7:d1:08:e6:bc:bd:3f:9c:e1:26:c9:
03:e4:db:69:66:81:4f:6b:9b:51:66:ac:e5:47:00:
17:f9:53:9c:aa:77:2b:33:f7:7f:ee:d4:7b:15:7f:
c9:70:38:3d:3d:25:8b:37:52:27:55:89:a9:2e:7b:
26:5f:2c:a1:8c:8d:0c:b3:17:f3:49:8a:5b:f5:2f:
c2:cf:90:53:2e:19:4d:8a:2d:e4:4a:e6:4a:cb:5a:
de:83:81:eb:71:a9:11:f9:44:1d:c2:79:50:28:f8:
88:72:af:f5:47:ce:c0:ac:da:eb:f1:22:66:07:7d:
cb:93:db:0e:40:20:ff:05:16:35:89:05:1c:1e:a8:
83:fa:79:87:75:ee:6a:7e:f0:01:3b:7d:9a:32:15:
d8:91:dd:ec:f3:94:d5:38:bf:e0:03:f0:a8:e7:90:
88:66:f0:8e:2b:94:56:65:f8:2d:75:7a:1f:2c:ce:
5a:34:9e:42:da:8c:2c:fb:bc:c9:27:f8:f8:86:1b:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:6F:4B:B0:80:7F:91:E1:CE:6B:B1:8F:F1:B5:BB:E5:1F:56:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BNBvS7CAf5Hhzmuxj_G1u-UfVmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
21:38:fe:26:55:f6:35:03:2f:5a:30:86:2e:52:e6:b5:5e:ff:
69:de:52:91:97:77:81:1b:5d:f2:19:66:65:a6:7b:8a:66:3f:
a5:6a:5b:12:83:70:df:58:6b:51:f8:5b:66:b6:97:65:1b:c6:
c1:75:77:f8:d8:74:6a:11:94:f4:be:4b:b6:a1:47:70:2c:cf:
e2:58:88:65:0c:4b:ae:e7:d5:28:f6:59:73:ed:6c:fe:06:d7:
de:e8:0e:e6:9a:6d:89:8a:eb:59:8f:08:9b:4e:fc:61:dd:20:
21:7d:22:16:4d:60:03:97:6d:cb:30:c9:ac:b6:92:36:a7:db:
f7:3f:1c:89:66:62:30:29:91:8f:0d:21:6c:c2:23:4d:87:dd:
3d:19:f4:68:42:cf:59:a2:08:c2:cc:ac:c1:b7:39:fd:79:1a:
0e:f6:75:55:5a:c4:9e:47:7f:ff:42:92:d0:41:2e:1a:17:80:
14:cd:55:4e:1d:84:54:6a:3c:b8:f5:3b:89:83:7a:a5:e6:5f:
46:ba:24:59:0d:6b:a1:a8:43:e3:ef:e0:49:0d:a8:e9:d7:19:
ef:33:f0:1c:a5:38:9f:6a:3c:be:12:ef:1a:8b:6e:1d:3f:b0:
8a:61:20:55:17:fd:3f:0a:93:57:72:30:48:6b:5c:53:cb:85:
c1:ea:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org