Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BPQ_7voA6Jr3kMnKpFKC3oS33wA.roa
File: BPQ_7voA6Jr3kMnKpFKC3oS33wA.roa (raw, json)
Hash identifier: xCju61sv4uqfQKxpSZG/6RkLnnrcAj6DIUdgcy1Vkk0=
Subject key identifier: 04:F4:3F:EE:FA:00:E8:9A:F7:90:C9:CA:A4:52:82:DE:84:B7:DF:00
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19B6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BPQ_7voA6Jr3kMnKpFKC3oS33wA.roa
Signing time: Sat 22 Oct 2022 06:08:19 +0000
ROA not before: Sat 22 Oct 2022 06:08:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6582 (0x19b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:08:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04F43FEEFA00E89AF790C9CAA45282DE84B7DF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:1d:e8:50:f0:e6:8f:7e:62:d3:59:1c:01:
10:48:37:b1:ae:55:2a:93:64:e9:61:5f:1c:22:d7:
65:d6:22:4f:af:2d:9f:64:f2:cb:c5:52:bb:c9:db:
b9:59:8f:fb:9a:06:8c:56:e2:6a:b8:54:7c:cb:55:
e3:58:aa:6d:45:82:59:de:d1:26:dc:a7:ba:4c:b1:
f4:26:a1:45:35:e7:a5:31:13:3d:6b:43:a9:3d:10:
c0:97:65:9a:d9:07:34:4a:18:34:1d:b8:6f:0b:37:
e8:b1:6c:0e:6c:f1:f8:db:3f:38:af:5b:0a:30:15:
24:8a:e9:12:80:2d:99:d4:8b:20:1f:e2:1e:3e:28:
d1:9e:ce:5e:db:2b:98:ae:ec:8a:31:f3:d8:c3:e9:
67:5e:48:00:34:c0:82:0b:1c:aa:21:56:47:77:ab:
b3:97:33:36:42:2b:87:c0:c3:54:65:6d:1b:44:fb:
06:6a:0b:e5:a4:88:00:d4:22:90:19:76:05:5f:d8:
5f:68:31:06:bc:4c:e6:a1:39:c5:95:93:01:c0:65:
91:65:50:a9:d8:a8:55:8f:4c:c2:91:5b:cc:ff:fe:
31:97:6b:e8:7d:6f:1a:5c:db:b3:0c:53:68:47:90:
6c:f9:e1:5c:d9:ba:5c:ff:d7:82:e7:17:82:ba:60:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F4:3F:EE:FA:00:E8:9A:F7:90:C9:CA:A4:52:82:DE:84:B7:DF:00
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BPQ_7voA6Jr3kMnKpFKC3oS33wA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.220.0/22
Signature Algorithm: sha256WithRSAEncryption
31:55:6e:f5:05:6a:6b:82:ec:1a:a5:e9:66:56:44:53:18:51:
ca:26:48:cb:ee:90:4a:85:f5:2a:cb:bc:f5:1b:d1:67:ea:03:
62:8e:40:31:f5:8d:4f:f2:46:3d:68:e4:35:10:ad:dd:2a:2b:
cc:2c:34:89:59:79:93:ee:66:9d:c7:bb:ee:d7:f5:a5:8c:29:
58:64:ab:e8:a3:e4:d3:36:3c:dc:e0:4f:28:a7:6a:20:da:fa:
0f:a3:13:0d:da:80:ee:95:63:54:87:8c:64:41:78:3d:66:35:
e1:5b:f7:af:0b:b3:63:d8:13:8e:25:1b:de:d4:84:c2:9e:6f:
a9:31:2b:fc:24:7e:e8:10:fd:35:fd:0f:c0:8a:46:83:02:07:
87:7c:28:dc:7c:20:97:aa:b8:0d:60:05:80:c6:9e:48:5d:da:
99:b9:af:dc:d2:11:b9:04:e1:bf:a0:7b:8d:15:0a:43:68:fb:
eb:af:ac:16:bf:cd:20:10:d6:2b:2c:cd:a0:05:a1:07:dc:e1:
2f:f8:31:bc:ac:81:38:8c:c4:72:4a:87:ca:71:80:8f:3e:6b:
62:ee:4e:32:a3:03:3a:6c:6c:66:1c:90:d5:23:35:c9:92:7e:
d1:f0:e4:04:6b:db:41:c0:a3:83:a0:9d:ff:e4:05:46:ee:ba:
2f:75:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org