Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BwZYBPhpyizEUeBD9AN_xjg1P7Y.roa
File: BwZYBPhpyizEUeBD9AN_xjg1P7Y.roa (raw, json)
Hash identifier: KswU4QgemnQvM5MiZXqGdRCCi78VIQyKeq6naowZFOY=
Subject key identifier: 07:06:58:04:F8:69:CA:2C:C4:51:E0:43:F4:03:7F:C6:38:35:3F:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19C2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BwZYBPhpyizEUeBD9AN_xjg1P7Y.roa
Signing time: Sat 22 Oct 2022 06:08:58 +0000
ROA not before: Sat 22 Oct 2022 06:08:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6594 (0x19c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:08:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07065804F869CA2CC451E043F4037FC638353FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:37:02:6d:a1:dd:23:da:f8:07:88:a3:ac:
52:cc:92:ca:29:a4:28:d2:08:12:12:53:f6:dc:1a:
00:e4:60:64:69:1b:26:35:d9:3a:5c:97:64:61:7f:
de:24:db:7e:03:37:48:c5:aa:f6:d6:0d:1d:f7:5c:
9c:53:9e:35:71:2a:df:8d:ba:cf:76:a4:70:d3:ff:
70:11:0b:13:31:af:77:ea:ac:e4:91:93:45:2b:52:
35:25:5f:fb:a1:68:13:2c:4f:8c:21:54:87:4c:c0:
11:57:79:9d:c6:4d:82:d5:b8:5c:14:de:06:bd:ad:
ce:0f:19:11:eb:98:6f:23:9d:b2:3a:99:ae:79:0c:
03:ac:66:e5:4e:aa:14:24:6a:a5:81:93:4d:8b:b3:
51:25:96:a2:f4:71:07:9d:3e:92:49:01:59:89:e5:
e9:c8:8d:31:72:4d:3b:41:50:55:9f:e1:81:50:00:
c6:7e:b6:fd:fd:e4:56:24:26:0a:06:18:4e:14:50:
30:ab:e2:ae:3e:f2:18:65:fc:1c:75:05:3a:07:d9:
6a:34:b0:8a:ef:55:0e:56:09:80:79:f1:3a:3c:c5:
ab:84:05:03:08:e3:8e:2c:18:24:00:b3:04:b3:f6:
56:24:46:67:8f:a6:dc:72:79:74:d6:02:ac:02:54:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:06:58:04:F8:69:CA:2C:C4:51:E0:43:F4:03:7F:C6:38:35:3F:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BwZYBPhpyizEUeBD9AN_xjg1P7Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
38:6e:08:e0:57:ab:18:b9:7f:a0:b9:e0:2d:43:b8:e4:c7:0f:
cf:83:39:8d:d5:c2:b7:0e:9e:a1:26:1e:57:47:8e:3f:bd:a2:
68:c1:89:4b:ee:78:cd:a7:a9:f6:f3:b0:38:b4:b7:76:5a:54:
01:a8:c3:5d:66:43:b2:c6:de:f4:1b:06:8c:f4:d1:f9:87:2a:
b5:5f:a3:fe:cc:6d:d2:4a:04:cb:43:f5:d0:eb:65:e2:f1:bf:
0f:97:0b:82:ab:be:d5:ef:bf:52:61:e8:49:23:8d:be:39:cb:
d3:15:a9:eb:ab:07:69:bf:22:e3:81:aa:db:63:0f:7e:40:3f:
7e:ae:eb:40:0b:17:3e:49:e0:f4:f8:1e:d5:9d:c2:52:8a:23:
d5:44:d1:c7:a5:33:a7:86:ff:b3:e8:1e:8a:fd:31:08:0f:e3:
05:44:35:3a:f1:87:e7:b0:7e:be:e1:7d:da:f8:58:2e:6e:fd:
2b:41:f5:56:19:31:a9:39:62:a7:4a:04:58:14:ce:3a:f3:a7:
86:74:87:ed:70:ec:ea:89:4e:a1:e0:50:0c:c7:d4:73:d2:63:
c6:0d:bb:8d:46:6f:9b:a2:6d:bf:57:b6:57:37:b1:da:54:7f:
b4:65:d9:b7:54:de:87:25:10:dc:5e:dc:24:bd:92:c5:53:b8:
1c:87:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org