Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ChWKpUvtoLpbspIgiplLE-QST80.roa
File: ChWKpUvtoLpbspIgiplLE-QST80.roa (raw, json)
Hash identifier: WCsNiycIa12iT6HTYZn/pLyF5m3yhXznAaKflgHM3hY=
Subject key identifier: 0A:15:8A:A5:4B:ED:A0:BA:5B:B2:92:20:8A:99:4B:13:E4:12:4F:CD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ChWKpUvtoLpbspIgiplLE-QST80.roa
Signing time: Thu 15 Sep 2022 02:35:28 +0000
ROA not before: Thu 15 Sep 2022 02:35:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0A158AA54BEDA0BA5BB292208A994B13E4124FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:a1:14:72:56:1e:9c:c1:4f:f2:9c:2e:64:
b7:c1:d1:b3:33:7b:09:77:79:c6:db:1f:5f:41:76:
02:24:1d:eb:62:fd:92:f1:4c:eb:45:ea:53:f6:f4:
f5:eb:b1:d6:0d:46:48:1a:b0:ed:cd:d0:e6:94:48:
1d:3c:30:cc:7a:b4:45:ef:d4:64:32:d2:b8:1f:84:
99:95:fb:83:5d:38:80:6e:91:76:53:4c:ec:93:de:
ca:cf:e1:20:fb:81:40:e2:a4:51:f6:e3:0a:2c:f3:
be:35:08:d4:1b:e6:a8:65:29:3b:57:f4:a5:b6:b7:
1b:13:15:32:fe:0c:5e:d0:77:6c:43:45:33:2f:b0:
2e:4c:f8:6f:6f:0b:90:a0:8f:a8:11:16:ce:c9:53:
77:5e:3b:b6:70:95:96:af:4c:86:46:4d:76:76:91:
09:5f:ab:02:b2:f8:a6:01:8e:f8:87:8a:71:79:ff:
40:af:62:29:10:9b:8b:9f:70:a0:f2:31:22:5e:e2:
60:85:c7:99:9e:51:58:fe:b3:1c:00:71:31:30:70:
b4:92:10:34:6f:cd:b2:b0:f7:91:54:ef:a0:93:ca:
cf:01:46:05:13:c2:d1:34:15:c5:bb:db:31:fc:f4:
74:5b:5c:85:bc:07:89:36:4f:2e:b0:6f:88:9e:db:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:8A:A5:4B:ED:A0:BA:5B:B2:92:20:8A:99:4B:13:E4:12:4F:CD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ChWKpUvtoLpbspIgiplLE-QST80.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/21
Signature Algorithm: sha256WithRSAEncryption
94:04:75:ee:d4:80:ce:e9:b0:72:0a:8b:69:e4:ec:ee:51:5e:
21:68:97:2a:3d:cb:4a:57:84:10:1f:ec:da:6e:14:12:75:e7:
59:56:39:e5:35:a9:70:20:a8:00:0e:af:4c:db:1f:a1:c1:45:
1d:5f:66:ed:0e:e3:61:82:8f:72:b4:db:95:c9:d8:ca:e2:c3:
28:7d:f4:32:4a:28:12:20:81:3b:38:36:39:16:e1:b0:ba:9d:
1c:c5:c5:71:76:86:f5:89:a6:6c:c5:e5:8f:cc:19:22:8d:ac:
60:3e:bc:54:ad:9c:80:0c:6e:2f:73:e4:49:f2:f7:bb:3b:6c:
b8:90:39:8f:16:f0:cb:4e:5d:a4:ab:f2:30:6a:2c:a7:b1:78:
75:18:bb:2f:ba:9a:c0:da:e7:51:aa:0c:dd:dd:cf:f5:d8:f6:
d4:f5:cf:ff:63:c8:dd:92:c9:12:c3:7d:7c:1a:30:25:4c:c6:
d2:61:3e:cf:2f:8a:43:2c:bb:67:7f:44:ce:42:e8:b9:4f:eb:
71:c8:59:cb:56:fe:e8:d8:24:a6:73:5d:71:8f:34:82:ff:52:
f2:04:68:43:52:1c:dd:0a:c7:63:fa:32:5d:45:3d:e9:9b:85:
24:ca:9c:e6:67:99:1d:70:bb:3e:47:92:ec:7a:2c:72:c5:e6:
25:13:66:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:34 2023 by rpki-client on console-ams.rpki-client.org