Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EAz0SXxLra48ZVFdSQK8JfHGGBs.roa
File: EAz0SXxLra48ZVFdSQK8JfHGGBs.roa (raw, json)
Hash identifier: 2nUdhDbd1eoJETjQGxNlioJp/gmtnIhnXiK6ZPYslYM=
Subject key identifier: 10:0C:F4:49:7C:4B:AD:AE:3C:65:51:5D:49:02:BC:25:F1:C6:18:1B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EAz0SXxLra48ZVFdSQK8JfHGGBs.roa
Signing time: Thu 15 Sep 2022 02:36:03 +0000
ROA not before: Thu 15 Sep 2022 02:36:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=100CF4497C4BADAE3C65515D4902BC25F1C6181B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:85:a5:01:b7:0e:84:33:29:95:3e:81:de:
8c:bf:d6:27:e2:b0:b0:44:32:02:69:04:d3:4c:08:
d7:b8:05:38:b6:d2:dc:c6:3f:7d:54:12:cf:41:ce:
51:ff:df:b5:18:a3:93:fd:d0:21:67:9c:f1:28:b9:
d8:ab:23:ea:8d:e4:84:7f:17:62:d8:c6:b1:69:2d:
99:e7:af:de:c5:bb:d2:d9:5c:ed:5f:0a:96:53:73:
ed:67:bb:2a:b6:81:8d:77:f9:b0:e5:e0:99:08:36:
c2:df:5c:fc:04:4d:32:4d:f0:90:80:b9:33:2a:ce:
64:ef:a0:5d:de:54:b1:ba:d3:73:92:d0:80:79:1b:
3e:6d:89:27:c4:b7:9e:7e:49:be:dc:da:c7:e6:da:
29:bb:c0:b3:f4:da:84:4b:b0:3e:a6:ca:46:3c:dc:
f5:58:2c:ba:de:5d:45:64:01:fe:ca:1f:19:94:35:
ee:90:ca:13:2a:66:0d:28:77:30:dd:a8:04:71:59:
53:4b:08:4b:a6:0e:38:dc:33:db:29:f9:69:31:fa:
88:42:6f:95:1d:70:b4:a2:26:da:ab:d4:52:c5:42:
8a:9f:f1:22:98:77:a1:83:a2:dc:6c:26:f5:05:46:
2c:0a:4c:ff:03:0c:4c:b9:8b:c3:31:be:fa:67:ab:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:F4:49:7C:4B:AD:AE:3C:65:51:5D:49:02:BC:25:F1:C6:18:1B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EAz0SXxLra48ZVFdSQK8JfHGGBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.236.0/22
Signature Algorithm: sha256WithRSAEncryption
86:bb:b2:0b:85:b1:0d:b8:61:17:b1:5d:46:a3:aa:0d:0b:8f:
cc:ce:44:fb:43:a9:8d:38:2f:a0:b5:76:5e:3c:ad:70:da:a3:
db:0b:50:fd:6c:82:68:93:6e:bb:c4:c9:3b:35:8f:a4:e5:9e:
8f:c8:f4:ce:76:3e:60:d0:c3:c6:98:9c:a5:99:77:37:74:08:
89:db:ec:c3:d9:87:0a:a0:fa:dc:cc:7d:f2:d1:3d:c0:55:ba:
9b:91:2e:af:72:ea:58:65:2f:1f:29:4a:b2:e8:81:83:e8:10:
57:af:01:b5:0b:50:56:78:0c:2a:d7:35:44:9d:2b:68:23:4c:
f4:8a:1c:36:01:c7:de:ee:4f:89:30:ab:ec:af:aa:22:67:09:
8f:3f:19:d2:72:c2:09:79:51:a5:4c:72:c7:31:f9:23:23:75:
d8:89:e8:82:34:ef:63:79:89:e0:93:44:7c:2d:2e:a0:30:ef:
bc:65:fd:c5:25:2c:5e:2c:49:a8:2a:e0:0f:8e:a1:09:8e:a4:
97:fa:cb:7e:9d:3e:2c:87:7b:b9:fa:23:57:63:54:e2:3a:bc:
0f:54:37:2b:c5:dd:99:bb:e1:b6:71:4c:63:51:69:7e:f3:f4:
f8:8d:40:37:b6:0e:52:4c:fe:ee:41:c4:74:84:bd:89:93:b5:
06:b6:d2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org