Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EcrdSD6-Pd0WpqhUxL7r7dKdXeQ.roa
File: EcrdSD6-Pd0WpqhUxL7r7dKdXeQ.roa (raw, json)
Hash identifier: QaYIHoyok2ts++VSu7rMM+T3K8RshLOlOhYJJt7T0uQ=
Subject key identifier: 11:CA:DD:48:3E:BE:3D:DD:16:A6:A8:54:C4:BE:EB:ED:D2:9D:5D:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1526
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EcrdSD6-Pd0WpqhUxL7r7dKdXeQ.roa
Signing time: Fri 21 Oct 2022 08:24:40 +0000
ROA not before: Fri 21 Oct 2022 08:24:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5414 (0x1526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:24:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11CADD483EBE3DDD16A6A854C4BEEBEDD29D5DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:c9:0a:6b:35:40:79:ae:bb:a3:f5:32:a4:
c3:ff:d9:f0:7e:3d:8e:93:78:48:47:d3:da:a8:bc:
fa:3f:60:94:1f:e7:de:c8:5d:96:fc:7c:79:21:15:
cc:92:fa:85:54:95:77:19:88:29:89:7a:2b:50:cd:
3f:6b:e4:27:85:c2:da:10:bc:72:dd:4d:2c:c4:c1:
ab:d5:73:48:07:50:e4:2c:f1:1a:6a:0f:fe:00:58:
e9:ee:0f:f8:1d:34:d4:2c:21:22:08:1f:b3:7d:eb:
95:0a:a7:b7:c4:25:72:47:8d:3a:42:44:f9:27:5a:
7c:f0:5b:c2:ea:4d:01:f4:70:99:93:ee:42:a0:6c:
f1:ea:84:ac:dd:b6:eb:20:d8:54:88:5c:d4:5f:76:
c9:bb:7a:15:70:a7:d0:6e:81:48:45:1b:83:33:9b:
04:ef:d4:3a:24:5e:37:95:80:39:41:33:c4:75:a3:
79:ce:ac:9f:11:00:78:d9:37:3f:8d:f5:dc:7e:22:
14:df:5e:37:b9:d5:b8:df:f2:89:2f:1f:eb:cb:94:
22:e8:78:17:40:cc:b1:db:52:ab:99:1c:1d:02:4d:
fb:5a:4b:26:e7:91:2d:3c:e5:4e:9e:85:fc:a2:29:
ac:79:7a:08:95:02:20:3b:53:be:4c:99:6b:d4:87:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CA:DD:48:3E:BE:3D:DD:16:A6:A8:54:C4:BE:EB:ED:D2:9D:5D:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EcrdSD6-Pd0WpqhUxL7r7dKdXeQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.104.0/21
Signature Algorithm: sha256WithRSAEncryption
66:26:67:b1:39:77:53:b2:4a:9b:dd:08:9a:58:7b:67:18:f3:
fc:d0:77:23:9b:e5:03:6a:7b:e4:33:f3:09:ad:c1:f5:0b:4f:
15:2c:4e:c1:75:36:71:a5:75:1e:5e:6f:7c:47:0f:02:df:f8:
50:eb:af:39:7d:06:d4:e9:a3:89:a4:bf:6b:72:2f:a5:ff:19:
08:18:2b:7b:2c:74:f4:dc:d1:7a:ee:48:b7:d4:c3:4e:60:42:
f7:94:9b:50:1a:37:51:c4:9b:60:69:9e:97:c6:42:14:45:1d:
38:7e:01:12:5e:ca:49:14:5c:bb:46:28:65:0c:74:4d:ed:14:
18:80:1c:51:8b:7b:dd:66:54:7e:cf:fa:34:89:14:28:59:83:
76:86:c0:12:e0:1c:c9:a5:9e:5a:63:33:9f:e9:c4:3e:80:1b:
cc:7c:8e:88:ac:24:c0:ad:4d:d7:ac:a1:22:ca:16:fd:1b:37:
ae:a6:25:53:67:55:38:b2:ef:ff:5f:64:af:35:77:16:fe:7b:
26:59:8f:a3:c6:91:ee:55:77:ab:c2:a9:aa:32:e0:40:cb:e0:
de:e7:52:2a:02:c6:ad:46:9f:1e:cf:f6:87:ae:8a:10:55:fa:
1b:15:ad:f5:cb:23:39:01:f5:51:a5:11:e7:ec:cd:d2:97:74:
c6:3c:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org