Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FfpPJcrDSB0DHx6YuPb-J08dzbY.roa
File: FfpPJcrDSB0DHx6YuPb-J08dzbY.roa (raw, json)
Hash identifier: BPSzOcpq+hVRozW0EVvsi73dpsOtY4TFmM2KKawF8sI=
Subject key identifier: 15:FA:4F:25:CA:C3:48:1D:03:1F:1E:98:B8:F6:FE:27:4F:1D:CD:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1977
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FfpPJcrDSB0DHx6YuPb-J08dzbY.roa
Signing time: Sat 22 Oct 2022 06:06:33 +0000
ROA not before: Sat 22 Oct 2022 06:06:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.208.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6519 (0x1977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15FA4F25CAC3481D031F1E98B8F6FE274F1DCDB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:e6:8c:92:78:91:8a:ce:d6:1e:00:c3:4d:
f8:01:f5:7b:41:e4:e5:59:c8:67:dc:09:cf:18:22:
7c:d7:47:ac:38:6c:58:d6:04:af:da:a7:48:7f:1d:
29:aa:78:31:66:26:75:a0:a8:fe:13:ac:13:00:99:
bb:3b:78:d7:c9:ad:e9:bc:7d:85:35:ef:33:a1:74:
49:6f:7b:9c:90:da:9f:58:2e:a0:23:31:3e:52:a8:
f4:14:3d:77:8c:81:00:00:ee:c2:d0:04:8d:37:a1:
09:f0:86:b2:bd:ca:a1:34:b1:30:b4:ff:e6:34:72:
f9:3f:f7:ea:1e:c7:fb:c4:07:b2:d6:8b:57:52:21:
e6:65:91:2e:44:fa:a5:7f:da:29:b2:e6:e6:96:ab:
d5:45:ef:8f:4e:9d:a6:f0:73:88:5d:3c:84:84:12:
f2:b2:f7:26:e4:90:4a:20:4e:b6:02:b7:87:2a:5c:
d2:a7:54:97:fe:4f:10:7b:0f:99:5f:b2:a0:74:97:
ea:45:1e:2f:6b:5f:7c:33:ed:b0:5d:74:80:c3:b8:
2f:b8:45:98:4f:66:11:54:d5:09:b6:cb:8d:01:2f:
1c:58:d5:75:c1:37:84:78:7c:24:6b:57:61:6b:b6:
36:6e:72:7c:7d:2f:f9:fe:f0:53:f5:21:35:6a:62:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:4F:25:CA:C3:48:1D:03:1F:1E:98:B8:F6:FE:27:4F:1D:CD:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FfpPJcrDSB0DHx6YuPb-J08dzbY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:da:71:f7:a0:a8:24:14:d9:2c:15:eb:37:5b:1e:71:b3:05:
91:b6:45:cf:39:f8:bc:e1:cf:d5:98:0a:4d:39:96:27:83:9a:
4b:6a:13:1c:0d:87:59:5c:6a:97:3e:53:9a:37:be:e5:6a:62:
03:42:a6:22:ec:f6:9b:61:35:f8:01:da:82:c8:7d:3e:a7:1a:
60:51:1b:9d:11:57:1f:53:e2:96:91:01:28:3d:c8:5c:82:7e:
7f:8e:f9:60:17:78:1e:7e:92:82:26:fa:d6:28:11:09:86:39:
2c:77:25:cf:5c:60:dc:46:87:63:f4:98:f7:e7:e7:28:de:f3:
9e:94:2f:02:17:1a:fa:70:19:99:d6:60:25:36:41:1e:88:a5:
e2:d3:78:d9:94:af:70:39:f4:be:9d:4b:02:5c:3f:ca:b1:2e:
09:84:15:9a:5a:fc:e5:96:0f:5b:bd:b7:fb:66:d3:cd:22:07:
1f:14:2b:c7:8a:d0:4d:37:0c:dd:e1:1b:28:6e:3c:08:fd:26:
3c:71:d1:af:4e:00:1c:6c:ff:02:d4:00:38:fd:c6:3c:8c:1c:
2e:8c:26:c9:16:cd:d3:56:0e:ec:16:d2:9b:5a:f7:25:5e:31:
35:76:6b:4d:e9:d1:e2:0f:ae:34:5d:a6:35:20:19:5d:6a:af:
ea:f7:ab:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org