Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmBZz15o6vMm1ZxovXov8FM6Al8.roa
File: FmBZz15o6vMm1ZxovXov8FM6Al8.roa (raw, json)
Hash identifier: hB3un27HYtBqZVmjY9/BURdmzTz9jSNPSdT2/KIFJNY=
Subject key identifier: 16:60:59:CF:5E:68:EA:F3:26:D5:9C:68:BD:7A:2F:F0:53:3A:02:5F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1931
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmBZz15o6vMm1ZxovXov8FM6Al8.roa
Signing time: Sat 22 Oct 2022 06:06:12 +0000
ROA not before: Sat 22 Oct 2022 06:06:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6449 (0x1931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=166059CF5E68EAF326D59C68BD7A2FF0533A025F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:02:03:8c:4b:40:27:11:43:4d:f1:e0:07:
39:88:10:f9:b9:4d:7e:2e:e7:15:5e:f1:aa:4b:74:
c6:5d:c6:be:22:f5:4a:8b:ac:25:d3:be:f7:4d:21:
a7:d0:86:6c:ce:25:b1:f5:0e:c1:2e:e9:3f:e6:83:
34:de:e9:51:55:8f:d6:cc:e9:cc:cd:eb:05:c0:40:
49:ea:d7:ab:89:2f:c2:1c:ea:2e:09:ba:3a:6d:77:
df:30:c4:9e:d1:c5:78:8a:c0:97:c4:b0:67:5d:11:
37:bd:b1:60:8c:8d:05:b9:f1:dd:e4:66:cb:e3:9f:
58:d2:38:95:b1:de:41:a0:6d:cb:76:06:9a:15:2f:
38:38:15:3d:9e:6a:57:ba:ea:29:02:e5:23:2f:77:
ac:90:a6:cc:42:1d:b2:cf:e2:93:cf:06:b6:d5:65:
45:7d:8e:6c:a0:c0:02:c1:bc:ae:df:5d:79:d1:bc:
15:46:23:ab:fa:8a:43:34:49:88:72:48:bf:5c:fb:
4c:5d:9c:d8:dc:0a:b6:34:16:14:03:ce:a8:a0:db:
e3:70:4c:e0:b6:b2:08:0c:cb:f1:89:ca:86:e4:6b:
3b:35:49:f8:75:d8:eb:7c:69:2f:bc:62:c3:a0:cd:
51:08:53:bf:e9:8d:e6:89:3d:6c:b0:0f:9b:a2:6c:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:59:CF:5E:68:EA:F3:26:D5:9C:68:BD:7A:2F:F0:53:3A:02:5F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmBZz15o6vMm1ZxovXov8FM6Al8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.56.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1a:c1:f2:dd:d1:16:f7:91:ed:8c:51:a7:d0:24:d2:65:93:
5d:8f:6b:7d:1e:8d:8b:d6:33:49:b2:bc:10:bb:35:40:00:41:
83:7b:0d:f9:8e:a3:df:db:80:22:98:09:f2:5b:e2:eb:a3:7f:
b3:cc:b7:e1:03:c6:61:38:00:a9:d3:57:c2:6e:67:e2:88:07:
44:82:c0:dd:51:dd:e3:b3:76:ff:c5:65:6e:a4:29:e9:de:72:
58:45:0f:73:80:f0:0d:5f:50:71:56:3b:65:11:48:53:ac:0a:
5a:ec:f8:33:02:bd:ee:e7:27:3a:d7:0a:98:74:c0:17:c3:a3:
36:36:64:37:e0:d2:30:b1:d3:57:3b:c2:e2:b0:e2:78:fb:b4:
4f:40:c7:7b:92:75:ac:01:b4:3e:2e:9e:08:87:e4:0b:20:bd:
ef:c5:45:fa:37:42:40:09:18:53:dd:e9:42:d2:7c:61:48:30:
e4:76:c4:9f:03:e4:c5:80:e5:1d:b5:c9:b7:7f:3e:20:d8:9a:
ea:d9:0b:9f:4f:a5:c1:e0:47:d0:55:0b:d5:aa:1e:0d:f4:1e:
ee:3c:b8:96:6a:54:78:1a:82:0f:a6:b2:ff:20:ad:4d:85:2b:
1d:79:b0:25:e2:be:fb:b4:d4:d9:ce:6b:c3:81:c0:11:a7:76:
0e:81:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org