Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4L1BxnpNqJJbiAwgCVuYqFysMw.roa
File: G4L1BxnpNqJJbiAwgCVuYqFysMw.roa (raw, json)
Hash identifier: Qt66wRqkJGAH1JC2o785nUe4bqeyjteZ3ot47dHNstw=
Subject key identifier: 1B:82:F5:07:19:E9:36:A2:49:6E:20:30:80:25:6E:62:A1:72:B0:CC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4L1BxnpNqJJbiAwgCVuYqFysMw.roa
Signing time: Thu 15 Sep 2022 02:35:40 +0000
ROA not before: Thu 15 Sep 2022 02:35:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B82F50719E936A2496E203080256E62A172B0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:82:36:ab:dc:28:62:d4:3d:ec:d0:85:0d:
f5:19:e2:61:0b:e9:e3:22:2d:fd:83:f9:00:a2:ee:
d9:34:ba:32:f2:b5:e6:af:3e:98:05:a8:5e:9e:f3:
8d:17:e8:c4:28:0d:2a:c8:6e:99:79:d8:55:39:bf:
37:a1:b6:1d:4c:90:a1:42:6e:08:31:de:b9:48:df:
93:b8:70:c4:9c:9b:29:fb:3d:17:ca:87:7d:08:03:
e1:40:12:25:1a:c9:51:ef:9e:22:4a:e2:dd:c1:4c:
e8:17:0f:f1:e8:8e:5a:96:01:8b:5e:ef:50:d8:bb:
1d:f4:54:79:ae:9d:bb:0a:5e:04:c2:8b:d3:12:73:
17:1f:eb:0c:8e:34:c0:96:db:df:d3:dc:7f:ae:27:
1d:b7:ec:c5:39:e9:d9:bd:d9:9a:91:61:0f:1d:41:
02:d5:86:38:25:ec:06:17:c3:40:77:43:79:e4:d6:
e7:58:34:df:ec:ab:a9:76:e1:80:be:b2:4c:72:58:
26:96:a8:0c:f7:d3:cb:18:b1:7b:38:6c:34:9a:a9:
60:09:db:52:e8:9b:d1:b6:ad:e4:ba:38:a1:2d:3d:
07:75:7c:61:0c:c1:35:89:ca:07:2d:bd:d4:05:2e:
5d:03:67:bb:bf:c4:2a:4d:35:5e:85:62:bf:43:fc:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:F5:07:19:E9:36:A2:49:6E:20:30:80:25:6E:62:A1:72:B0:CC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4L1BxnpNqJJbiAwgCVuYqFysMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:e9:2b:3d:6a:d1:af:f4:e7:cb:18:0b:6e:c1:a4:fe:03:1a:
ae:e6:d9:a2:b9:13:b7:74:4d:56:56:54:24:38:a9:bd:6d:63:
93:b6:27:d9:f3:e9:4a:48:59:0c:14:81:1e:53:c9:08:ea:04:
7f:cc:a8:e2:66:7f:38:2e:8c:26:0b:7b:cc:90:c6:41:19:85:
81:99:6f:d7:0d:0a:47:a1:0d:76:19:df:d3:31:84:f4:5c:c2:
bc:57:63:c4:2e:7e:ad:40:19:54:fc:31:b9:c5:ea:8f:ee:d7:
ec:1a:83:95:96:67:69:25:e0:f7:1b:14:5d:04:30:19:53:a9:
67:bc:6d:9e:53:c2:e3:66:82:61:8c:71:4e:aa:22:00:30:56:
03:ae:b1:b9:37:70:1a:3b:18:04:11:be:5c:78:f9:fc:2d:ae:
58:b4:1e:39:05:52:44:c5:2a:b1:6e:1a:e6:f4:da:2e:13:b0:
87:ea:1e:d3:c4:50:7f:3e:93:f4:3d:2f:ac:a7:85:3a:8f:a9:
f4:ce:00:6a:a3:d1:98:72:ae:62:84:f0:b1:06:26:bf:7d:c5:
4b:f7:63:94:c9:5e:46:9d:ac:6f:66:fe:1b:d1:ab:e4:49:14:
76:de:60:ac:e3:59:db:e3:d7:bd:4b:32:66:92:1c:48:08:e8:
b5:66:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org