Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H3UvIrsTxh-1cP0uwpqvQXfoOT4.roa
File: H3UvIrsTxh-1cP0uwpqvQXfoOT4.roa (raw, json)
Hash identifier: jjY+b2Z5Ena/Zj2pakGXq2+/Pey+CTUXs6XmnaO5MvQ=
Subject key identifier: 1F:75:2F:22:BB:13:C6:1F:B5:70:FD:2E:C2:9A:AF:41:77:E8:39:3E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1982
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H3UvIrsTxh-1cP0uwpqvQXfoOT4.roa
Signing time: Sat 22 Oct 2022 06:06:36 +0000
ROA not before: Sat 22 Oct 2022 06:06:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6530 (0x1982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1F752F22BB13C61FB570FD2EC29AAF4177E8393E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:82:7f:88:a8:b9:22:b2:a9:ce:61:9d:1b:
74:81:68:52:ab:ba:13:5f:61:38:7e:4d:03:13:2e:
40:12:00:28:31:b8:a9:28:96:e5:34:03:dd:c6:b4:
f1:f3:b7:da:26:e6:ab:7f:c3:d9:2d:67:74:08:77:
b5:b3:24:12:33:4c:67:40:45:1c:5b:58:ba:dc:83:
26:0d:4c:89:b9:a5:69:69:f6:a5:d6:54:1d:89:27:
97:07:eb:bd:43:1a:d5:1d:e8:ee:6c:de:bf:5d:7c:
47:c4:4c:f5:d6:8c:44:7c:54:68:40:52:95:78:34:
45:30:76:31:f1:44:bc:7b:2c:17:1c:a3:aa:09:51:
3d:ff:26:4b:28:ab:f3:03:ca:35:a9:7f:8e:91:e9:
29:72:8e:01:2e:38:22:18:c3:66:93:ba:f1:1e:6c:
6f:7c:8d:99:14:7e:d1:6e:92:e9:7c:67:de:d8:9e:
0a:37:56:f9:1c:ae:96:98:6f:b4:03:84:c0:8e:52:
95:ad:eb:04:b8:72:50:4f:87:da:77:e6:ab:ea:d3:
c4:03:8f:f9:3c:f1:b0:1a:2a:f6:16:87:57:90:ff:
7d:42:7a:b5:f6:bb:81:8c:3b:56:f7:9b:29:9c:ac:
76:12:3e:d9:12:83:a7:4b:67:90:8e:be:dc:86:8c:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:2F:22:BB:13:C6:1F:B5:70:FD:2E:C2:9A:AF:41:77:E8:39:3E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H3UvIrsTxh-1cP0uwpqvQXfoOT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:f3:32:23:f6:74:11:11:0e:46:9b:47:4a:0a:0a:2f:2d:5b:
4d:cd:ba:6d:a3:14:fd:cd:5f:63:49:4a:72:58:a0:5c:e4:42:
d8:f2:f7:81:e5:b6:bf:ef:ff:c2:68:be:35:26:72:36:16:d7:
a6:50:2f:25:e2:54:80:98:7a:f2:a3:83:89:f0:8d:86:9b:a2:
3e:b3:ba:54:dd:d7:fa:a7:be:fb:ac:3f:63:65:54:f9:06:39:
65:de:51:7c:30:d3:90:ee:07:80:ce:ac:7c:f1:a7:6c:1b:20:
18:8b:79:3f:7f:e7:9c:c0:ad:cb:61:41:19:e1:ef:62:58:dc:
2b:72:63:aa:ee:af:46:46:0a:d9:7e:04:a8:92:3b:d2:66:20:
ac:2b:46:5f:9c:f2:60:88:cb:27:1e:c1:0c:07:f1:16:17:24:
6b:c7:eb:6a:dd:70:17:ed:63:b4:24:74:f1:9c:8d:40:cc:2e:
4f:99:84:89:29:f0:ba:4a:4c:a4:0a:40:82:85:73:0b:1e:2e:
d1:6f:31:4e:4a:c1:1c:5d:f8:7c:c0:38:47:d0:7d:62:4d:e1:
8b:4c:c9:2f:3d:96:f7:6f:75:59:e5:cc:0a:1e:ab:c5:6a:d2:
24:63:55:1a:15:7b:1c:a0:f6:8f:a6:63:a3:fa:60:2e:73:e2:
26:85:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org