Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JSAqafInwr4E1u2mCXweuYPAqfA.roa
File: JSAqafInwr4E1u2mCXweuYPAqfA.roa (raw, json)
Hash identifier: HOF/61ABftBBTNPHVhgDQcOrDmCQh5kQUcIWg8l8ww0=
Subject key identifier: 25:20:2A:69:F2:27:C2:BE:04:D6:ED:A6:09:7C:1E:B9:83:C0:A9:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JSAqafInwr4E1u2mCXweuYPAqfA.roa
Signing time: Thu 15 Sep 2022 02:35:23 +0000
ROA not before: Thu 15 Sep 2022 02:35:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25202A69F227C2BE04D6EDA6097C1EB983C0A9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:24:c1:0c:db:81:e6:1a:28:c0:8c:6e:8e:
c8:f3:db:e2:a5:eb:a3:38:59:ed:11:5b:79:be:98:
3e:cd:f9:d0:f1:4a:6b:ae:a3:e2:b7:92:be:96:14:
da:4e:0f:ae:00:f5:17:fe:56:6d:4b:44:d9:b3:4f:
00:72:dd:73:ac:6a:09:29:13:19:86:64:f8:88:95:
24:0e:bf:76:34:e1:fa:96:35:41:60:dd:cd:5d:62:
ff:12:d8:8c:90:8a:69:83:99:26:86:a0:90:7f:f5:
d3:dc:0f:23:26:5d:9e:31:92:71:17:39:be:bc:1a:
10:0c:72:8b:20:22:b1:f6:e0:57:58:21:8c:2b:cd:
83:e2:0b:54:d6:b5:b1:2a:04:d1:89:59:dd:12:54:
ca:a6:78:24:e9:c0:b5:97:1a:1a:91:d5:04:74:ce:
71:90:1e:53:29:cc:2e:66:74:c3:03:7d:8c:98:ff:
71:5f:af:fd:f9:e2:9b:78:2c:88:4a:02:f2:09:0e:
79:3c:3c:1e:4f:25:09:60:fa:3a:2b:ff:3d:4f:29:
f4:96:c4:57:50:88:c4:8c:89:56:ae:f8:af:99:12:
08:d4:10:49:2d:59:e3:93:88:66:b7:08:93:70:1d:
52:3f:53:56:c8:f3:00:2c:c7:d1:84:e1:2e:cd:c9:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:2A:69:F2:27:C2:BE:04:D6:ED:A6:09:7C:1E:B9:83:C0:A9:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JSAqafInwr4E1u2mCXweuYPAqfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.64.0/21
Signature Algorithm: sha256WithRSAEncryption
28:5e:88:a4:20:94:0b:d9:ad:e5:9b:42:50:ae:3c:40:65:19:
bd:dd:76:e7:61:1b:e6:22:34:5d:05:56:4e:89:d1:3f:cc:fa:
7e:0d:28:9e:01:80:b3:05:48:23:61:05:06:a9:e8:fa:e4:38:
75:06:fc:3d:7d:a6:69:66:66:80:bb:1d:1c:4b:0e:e1:96:96:
5c:98:1d:6c:aa:92:d7:30:a9:38:e6:a5:1f:30:0f:40:72:ee:
54:44:50:d9:bc:55:d8:d8:22:d8:33:60:8d:83:af:7c:8e:9a:
fb:88:c5:c6:38:9a:ed:5f:86:ca:77:2b:e9:de:e4:0c:81:9a:
47:d0:1a:74:62:81:c5:7b:f0:f4:97:71:14:c3:6d:33:8f:75:
5d:ca:c9:14:ed:65:d6:8a:ac:74:9d:33:50:cd:47:94:1c:07:
32:35:bf:3e:3e:72:67:3a:54:a7:5f:27:a2:79:f6:4a:22:08:
b0:d5:c4:b4:19:c6:52:76:06:b8:91:5f:12:9e:c6:fb:40:5b:
40:5c:45:e3:dc:c9:65:c1:0a:a1:44:1f:3f:bc:43:fc:51:25:
56:4a:c1:eb:88:23:84:9d:f0:3d:8e:36:47:de:f1:e8:0a:c7:
e3:65:da:81:c8:ba:93:0e:f2:99:7b:ab:59:68:52:da:12:bb:
4d:2a:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org