Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K8Cce7SxJeHv7y4G_uH-fR3c-P0.roa
File: K8Cce7SxJeHv7y4G_uH-fR3c-P0.roa (raw, json)
Hash identifier: O5xbulNCjv8ea3qQT4IgugmSlIH/JcDEHTiMNd1Hobo=
Subject key identifier: 2B:C0:9C:7B:B4:B1:25:E1:EF:EF:2E:06:FE:E1:FE:7D:1D:DC:F8:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K8Cce7SxJeHv7y4G_uH-fR3c-P0.roa
Signing time: Thu 02 Feb 2023 06:59:02 +0000
ROA not before: Thu 02 Feb 2023 06:59:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6937 (0x1b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:59:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2BC09C7BB4B125E1EFEF2E06FEE1FE7D1DDCF8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:eb:73:0c:e9:8c:1f:ab:5c:33:3f:46:de:
71:2e:09:20:85:b9:1f:93:51:31:ba:d4:7f:56:a6:
02:b1:16:69:c7:59:db:46:8f:dc:a7:de:51:78:f2:
8a:b6:01:e3:80:db:ba:7d:d4:0b:f6:67:a1:ca:16:
06:c2:1d:a1:99:cd:17:35:41:d7:f8:a6:ed:b0:9b:
6c:b5:05:31:08:42:35:24:2b:03:42:fb:1d:fc:6d:
c1:c6:ef:6f:da:1b:c8:b7:02:bf:9f:25:d6:e9:b9:
6b:f2:51:f9:cf:87:8f:80:34:af:72:0b:1d:c0:db:
52:c5:d0:65:ea:4f:fc:b7:fe:85:49:77:2f:bc:b1:
50:ce:e7:53:46:2c:41:96:aa:6e:d2:44:a0:de:87:
2b:87:14:bb:45:b0:e0:26:c9:fb:67:fb:eb:a8:f8:
9b:29:39:db:9c:b3:4b:df:9d:ea:6e:e5:0c:d8:77:
8a:04:9b:b4:36:2f:ec:d3:38:36:88:75:1d:c0:b6:
cd:6a:4b:5d:b4:26:07:2b:8b:02:57:d0:c6:fb:72:
ce:3c:75:bd:45:40:4d:33:2d:3d:cb:21:ab:66:4a:
0e:92:05:64:89:9f:98:6a:2f:8c:bd:a3:8b:c8:d8:
4c:c0:e5:7e:00:32:c0:f3:88:e9:08:02:f9:d9:db:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:9C:7B:B4:B1:25:E1:EF:EF:2E:06:FE:E1:FE:7D:1D:DC:F8:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K8Cce7SxJeHv7y4G_uH-fR3c-P0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:83:7f:96:cf:ec:f3:19:9c:23:3c:56:5f:c3:0f:a1:98:b0:
8b:cd:ba:4e:19:c6:d4:26:6d:6b:ff:4b:9d:37:cc:09:e0:a6:
47:7f:11:eb:a5:d1:a6:b5:94:d3:bf:69:9b:a7:57:47:38:15:
00:d0:62:a9:6d:27:e7:31:82:da:5c:a0:03:de:dc:77:2f:b1:
6c:80:02:44:07:be:0c:d3:bf:59:f2:60:2b:8c:4a:22:66:5e:
3b:e7:b3:1a:5b:3b:40:e7:ef:87:82:aa:2d:48:93:11:61:57:
7e:f6:fb:28:32:ee:ef:0d:8c:16:f6:64:db:4b:dd:35:4d:18:
a2:ff:d1:d4:f7:11:3f:06:b5:7a:78:b3:f4:a7:7c:82:bb:f2:
6a:51:66:0b:1f:87:30:a2:f6:f0:cf:01:6b:d2:6e:c6:10:53:
04:85:3f:c8:61:09:6d:5d:86:db:6b:31:5f:61:bd:b8:d8:25:
ca:9e:1a:24:a0:a6:ad:3d:fe:a2:b3:f2:2b:32:0c:ba:ef:47:
7e:10:73:c9:62:a9:63:1f:f9:0e:cd:cd:bf:59:90:9d:c9:6a:
27:95:8f:4e:ce:59:31:cb:44:09:0d:ee:bf:c4:0a:f2:7c:18:
f4:ef:57:11:e7:91:50:97:c5:2f:58:3d:6e:6a:16:09:8d:63:
bd:87:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org