Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCoSA4gFHt0YDMDTnKt0xX4ayEI.roa
File: LCoSA4gFHt0YDMDTnKt0xX4ayEI.roa (raw, json)
Hash identifier: bGHfOaws9vTS1UxGIMhjWscBZ//KZSN6wMBmSfsVty8=
Subject key identifier: 2C:2A:12:03:88:05:1E:DD:18:0C:C0:D3:9C:AB:74:C5:7E:1A:C8:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCoSA4gFHt0YDMDTnKt0xX4ayEI.roa
Signing time: Thu 15 Sep 2022 02:35:18 +0000
ROA not before: Thu 15 Sep 2022 02:35:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.64.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C2A120388051EDD180CC0D39CAB74C57E1AC842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:42:05:ea:a7:8d:46:42:2b:ea:ac:65:ed:38:
f5:d8:c8:d9:5b:88:06:ae:6f:b8:3c:a0:53:5d:86:
95:61:ae:be:bb:a0:53:a6:d0:b9:c7:7d:ff:9b:d9:
af:d5:8f:c6:67:2b:38:04:d7:ca:7b:7d:92:5a:5f:
85:32:ad:d0:59:dc:a0:c7:21:81:61:60:52:ff:dd:
b8:de:08:d1:ff:b5:bd:22:11:1d:0e:86:61:d1:31:
76:6a:a4:5c:68:d6:b4:e8:dc:68:b4:4f:aa:fe:1f:
48:3d:32:b6:9e:5d:88:90:4e:ea:c9:ab:e6:51:7a:
0b:9e:aa:df:6b:37:f5:1f:12:4d:ad:43:4a:47:f4:
87:00:c8:93:65:0a:79:8b:2c:4e:c4:3b:5e:f9:b8:
dd:7e:4a:17:86:f8:9c:97:76:d7:7b:0d:80:23:77:
52:a2:9a:b4:c3:85:51:f2:fd:45:98:de:ea:d2:c7:
8e:2f:d0:d4:fe:f9:95:50:f8:d0:f7:3d:7b:7f:f2:
84:0d:f2:8a:f9:dd:40:32:56:b2:fb:c7:1f:cf:c8:
11:9f:55:8d:42:95:ee:82:55:2f:4b:65:c7:c9:38:
61:2c:01:98:0b:29:4b:88:37:cb:ff:62:c7:09:71:
c1:e8:dd:ab:be:3b:1d:cc:3e:24:07:d5:5b:d1:ea:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:12:03:88:05:1E:DD:18:0C:C0:D3:9C:AB:74:C5:7E:1A:C8:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCoSA4gFHt0YDMDTnKt0xX4ayEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.64.0/20
Signature Algorithm: sha256WithRSAEncryption
59:4e:e9:c5:3d:6d:c3:ee:af:f0:58:c9:89:cd:93:f0:97:fd:
25:74:f3:b1:ce:b5:f2:06:6e:7d:7d:7e:98:c6:bc:32:31:94:
ed:6b:c0:d7:61:69:e1:59:25:40:d7:55:21:09:ae:c1:9a:3e:
df:01:1c:2c:d4:7d:f2:43:db:a6:88:a7:c9:3b:40:25:ae:e7:
ee:90:84:81:86:d6:3b:04:15:d8:c0:c3:ef:28:d5:49:d5:21:
52:9a:91:fb:7c:4c:f1:05:37:84:46:3a:00:19:8c:e2:b4:d8:
e8:3a:4a:6d:cd:61:46:b1:1d:08:45:f2:3b:9d:f7:92:a5:e5:
18:cc:18:a9:96:e1:21:3b:d8:90:ab:9e:a4:04:ff:48:9e:dd:
13:30:c2:87:20:aa:62:4c:d7:70:e7:89:4a:04:3f:56:3a:e5:
b9:87:94:13:dd:76:03:25:8a:3f:ed:4d:30:d4:fa:66:d6:d9:
45:c4:f7:32:63:ca:1c:b1:00:9a:04:f1:c5:06:5e:cb:3b:4b:
5d:20:74:48:7f:6f:ce:b5:2c:c6:77:52:28:1d:c1:1d:18:43:
63:35:cd:33:b6:93:eb:a4:09:5a:2a:d0:db:fa:97:0b:a7:ee:
1a:a6:f0:b7:0c:3e:bc:43:97:4d:a6:69:cb:1b:fb:7a:d4:a6:
26:c3:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org