Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MrZacNFfgQy9BVRYgCQR9wflAzE.roa
File: MrZacNFfgQy9BVRYgCQR9wflAzE.roa (raw, json)
Hash identifier: MCZpZm4KPZah7qxJh++rx1k8EX8A8RynMUxcIeVKCOM=
Subject key identifier: 32:B6:5A:70:D1:5F:81:0C:BD:05:54:58:80:24:11:F7:07:E5:03:31
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MrZacNFfgQy9BVRYgCQR9wflAzE.roa
Signing time: Thu 15 Sep 2022 02:36:45 +0000
ROA not before: Thu 15 Sep 2022 02:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.72.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=32B65A70D15F810CBD055458802411F707E50331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:cb:11:7d:af:f2:84:72:c4:94:46:df:06:
d6:e8:84:9f:35:30:a5:17:71:7b:b8:c0:41:93:c9:
9e:bb:29:ec:4f:ed:c4:46:dd:45:4a:34:a8:ef:64:
71:ad:d5:e4:a9:dc:00:58:39:16:d8:d7:60:9e:1b:
dd:41:13:ef:77:3a:9d:23:25:3b:c9:f9:ec:ae:71:
bb:c8:fc:86:12:3a:a7:0e:34:44:02:07:58:73:5c:
67:5f:2e:4a:a7:9f:3f:0f:17:52:40:a7:c3:b1:c3:
6e:a0:ce:12:e2:89:72:f5:3c:fe:2f:cd:4a:46:46:
6f:5a:2c:d3:aa:89:58:be:68:a9:ff:e3:9d:bb:6a:
79:b4:78:5b:d7:21:03:ce:97:9b:90:8c:0a:6e:63:
3b:4e:8c:6f:95:76:e2:62:ff:7f:bf:07:60:71:24:
a5:b9:a0:54:64:26:7a:ba:d8:6f:fd:3f:af:38:8f:
87:57:4c:a9:b1:97:d5:b3:17:76:24:1e:81:a1:66:
6b:fa:14:72:3b:dd:ab:e5:21:d1:d6:d1:f9:f7:94:
49:d0:a1:cf:e7:33:03:3e:19:d8:c8:a9:c5:d9:bd:
aa:cf:ea:c9:cf:2b:b4:07:3b:39:31:56:2b:9f:57:
f7:6d:a9:b0:c8:47:f2:ba:72:f2:4d:8a:d8:35:91:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:5A:70:D1:5F:81:0C:BD:05:54:58:80:24:11:F7:07:E5:03:31
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MrZacNFfgQy9BVRYgCQR9wflAzE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.72.0/22
Signature Algorithm: sha256WithRSAEncryption
61:81:f6:96:ce:b5:8b:2f:94:30:6a:21:f5:3b:aa:c3:e0:54:
cd:6a:b4:50:27:45:bd:aa:2c:9c:48:3a:22:0f:67:6d:f7:a5:
dc:bb:81:64:2a:b1:f5:06:80:c0:3a:f0:dd:d6:4c:c6:1d:cb:
49:69:c6:2e:01:2a:b6:8d:44:03:b3:8b:97:f0:f8:8d:e0:d2:
59:cd:b3:7e:1a:1a:d9:93:39:5e:58:6e:e1:3d:2a:b5:e8:79:
9b:26:77:3a:10:4a:4d:01:fa:ff:b3:ce:17:3d:66:2f:45:0b:
94:60:14:f7:9b:88:0f:c1:5a:dc:c9:12:aa:2a:90:18:92:8f:
00:7f:a7:84:56:0a:8b:f7:68:7e:ae:fd:46:8e:d9:0a:4c:d8:
8b:f7:92:86:6f:a8:8f:6e:fe:fb:18:3a:a9:9a:4e:be:6d:29:
0f:ee:4c:8e:54:25:5d:12:e5:5a:5d:db:18:93:56:d3:7b:9e:
a3:3e:56:10:bc:f4:58:f0:ad:7e:6d:d1:93:61:e6:2f:24:86:
6c:c0:6d:92:23:fe:c8:51:a1:08:43:ba:ff:9c:d5:60:dc:fe:
7f:ed:6f:02:9b:ad:31:4f:96:b1:cd:03:36:ff:a4:3e:03:66:
86:1c:f4:67:06:c0:99:7a:6b:7e:08:18:9d:88:bb:f8:32:76:
62:f7:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org