Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PFQJeTxyOIE38ofXomJWKW3Ou7Y.roa
File: PFQJeTxyOIE38ofXomJWKW3Ou7Y.roa (raw, json)
Hash identifier: Urpt5o59JqBj/EWQqCPefzwZh3xFRvV2N6Ki+NoD+zY=
Subject key identifier: 3C:54:09:79:3C:72:38:81:37:F2:87:D7:A2:62:56:29:6D:CE:BB:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PFQJeTxyOIE38ofXomJWKW3Ou7Y.roa
Signing time: Thu 15 Sep 2022 02:36:01 +0000
ROA not before: Thu 15 Sep 2022 02:36:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.218.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C5409793C72388137F287D7A26256296DCEBBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:69:1d:12:0e:f3:5a:75:2d:aa:c4:71:0a:
2d:3b:1b:bc:5b:3b:02:60:d5:c1:08:b1:74:ee:e3:
9b:f1:85:ff:cd:47:87:ab:54:75:3c:f1:08:bb:e2:
53:f5:e0:e5:83:02:20:9b:9e:f6:8b:1c:cd:d0:64:
f3:90:a3:20:15:ea:a1:c5:39:c6:1f:9b:86:30:fa:
33:fa:06:54:c1:94:e2:1d:2f:d2:cc:cb:2a:be:a2:
30:04:58:3c:a0:bc:0d:99:9a:bc:6f:0f:31:e7:3c:
8b:d2:e7:ba:ba:c8:1a:2b:c0:c8:6d:9e:d5:40:e8:
0f:28:72:02:e9:47:9c:70:60:1c:aa:e3:a1:b1:5c:
3b:2c:51:6b:92:bc:75:b6:6b:9d:fc:8a:da:0b:51:
d5:1b:8a:99:76:cc:59:f2:fd:72:b8:f9:35:bb:7e:
1c:96:2d:12:c2:a4:e2:20:03:7b:6b:14:c1:da:08:
78:67:e0:97:ec:4a:a0:95:6b:45:d0:ac:25:df:a9:
2c:65:cb:73:da:ac:67:44:e5:a6:3b:c0:4d:01:7f:
5c:f4:20:a4:77:c5:a4:1e:71:ef:1d:8f:fb:0e:53:
e9:32:0a:cb:d5:39:90:c8:25:ba:ed:3a:18:ec:82:
47:3a:4a:ed:4c:75:db:fb:44:9d:cf:1e:cd:16:ec:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:09:79:3C:72:38:81:37:F2:87:D7:A2:62:56:29:6D:CE:BB:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PFQJeTxyOIE38ofXomJWKW3Ou7Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.218.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ff:64:43:53:63:be:d2:02:b7:90:f2:2c:5f:4a:80:69:e6:
d6:5c:e3:ee:b6:87:4f:b6:f9:ad:bf:a1:a7:10:a9:8d:72:5d:
cf:69:6a:bf:51:95:fd:a1:fc:ff:17:f1:4e:98:32:fe:37:3b:
c0:e8:c7:d9:fa:a3:91:4f:9a:f9:bf:fe:e1:c6:df:9b:84:26:
66:b3:87:46:1d:0f:21:5a:c0:36:04:27:d3:f8:88:6c:c7:2b:
e2:a2:23:ab:70:9c:f0:6d:47:69:c7:9a:b6:f3:01:b4:fa:a5:
8d:42:37:91:bc:7f:e5:81:71:91:51:92:4f:70:d6:e0:6f:22:
db:a1:43:e0:a8:56:0c:88:a0:b2:02:6a:fd:66:4f:2f:af:d1:
e3:1c:ea:22:5b:f7:42:c1:5e:8e:a1:2a:64:27:97:39:2b:40:
ac:4b:70:cc:64:8f:6c:be:9e:e9:c2:34:69:e6:26:69:6d:ee:
f1:ae:62:64:63:80:a4:ab:30:b1:d0:be:ca:bd:bf:e7:89:93:
a9:ab:fd:14:aa:84:eb:1f:42:1e:13:fc:88:fc:81:93:15:18:
9c:9a:cf:b5:ab:07:21:3e:6a:6b:55:15:30:d0:9c:3c:69:08:
a6:78:de:aa:27:f4:f0:09:36:78:ce:0b:af:58:16:a5:5d:36:
93:0b:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org