Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcilrTyJVySYiSHKKSut_OL-430.roa
File: QcilrTyJVySYiSHKKSut_OL-430.roa (raw, json)
Hash identifier: sv4a+kT48eC5VcOLBwhe7J84Sb9/jdCo/e6T07TMR9g=
Subject key identifier: 41:C8:A5:AD:3C:89:57:24:98:89:21:CA:29:2B:AD:FC:E2:FE:E3:7D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcilrTyJVySYiSHKKSut_OL-430.roa
Signing time: Thu 15 Sep 2022 02:36:37 +0000
ROA not before: Thu 15 Sep 2022 02:36:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41C8A5AD3C895724988921CA292BADFCE2FEE37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:87:0b:25:d6:c8:38:f1:90:33:0f:ab:f1:
b6:19:31:83:86:6b:fe:65:f8:37:1d:ee:ab:2b:e0:
48:b9:35:df:5d:22:62:8b:1c:50:ae:75:4d:ef:05:
85:b1:8c:56:35:5f:c8:ea:00:c7:7a:73:e0:5b:20:
2f:4a:b7:f7:00:ca:77:9e:c4:68:7c:88:a5:3c:68:
de:8b:8d:cd:bb:d7:75:5e:25:35:9f:cf:36:70:21:
1b:e4:83:06:14:d7:55:29:01:ef:64:9f:a4:83:c6:
a1:6d:71:0d:71:7c:5f:27:58:be:88:49:22:09:a0:
a3:b6:8f:ec:57:7b:fe:8c:ad:10:57:2a:5a:38:9d:
d3:df:55:f9:be:f7:77:0c:35:88:16:17:dd:95:7c:
35:ef:9e:a3:6b:a2:f4:d4:42:b7:c1:63:00:f3:d3:
fa:9d:64:a2:cf:d8:69:2e:ac:71:00:f0:4b:2a:ca:
9e:6f:8c:80:c3:b8:12:7c:a6:de:96:19:06:b4:fb:
1d:80:69:5d:6d:71:57:01:9e:c6:9a:4b:1c:1c:39:
22:29:6d:56:45:da:c7:70:e8:f7:68:87:43:93:8d:
21:c3:c0:f0:51:f4:e2:07:7e:50:f8:4c:a0:20:b5:
39:72:40:3d:1f:e3:d9:53:9a:47:e6:f3:fc:53:0f:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C8:A5:AD:3C:89:57:24:98:89:21:CA:29:2B:AD:FC:E2:FE:E3:7D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcilrTyJVySYiSHKKSut_OL-430.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/22
Signature Algorithm: sha256WithRSAEncryption
69:6e:a8:fa:3a:d0:7f:89:dd:cf:10:1f:ca:ab:78:a8:8f:ff:
c7:58:94:22:50:f6:5b:72:88:bf:7a:2c:97:c0:ed:be:a8:cc:
23:b8:38:af:0c:41:ea:65:93:bf:9a:36:2c:9f:b6:68:57:ce:
b2:c2:dc:07:f6:83:54:62:6a:60:ed:43:ba:e3:82:79:36:54:
5d:d4:d1:85:57:86:f6:06:8f:2c:f4:c1:c7:68:b4:fe:b9:91:
59:42:ed:f4:e1:d7:cd:5a:18:48:d5:40:5a:ea:59:31:2f:63:
88:f1:00:84:98:2e:10:bd:1f:a7:1f:46:ce:b6:14:98:e3:af:
bb:e5:dc:26:6c:af:ac:8d:ce:00:2f:a0:b3:f2:18:48:01:42:
55:90:7b:9f:8f:fb:53:df:e9:07:2f:a9:74:9d:ea:cb:55:af:
82:79:38:6f:be:b8:48:fd:ed:cb:d4:34:b2:7e:8c:23:eb:7c:
39:18:c0:87:33:b2:a9:11:66:6a:06:4e:80:b0:f6:53:91:36:
42:45:93:ff:f3:80:12:ec:ae:05:38:58:f4:98:6c:29:fc:db:
b7:ad:3a:9f:ce:33:ee:60:63:d8:8e:ca:d4:ee:37:9c:53:a7:
11:bf:b4:f5:3f:f8:7c:07:1d:75:8f:4a:25:66:7d:47:97:02:
3c:fc:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org