Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VdD-jcfSE1E-4aEmx0PJERh5fSc.roa
File: VdD-jcfSE1E-4aEmx0PJERh5fSc.roa (raw, json)
Hash identifier: pH068CPHIEnq1pzhMUZbBFbC6BHR6hJ5scKiZ248X1A=
Subject key identifier: 55:D0:FE:8D:C7:D2:13:51:3E:E1:A1:26:C7:43:C9:11:18:79:7D:27
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1826
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VdD-jcfSE1E-4aEmx0PJERh5fSc.roa
Signing time: Sat 22 Oct 2022 05:51:53 +0000
ROA not before: Sat 22 Oct 2022 05:51:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6182 (0x1826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:51:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55D0FE8DC7D213513EE1A126C743C91118797D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:ee:a7:b4:bf:70:60:34:57:7a:6f:15:ef:
b2:8d:c4:d8:4b:e1:c0:fb:4a:99:92:78:59:ab:96:
24:3a:a0:d3:69:0c:1d:73:94:b6:f7:50:3f:55:6d:
8c:d0:03:f9:13:93:54:3b:cc:57:48:72:b9:12:d3:
2d:a5:0c:f0:9d:5d:2f:d6:75:76:c0:26:b0:35:84:
c9:f7:14:ea:2f:ba:f4:4e:cb:2e:2c:1e:43:12:34:
42:41:2a:1f:60:72:e8:25:61:fe:88:af:85:9b:12:
18:59:e4:97:13:97:1c:11:32:de:f8:df:95:48:f0:
d2:6a:3e:8d:ce:d9:0c:20:48:c7:99:52:00:19:22:
94:1c:cf:5d:e0:5a:73:ef:ab:92:f9:9c:0f:54:bb:
3a:71:5f:04:e4:96:48:2b:32:10:bb:8a:70:5a:b9:
7d:1c:ff:04:d1:e4:6d:65:c5:45:78:e4:ec:fe:25:
2a:cc:30:c8:f9:47:23:86:db:f2:ca:43:fb:29:d9:
40:c9:d0:9a:f4:cf:f0:2a:13:0d:f9:e7:be:16:86:
95:3e:eb:4e:a8:00:5a:18:b7:78:a1:3b:65:80:c0:
a2:e9:cd:42:a3:f8:a7:2e:fa:71:e0:69:9d:2f:84:
d7:84:04:59:fb:e7:78:b6:d0:73:b9:37:c8:a1:45:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:FE:8D:C7:D2:13:51:3E:E1:A1:26:C7:43:C9:11:18:79:7D:27
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VdD-jcfSE1E-4aEmx0PJERh5fSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.76.0/24
Signature Algorithm: sha256WithRSAEncryption
87:af:69:fc:25:9c:c5:4a:d2:65:ec:01:ed:b4:27:97:47:75:
3b:0e:d1:80:ed:d2:c4:cf:ef:a7:09:0f:31:0b:23:32:cb:0f:
0f:76:8e:9f:fd:30:80:ee:e3:eb:da:50:1c:c3:18:ad:1e:da:
69:7d:5d:79:2e:33:17:9e:90:4a:3a:37:56:cb:51:27:96:40:
56:36:59:c1:86:66:8c:81:0e:ea:d3:91:16:ac:e8:97:12:c5:
4b:fc:a6:b9:74:31:30:44:ab:b2:6f:4b:fa:fc:d5:7f:d6:e0:
98:63:15:df:cd:f0:a6:73:18:f4:cf:84:32:e8:0f:61:b9:4a:
ab:50:b5:54:2c:eb:bb:3d:7d:b3:f4:f9:2e:3f:8c:a5:0b:04:
fb:85:65:be:ac:ce:43:62:d9:c6:e9:32:2a:e9:d3:58:75:98:
a4:db:57:61:0b:1f:04:10:40:7b:b9:a8:4e:d6:f0:0a:89:66:
a4:57:1b:ed:96:e4:a0:6b:ac:6e:c6:e3:c8:e6:15:27:1b:89:
2f:6a:03:fc:10:53:2e:8e:ef:99:f3:18:a7:cb:bc:69:05:79:
3d:a3:00:93:26:cf:d1:4e:af:a4:b0:5e:de:1f:61:81:4b:3a:
14:6d:9a:ee:5c:d7:7a:a2:58:46:f2:41:15:fa:1f:9b:a1:d4:
96:a8:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org