Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTeNe2WPQ7F21y4t5s9KlEWwCBQ.roa
File: WTeNe2WPQ7F21y4t5s9KlEWwCBQ.roa (raw, json)
Hash identifier: 9Mt3WxvbYZhBDvxXg3ikMzjVuwbSIuD/dZa5kvH73Gs=
Subject key identifier: 59:37:8D:7B:65:8F:43:B1:76:D7:2E:2D:E6:CF:4A:94:45:B0:08:14
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1902
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTeNe2WPQ7F21y4t5s9KlEWwCBQ.roa
Signing time: Sat 22 Oct 2022 06:05:59 +0000
ROA not before: Sat 22 Oct 2022 06:05:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6402 (0x1902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=59378D7B658F43B176D72E2DE6CF4A9445B00814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:2b:56:3f:a2:07:95:36:13:d0:6c:82:a1:
8a:e0:97:10:91:d3:fd:98:05:c8:a0:30:60:9f:e8:
e7:d7:e8:a2:16:16:78:70:5e:8b:fd:90:6a:5a:aa:
05:28:ce:d7:17:59:9d:8f:60:d9:ac:89:3b:52:f8:
f0:6b:e3:8c:0a:22:76:dd:47:2b:d0:4f:25:95:50:
ad:8b:a5:c4:9c:7e:bc:3c:e2:b2:6b:5b:7a:d1:89:
b1:c9:50:ac:2e:d7:52:ff:d0:ea:b7:91:c1:03:6e:
b4:eb:e7:f9:c5:e4:d2:1b:db:16:f0:a7:7f:36:fb:
68:cf:6c:da:ec:a6:fe:5b:b3:b1:a7:fc:ab:2f:91:
b2:1a:46:12:cf:4e:1d:9a:eb:3e:7a:e5:d7:14:39:
bf:ad:94:34:02:e2:6b:0f:c1:d9:f5:bf:6f:7e:ac:
f8:24:74:52:7f:fc:f4:87:55:21:50:04:80:7d:24:
f8:fe:3e:31:72:65:1d:ca:62:69:bf:d7:1d:b9:55:
e7:49:2f:ba:0b:81:1e:6f:dc:98:c3:a2:8b:a0:8f:
84:af:84:31:fb:6b:99:74:e4:4d:a9:b2:1e:ab:f6:
9c:99:9e:dc:ac:9c:fc:2e:7a:f0:28:a3:99:1b:8c:
a9:6d:16:be:89:ea:b9:d5:05:37:b9:d4:e9:fc:72:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:8D:7B:65:8F:43:B1:76:D7:2E:2D:E6:CF:4A:94:45:B0:08:14
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTeNe2WPQ7F21y4t5s9KlEWwCBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.24.0/21
Signature Algorithm: sha256WithRSAEncryption
01:dc:16:00:fb:1a:fd:ca:10:16:84:35:8f:bc:83:06:71:82:
ef:37:47:25:3f:fe:b3:54:66:5d:8c:7c:03:ea:ab:37:fb:d3:
cd:e7:98:e7:2f:74:d3:e1:b4:5f:dc:01:53:7b:f7:e9:f1:ec:
c0:d0:a6:3f:22:64:f9:2a:97:e7:93:d5:48:ba:35:83:37:01:
9d:2b:f9:66:9d:63:16:c1:1d:9e:5c:61:b4:a5:79:68:e4:49:
72:d4:41:52:a8:c4:21:11:12:cc:2e:80:52:8c:53:23:0f:38:
08:e0:d2:61:be:e6:fd:33:2b:82:29:35:0d:77:79:5e:3e:76:
91:69:6c:ca:5c:ec:02:a8:fc:b0:ea:8c:fe:0b:be:b0:07:d3:
05:56:b0:fa:ec:1b:8f:fc:54:9b:2e:af:ef:cf:bc:92:25:e5:
17:cd:9e:a5:92:d6:95:fc:85:2e:78:bf:db:71:10:37:3b:1a:
67:66:d5:a6:0c:92:39:97:38:be:73:d6:bb:51:31:9c:2e:22:
43:53:51:7a:58:54:8b:ba:49:9d:d6:24:42:f7:d0:35:0b:bc:
fc:08:88:ea:43:84:97:3d:25:0f:d2:27:13:11:8d:0e:9b:da:
3d:85:5a:dc:ea:25:a0:72:55:0c:ec:5c:20:76:39:c3:af:b5:
00:09:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org