Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Yq2xOE4yaRoSpzOyxg36GOcOqow.roa
File: Yq2xOE4yaRoSpzOyxg36GOcOqow.roa (raw, json)
Hash identifier: jucMzlNF2e/RzlSBCetqpHdEyVfe08M53GxKz6ynsQM=
Subject key identifier: 62:AD:B1:38:4E:32:69:1A:12:A7:33:B2:C6:0D:FA:18:E7:0E:AA:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18ED
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Yq2xOE4yaRoSpzOyxg36GOcOqow.roa
Signing time: Sat 22 Oct 2022 06:05:53 +0000
ROA not before: Sat 22 Oct 2022 06:05:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6381 (0x18ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=62ADB1384E32691A12A733B2C60DFA18E70EAA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:83:47:2b:77:d0:1f:b7:77:c9:e7:9c:73:
60:76:ca:bf:78:ce:ce:f2:ab:4c:55:12:85:57:5c:
f5:0d:8b:6d:9b:83:3f:5b:14:e8:27:fe:f5:aa:1b:
6b:85:76:8b:7c:9f:ea:66:c1:34:54:5f:41:44:52:
3e:46:90:61:a4:24:fa:19:30:a9:d1:1d:4d:9b:a4:
6f:f0:50:13:17:35:b3:65:c4:4d:3f:31:76:a7:32:
82:1c:73:b3:61:88:10:5f:99:d5:14:d6:70:b0:88:
b9:3d:6b:00:e1:51:fa:70:1f:6b:d6:b5:3d:18:0d:
39:46:43:a8:7c:e7:37:4c:5a:60:e6:ef:0c:12:8a:
ec:5d:6c:cf:14:51:bc:f0:65:61:a2:7d:82:97:7f:
ef:54:27:5f:64:00:80:db:f5:62:7e:6e:cb:ca:5c:
b7:64:70:53:a9:3d:55:5f:41:de:54:19:66:08:af:
8e:a5:5c:95:3d:48:a4:37:fa:e8:e3:73:59:07:86:
52:70:b2:9c:b1:c0:ae:33:04:da:0c:34:8f:da:01:
72:59:9e:70:27:b4:01:04:5b:5c:25:25:1a:1e:49:
ac:d6:16:3b:97:67:47:72:28:7d:1c:72:fc:9b:e0:
e3:55:b5:9b:6e:4d:a0:53:74:38:f7:8b:c8:89:16:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:B1:38:4E:32:69:1A:12:A7:33:B2:C6:0D:FA:18:E7:0E:AA:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Yq2xOE4yaRoSpzOyxg36GOcOqow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.42.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e7:6a:74:18:a2:82:bf:84:86:3a:90:47:31:54:00:0f:52:
2e:74:50:bd:ce:ba:69:82:9d:64:bc:8a:8b:a2:40:b1:a7:87:
66:e7:a7:3b:de:3c:13:d4:20:2c:0f:79:fc:58:46:99:16:d2:
ac:f5:53:59:c0:81:79:08:5f:96:e3:cc:be:de:9d:12:38:b5:
65:99:85:0b:7e:de:6b:ce:14:74:a8:8f:86:fe:9a:2f:ed:6d:
39:61:af:72:f9:79:84:fe:97:75:99:41:5a:d8:2e:18:5d:60:
29:2d:73:78:cf:77:b3:9d:1e:2a:a1:76:79:9a:9f:65:23:b1:
0c:47:78:61:da:91:3c:05:cb:73:5e:86:42:f9:e4:8a:29:ba:
5e:59:d8:54:ea:e9:3c:08:e2:e0:32:73:f3:76:56:08:26:cd:
10:49:fc:9d:34:03:d1:4a:3e:ad:87:bc:f6:d9:0c:a7:23:e9:
66:93:12:da:3f:f6:69:76:2f:92:1f:d6:50:27:19:d7:59:a7:
a3:a6:af:63:43:b6:09:da:1a:44:00:1f:2a:48:98:55:2a:f2:
64:7f:86:74:5a:67:52:07:7a:dc:49:1c:d8:6c:8f:7a:90:ae:
54:0c:c0:6e:06:aa:d2:e6:46:18:44:cc:ac:0d:4d:04:d7:9d:
70:9b:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org