Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6FjY0cK1CTkwLwHvSWe4Hi6_Yw.roa
File: Z6FjY0cK1CTkwLwHvSWe4Hi6_Yw.roa (raw, json)
Hash identifier: VoXvBsTsYyA7yL8spgy5+Vq0x0CpQjl9CWbvXyXBA/U=
Subject key identifier: 67:A1:63:63:47:0A:D4:24:E4:C0:BC:07:BD:25:9E:E0:78:BA:FD:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6FjY0cK1CTkwLwHvSWe4Hi6_Yw.roa
Signing time: Thu 15 Sep 2022 02:36:18 +0000
ROA not before: Thu 15 Sep 2022 02:36:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=67A16363470AD424E4C0BC07BD259EE078BAFD8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:ce:a4:8c:92:20:df:bf:90:87:76:6b:6b:
f5:64:2f:aa:fa:a7:57:74:59:71:1d:99:b1:9a:64:
9c:0a:5d:82:53:35:a1:0c:5a:67:b1:e0:3b:ea:f2:
26:aa:a7:9e:a5:8a:06:22:b1:e9:b6:7a:8e:62:f4:
50:73:c2:09:4d:b7:58:f9:29:43:62:e0:cb:f1:60:
f9:26:a8:64:a2:54:24:5a:ed:fb:55:75:ed:60:e5:
14:65:b6:02:22:49:22:75:08:13:a3:3b:0c:65:ed:
36:5f:b7:2b:29:45:e6:3b:fb:70:61:e4:dd:59:aa:
83:fc:d0:99:7e:e2:56:d2:1c:b6:a5:34:c3:47:fc:
43:02:88:84:8d:94:cd:3c:b8:51:b2:fd:f1:63:fd:
dd:61:3e:18:4e:cf:80:d5:54:b5:9e:9c:71:91:b7:
7a:2d:9a:36:e3:fb:2d:1a:f4:a9:5e:42:85:8a:a8:
ce:3b:79:36:76:ea:ca:47:4f:ec:85:f4:ad:9c:a4:
7c:bb:f4:de:fc:d3:84:52:cb:14:31:14:d0:3f:b3:
e6:4f:fc:74:c6:00:7a:e6:70:7e:9f:0c:70:46:ec:
e3:fe:2d:c7:e0:2e:20:6b:91:a2:0c:f1:9d:81:6b:
b8:30:3f:54:ba:e1:45:76:61:bc:cc:59:be:3e:0a:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:63:63:47:0A:D4:24:E4:C0:BC:07:BD:25:9E:E0:78:BA:FD:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z6FjY0cK1CTkwLwHvSWe4Hi6_Yw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e7:f0:73:2d:33:40:22:43:a6:f4:af:35:1c:5f:f8:41:f6:
e2:82:cd:e0:d1:65:f0:b9:b7:72:bc:02:c4:74:d7:75:d2:37:
9f:f2:34:93:94:bf:5a:f0:c9:96:0f:f0:7e:43:8f:a4:c2:a4:
1f:bb:c5:0e:61:76:df:6d:a4:d5:13:2c:f7:a2:a4:c8:3d:95:
ff:08:58:5d:4e:91:bb:ae:48:1c:4e:f1:f6:eb:dc:cf:11:17:
fc:c4:af:a9:97:db:2a:29:99:00:a2:22:34:e3:94:d7:39:77:
aa:5e:8b:94:1f:0f:58:7a:fc:f2:7d:ad:e4:cc:ec:aa:7f:09:
03:48:03:a5:f6:c8:37:ef:5d:e0:15:19:8c:8b:9e:70:8b:73:
db:43:0c:f9:b6:5b:fe:29:3b:65:7a:3e:82:6b:8a:d4:2d:3b:
e3:e8:30:3f:6d:ae:3a:55:66:f9:33:5e:1d:f9:a2:b3:12:b8:
1b:49:24:0a:c4:91:a0:3e:98:bf:d3:20:2b:31:a7:80:90:ed:
9d:34:2b:19:4f:6a:84:5d:b4:b4:4d:29:a1:a6:73:25:7c:60:
70:e1:c9:d6:b1:a8:30:71:7f:5f:4d:60:81:c6:86:a4:65:7a:
2b:11:44:f3:2b:df:46:8f:ef:ea:43:91:89:b0:87:d8:5c:cd:
88:6b:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org