Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYhCpNqHAKta9CKoX5ODszh3zlI.roa
File: ZYhCpNqHAKta9CKoX5ODszh3zlI.roa (raw, json)
Hash identifier: qeCtd//Tc3FNZ9DZFByi+T/PpOh1TpcZDqG/ZSNi6wY=
Subject key identifier: 65:88:42:A4:DA:87:00:AB:5A:F4:22:A8:5F:93:83:B3:38:77:CE:52
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYhCpNqHAKta9CKoX5ODszh3zlI.roa
Signing time: Sat 22 Oct 2022 06:02:33 +0000
ROA not before: Sat 22 Oct 2022 06:02:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6322 (0x18b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:02:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=658842A4DA8700AB5AF422A85F9383B33877CE52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:2f:48:c6:17:70:9d:5e:5b:46:9c:ea:98:
14:77:2a:32:ac:f1:e3:b0:5d:02:a4:20:63:4e:1c:
ab:35:f6:18:f8:b7:09:a7:0d:82:d8:a2:ed:60:be:
83:0b:77:f5:9e:9d:1a:4e:22:35:b3:75:65:e0:87:
75:28:47:0d:76:6f:77:66:32:0a:73:cd:52:08:d0:
af:76:a2:1f:79:24:76:e8:58:ef:8f:80:93:1d:92:
90:28:99:46:c0:13:83:b5:ef:4c:e9:49:66:ea:a6:
d4:da:a4:1f:8a:4c:42:27:6f:7c:14:7f:4b:b2:28:
c9:ff:ed:7a:93:cd:78:f9:1d:a5:58:80:a0:82:42:
f7:73:e0:3d:56:86:55:4f:12:c2:1f:36:b3:16:15:
d1:b4:ea:b3:3a:c1:35:1c:b0:e0:43:c4:0f:ee:64:
0c:89:f0:e7:0d:44:20:0c:6f:49:8c:15:e6:0c:12:
52:e0:bb:1c:f4:9e:0e:78:9c:2b:f0:c8:b8:7a:11:
67:76:53:82:22:8f:87:cf:dc:96:1c:0a:4f:10:e1:
06:d5:6d:18:f4:9b:dc:12:6b:5f:12:be:b1:f7:b0:
9c:20:6a:9e:12:58:fe:48:4d:08:41:ca:09:90:ad:
c3:29:bc:c0:86:26:a7:1a:47:6b:a4:6b:42:3d:a9:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:42:A4:DA:87:00:AB:5A:F4:22:A8:5F:93:83:B3:38:77:CE:52
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYhCpNqHAKta9CKoX5ODszh3zlI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:77:0b:5c:b4:67:22:31:3b:67:13:a8:2f:42:a6:f2:23:f8:
a6:14:fe:ab:5b:62:a2:eb:1b:33:c7:4f:9b:fa:8d:1c:02:ef:
50:5a:0c:54:ad:e0:51:56:59:91:76:3d:9a:61:3e:18:0a:0d:
d2:9a:a0:67:3d:df:9e:0a:fa:9f:0e:47:39:c8:89:c0:30:53:
07:3f:15:4b:4b:6d:75:ff:32:7b:1f:b9:2f:3a:af:2b:35:c0:
7a:8c:d8:99:ea:10:50:e5:93:37:d2:55:d6:02:4a:c0:a0:c1:
93:e1:ba:47:96:e3:e0:e8:ec:d4:d1:18:a1:39:ff:69:1b:19:
60:11:e4:68:05:cf:78:a4:f5:06:6f:fe:7d:90:89:36:2a:ec:
5d:96:a0:59:bb:b2:69:12:7c:7d:f5:7c:7f:88:21:75:af:ea:
7b:2e:34:a3:bb:0e:62:d0:8a:97:2a:c5:55:15:d6:f8:11:d3:
86:d3:a4:4b:0f:4d:4a:4f:7f:34:9b:f7:ff:f2:67:bd:bc:da:
64:a7:ec:35:14:87:7e:f6:2d:67:ba:e8:5b:41:10:50:8e:cf:
e2:2f:5f:a2:cb:3d:89:3f:25:29:15:cd:6b:7e:74:60:2a:1a:
c3:14:6b:58:93:2a:29:c1:30:03:23:8e:68:61:6b:9e:d8:cc:
4e:ef:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org