Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ao_4_WMGD25CIKwsj7vPnUSZ6gM.roa
File: ao_4_WMGD25CIKwsj7vPnUSZ6gM.roa (raw, json)
Hash identifier: Iq9hVcX5M3wE8kftemR7HZ1YfaUCVIKN+WBur18PtzQ=
Subject key identifier: 6A:8F:F8:FD:63:06:0F:6E:42:20:AC:2C:8F:BB:CF:9D:44:99:EA:03
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1973
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ao_4_WMGD25CIKwsj7vPnUSZ6gM.roa
Signing time: Sat 22 Oct 2022 06:06:32 +0000
ROA not before: Sat 22 Oct 2022 06:06:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6515 (0x1973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A8FF8FD63060F6E4220AC2C8FBBCF9D4499EA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:d9:b1:1f:ed:9a:ca:59:21:9d:0f:3f:90:
e7:8a:2d:6c:65:99:1f:b7:56:c5:7c:4f:e7:1a:2c:
e5:b9:e8:04:98:da:d6:19:57:7d:10:52:8a:54:29:
52:51:02:ef:81:a4:0c:bc:f1:94:bf:9f:70:52:16:
e8:2b:83:2e:e2:e5:a2:0a:ea:21:8a:68:a4:26:a0:
6c:d6:58:39:5d:b0:fd:9c:ff:6c:1e:04:81:be:9a:
de:1d:61:37:b1:7a:0d:c7:60:a3:38:b7:d2:d2:25:
fe:72:0b:26:4a:70:7f:56:4c:0b:21:c1:37:f3:97:
14:2b:5c:32:a5:52:8b:79:76:8e:92:e9:fc:c3:37:
3a:47:dc:64:71:1e:47:b7:7d:65:ca:9c:6f:3e:ac:
cd:11:62:d0:ba:de:18:87:b3:90:df:65:dd:55:aa:
b4:56:74:bc:32:c2:d1:f9:ff:ef:2f:04:2f:f6:7b:
32:c7:73:c5:65:67:0e:8f:ff:b8:fb:3d:ee:53:c5:
22:a0:6f:5c:4a:c8:ee:b9:c2:53:0e:4f:17:b7:6c:
36:d4:de:1a:4e:1a:0c:8d:24:df:c4:8a:db:9b:74:
01:8b:41:41:21:73:ea:f1:a2:91:be:90:0b:69:a5:
53:d0:5f:35:39:a5:9d:b4:9d:b6:b4:ba:09:a9:8d:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:F8:FD:63:06:0F:6E:42:20:AC:2C:8F:BB:CF:9D:44:99:EA:03
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ao_4_WMGD25CIKwsj7vPnUSZ6gM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.24.0/21
Signature Algorithm: sha256WithRSAEncryption
84:1e:98:2a:f6:ff:2e:29:30:aa:37:fb:6c:52:44:b1:dc:a2:
36:7a:c9:f8:f1:f9:10:79:4f:eb:64:35:92:85:5b:da:54:57:
a9:46:58:ca:6b:97:5f:ed:5c:81:46:d6:aa:06:57:84:fd:4b:
b8:36:03:d8:36:50:9c:51:de:b7:b5:b3:5b:11:1b:fb:c4:6d:
9d:53:12:05:bb:fa:d7:3b:3e:f2:6b:96:ac:17:e8:9f:b4:64:
dd:02:89:7b:2f:42:3b:51:5e:87:37:3b:ff:0c:aa:3e:fb:e1:
5b:3f:6e:2b:97:3a:02:d7:a9:48:a0:53:94:ed:26:79:3b:80:
7d:1a:9c:24:08:23:7c:52:63:93:7a:bb:cc:89:df:f6:0c:2c:
87:78:07:b5:38:7c:d4:1b:e2:d2:64:61:b0:48:34:f6:1e:da:
4b:64:f3:5e:ab:c6:86:50:ac:b4:12:97:54:8f:7b:0a:b4:d8:
8b:b3:bb:31:07:9c:cc:ca:ac:ee:47:80:59:9d:51:ca:7e:99:
a6:33:56:3d:43:f0:1b:15:65:75:46:b5:ce:5c:eb:48:e5:05:
61:56:e8:d0:1a:03:03:31:46:72:98:f8:cb:ec:0d:68:57:8f:
21:85:55:c0:b5:9f:66:a4:8d:27:1f:4b:c4:ff:b1:70:db:2e:
40:3e:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org