Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bBJvUcl8fqfGJJ2oD_PinQw5foQ.roa
File: bBJvUcl8fqfGJJ2oD_PinQw5foQ.roa (raw, json)
Hash identifier: 0MP5ZRz1DNfEkRdnwSptZm4tYH8dSejbicFzqXCEeso=
Subject key identifier: 6C:12:6F:51:C9:7C:7E:A7:C6:24:9D:A8:0F:F3:E2:9D:0C:39:7E:84
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19D4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bBJvUcl8fqfGJJ2oD_PinQw5foQ.roa
Signing time: Sat 22 Oct 2022 06:11:39 +0000
ROA not before: Sat 22 Oct 2022 06:11:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6612 (0x19d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6C126F51C97C7EA7C6249DA80FF3E29D0C397E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:5f:b8:b3:6f:85:11:fb:e7:48:44:da:c5:
16:a5:d7:79:30:e7:6e:51:cb:c0:01:13:db:f7:2e:
09:8f:28:3e:f5:12:7e:f0:da:b0:77:25:0f:1b:59:
b1:d6:d3:48:4c:1a:cb:a1:2b:e9:00:9e:f5:fe:6c:
09:f2:f4:48:6b:ad:63:21:66:f0:9c:69:48:c8:3c:
a7:1a:e7:53:23:84:df:5a:80:e3:c8:45:ee:25:da:
90:c3:45:91:8d:2f:28:98:ef:d0:c7:0c:36:91:b4:
cb:10:85:91:68:24:4a:3d:54:94:66:f0:5b:0f:64:
8b:07:0f:38:23:df:4c:de:f6:86:32:cb:1d:73:53:
c5:47:d0:f0:19:94:e3:fa:a0:15:cf:94:2d:8d:d4:
0a:f8:7f:24:c2:8a:11:1a:53:f6:7d:29:05:7b:9c:
7f:72:23:f4:2c:b5:b0:34:f3:bc:28:14:a4:34:d8:
9f:60:59:74:bd:05:7a:60:63:b7:c8:a8:d8:b2:17:
29:04:a8:79:bb:bc:02:27:0a:93:f9:cb:f9:2a:dc:
8d:36:a9:b2:c2:00:ea:d9:d6:50:54:e2:e3:b2:60:
1a:21:73:d8:8d:14:dc:eb:7c:9e:5c:8b:e5:3a:9c:
18:1c:be:38:a5:e9:37:4f:95:1c:38:3e:1c:96:03:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:12:6F:51:C9:7C:7E:A7:C6:24:9D:A8:0F:F3:E2:9D:0C:39:7E:84
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bBJvUcl8fqfGJJ2oD_PinQw5foQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
11:95:d3:26:4c:d6:67:f4:f4:c5:63:38:5a:c3:25:2f:e4:21:
8a:d5:22:a3:74:7d:15:d6:87:50:60:b9:9b:c7:b3:db:6d:63:
7c:10:a6:1d:c2:42:82:0e:95:01:9f:46:81:95:5c:3c:74:88:
0b:7d:7d:40:07:f9:5d:64:46:72:95:38:13:58:80:80:4e:37:
bb:8b:9a:3c:bc:d4:2d:68:2f:ac:d8:7c:a4:5b:67:1d:d4:b8:
c4:8a:da:01:ca:60:88:6d:47:eb:3e:4f:a8:ec:75:8d:4a:77:
41:96:ed:14:16:a6:5b:da:a9:1a:db:29:47:d8:28:d4:50:9b:
d3:1f:11:03:9b:d4:a9:d8:81:a8:d5:d7:6d:a4:09:71:fd:75:
92:e7:75:87:fa:5c:2a:19:9f:57:3c:05:62:df:70:66:ab:f8:
d7:19:12:77:12:2c:e8:e8:85:c4:f4:d7:cd:95:d2:e1:1e:fe:
cc:9c:f7:da:a1:04:b0:eb:ce:fc:d0:fc:44:a2:1a:65:b5:1c:
58:63:a2:eb:79:e6:47:60:35:1b:d3:7c:a9:14:05:1e:b0:d5:
c7:b0:9e:12:7e:5c:1f:5c:c1:69:7f:da:88:2a:f0:78:34:62:
1e:eb:5d:f8:ac:57:66:fb:4c:17:10:c9:78:80:93:21:11:72:
16:8e:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org