Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cpqA3IstyEM42uRM_yD-6GbUn3g.roa
File: cpqA3IstyEM42uRM_yD-6GbUn3g.roa (raw, json)
Hash identifier: 9fuHjhSyPufHVUQxc6FHZb4zVt0YpFOAbFh7n31nT+I=
Subject key identifier: 72:9A:80:DC:8B:2D:C8:43:38:DA:E4:4C:FF:20:FE:E8:66:D4:9F:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 192E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cpqA3IstyEM42uRM_yD-6GbUn3g.roa
Signing time: Sat 22 Oct 2022 06:06:11 +0000
ROA not before: Sat 22 Oct 2022 06:06:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6446 (0x192e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=729A80DC8B2DC84338DAE44CFF20FEE866D49F78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:f4:67:ec:4e:ae:29:59:82:e0:25:05:82:
ee:30:6f:5b:d4:a4:d7:2e:c5:e1:82:52:1c:4e:db:
a0:50:20:03:26:69:60:4e:54:32:01:61:ec:b1:b1:
7e:a1:21:30:62:7e:f7:a3:a0:f8:54:e9:62:ba:dd:
cd:d3:93:0e:f8:29:e4:65:cb:e3:fb:72:ff:1f:b8:
93:7d:4f:94:7a:78:b3:4f:fe:3f:38:eb:eb:76:d9:
c5:18:f8:af:d4:13:a4:c6:bc:56:78:79:5c:09:6c:
ed:56:5f:9d:34:10:33:c7:7c:87:40:55:fd:06:66:
79:32:b9:71:ab:b1:3d:21:de:15:af:39:71:4b:eb:
20:09:9e:91:09:50:cc:60:cb:39:fb:6e:08:6a:75:
13:db:8a:c2:af:48:da:72:d8:08:c5:eb:39:a8:f4:
86:7c:94:be:a0:1f:f9:5a:bd:cd:e9:5d:bb:f5:a3:
fc:37:57:77:d4:3d:8c:29:c0:7b:33:35:a4:3f:fe:
32:84:e0:b9:a0:99:72:b1:1a:a7:af:e1:81:d1:e6:
28:aa:63:68:d6:dd:49:31:0e:ff:87:dd:ef:c5:b3:
de:02:f6:32:56:e6:f9:0d:53:fd:49:33:5a:21:4d:
0d:8d:7e:96:07:c8:70:e7:eb:98:3c:ca:39:ab:46:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:80:DC:8B:2D:C8:43:38:DA:E4:4C:FF:20:FE:E8:66:D4:9F:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cpqA3IstyEM42uRM_yD-6GbUn3g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.43.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1d:56:9e:14:6e:76:a1:15:7f:40:71:5f:6f:87:d1:5a:b6:
1a:7a:92:3b:0c:45:1a:e2:37:1c:29:79:a1:8c:ca:6b:e2:66:
36:ff:55:70:a2:56:96:b4:28:42:2c:a0:56:99:b5:e9:bf:52:
46:43:94:e7:f6:6a:ef:f3:ed:06:83:fa:79:76:e0:00:f7:7f:
25:41:b5:9d:b8:27:bd:ae:8c:9b:c2:54:eb:d6:66:bb:1c:f7:
f6:53:8c:d7:39:f2:23:52:bc:54:59:62:0c:32:e8:8c:15:87:
81:61:f9:68:ba:bd:d5:85:6a:18:3f:e2:ec:50:76:c0:ce:63:
85:fb:31:cc:cb:b4:a2:9f:ae:a8:26:f1:c7:0d:32:0d:aa:21:
e3:7d:f9:3b:3a:52:19:7e:0a:d3:3e:be:01:9e:b0:b5:a9:5d:
09:d9:93:57:3b:91:e1:eb:b3:89:53:95:e9:f7:92:00:fc:48:
33:af:98:e1:f9:ac:d7:59:59:53:1b:10:91:30:04:e2:cb:ba:
26:06:96:c8:18:39:c4:54:b0:82:53:23:18:d0:bb:1b:1c:05:
2d:d6:d9:a8:20:35:5f:39:c6:a4:4f:fe:91:9e:54:3c:dd:cb:
84:f2:6d:91:64:3d:aa:6a:a1:f4:0b:3c:e5:69:3d:38:f4:20:
ef:70:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org