Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eeW_9chQK8GtZBkilf45BISeNV8.roa
File: eeW_9chQK8GtZBkilf45BISeNV8.roa (raw, json)
Hash identifier: 2r+xTGbP/hfjwku3xfDDEr19yfncVgwicpeDCcb1Se4=
Subject key identifier: 79:E5:BF:F5:C8:50:2B:C1:AD:64:19:22:95:FE:39:04:84:9E:35:5F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 197D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eeW_9chQK8GtZBkilf45BISeNV8.roa
Signing time: Sat 22 Oct 2022 06:06:35 +0000
ROA not before: Sat 22 Oct 2022 06:06:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6525 (0x197d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=79E5BFF5C8502BC1AD64192295FE3904849E355F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:7e:96:e0:7e:4a:2b:7c:04:85:e1:bd:4a:
f9:58:72:a8:b5:d8:41:a3:07:c9:c4:44:87:d7:7a:
36:07:da:27:10:cc:58:ac:ff:03:2f:72:0d:3e:8c:
48:08:c5:39:6e:b9:d5:3c:28:af:a9:7f:ac:f7:58:
19:69:33:ce:4e:32:47:94:58:df:70:01:b0:8d:70:
1a:12:6d:90:ec:30:73:c8:26:46:77:ef:09:5c:62:
90:87:85:ac:64:3b:79:1f:6b:f0:4e:96:1e:0d:5e:
94:8e:66:bf:f7:3e:d3:76:ef:91:a1:22:0f:c7:22:
00:e3:df:76:6a:cb:24:d7:f8:6a:6c:df:04:7b:c2:
37:43:04:08:4e:00:cc:6f:77:f5:ad:0e:ec:0c:8d:
86:43:e0:b9:c8:47:3f:7d:ef:4d:b8:2c:ef:db:c4:
9f:7c:1d:63:76:d5:90:a5:20:02:79:7f:71:1d:fd:
e0:dc:a6:0e:aa:f5:13:56:7d:8b:e8:83:e5:3a:2c:
a8:4a:9d:8e:94:f6:28:3b:b9:2d:7b:24:0d:77:b3:
70:ce:1e:10:49:f2:02:21:f3:33:af:89:49:27:d9:
28:7c:cf:f1:21:aa:70:5b:73:d3:d0:b9:34:8a:18:
ea:cb:66:c1:93:9b:93:72:98:da:77:9c:82:e5:80:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E5:BF:F5:C8:50:2B:C1:AD:64:19:22:95:FE:39:04:84:9E:35:5F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eeW_9chQK8GtZBkilf45BISeNV8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ec:0f:78:7b:d5:ee:b7:7c:35:c8:29:ee:6b:f4:15:83:24:
09:3a:e9:36:81:ee:b0:71:f6:4d:eb:b4:ad:1b:a3:53:20:37:
6e:77:6d:12:2d:b6:ed:04:77:1e:15:a6:8f:31:31:5e:48:3a:
63:b4:b1:ee:32:51:4d:79:b4:df:fa:08:0e:7a:27:23:d1:b6:
39:22:a7:fc:63:93:4d:03:a0:01:7f:cf:03:bd:69:0e:a2:95:
64:30:d3:c1:df:a9:05:36:41:da:46:6e:6f:20:c9:87:5a:a6:
5f:1e:b9:c2:48:37:8c:00:ea:f7:76:36:7c:60:cb:df:74:0f:
44:fa:93:bb:9c:b2:2d:2d:2a:a2:79:1b:52:df:d5:85:79:2c:
1c:75:9f:68:0d:27:37:7f:5c:3c:17:7f:3b:d0:5d:85:e7:88:
39:d8:cc:4e:d1:9a:a9:95:2f:c7:dc:be:87:8a:f5:1f:af:85:
1c:c2:f1:c0:24:63:52:f1:46:ca:5c:db:46:89:cd:dd:2d:6f:
e0:c8:7c:92:70:cd:5b:d4:6a:85:80:c4:aa:e1:40:1b:1d:c4:
fc:14:92:99:57:a8:3e:96:7b:9c:15:1b:a9:d9:5e:ec:30:c6:
46:0a:0b:b4:19:5b:d5:70:bd:57:09:d6:d9:5e:b8:09:e9:3a:
fc:28:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org