Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ftgQyThfsMSR3wJWEe_-kuE-5UQ.roa
File: ftgQyThfsMSR3wJWEe_-kuE-5UQ.roa (raw, json)
Hash identifier: bRXcQEfdltgqcbNPPEc5O8eEoP+X8F6EM39F/m7D7B4=
Subject key identifier: 7E:D8:10:C9:38:5F:B0:C4:91:DF:02:56:11:EF:FE:92:E1:3E:E5:44
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A2E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ftgQyThfsMSR3wJWEe_-kuE-5UQ.roa
Signing time: Sun 23 Oct 2022 13:03:30 +0000
ROA not before: Sun 23 Oct 2022 13:03:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6702 (0x1a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 23 13:03:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7ED810C9385FB0C491DF025611EFFE92E13EE544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:41:eb:04:69:c6:fd:07:29:43:00:69:48:
64:10:3d:fe:c0:be:a4:f6:11:51:18:d5:b7:4a:40:
44:f7:a6:27:a0:f0:1f:bb:3c:3c:21:98:2a:82:7b:
55:8f:a2:29:06:23:40:c7:69:df:68:95:5e:9d:55:
09:1d:5a:28:11:7b:fc:2d:46:98:ca:7f:f0:b7:e7:
f6:aa:d3:a7:5d:d7:e2:61:3e:a8:4b:06:ee:11:02:
89:0c:e8:d7:37:4a:3c:ca:f3:80:90:8a:a9:3f:14:
90:b3:b1:cf:d9:d0:75:9b:e5:62:70:05:b2:27:42:
0d:e2:10:b0:14:bd:0c:39:23:ee:4c:ed:e9:17:e0:
4c:55:d5:da:e5:cb:59:d7:f8:1e:b7:42:44:73:71:
7f:76:fb:56:18:2f:07:29:3d:34:15:40:23:82:b7:
cc:9a:f7:b9:a8:bb:1e:7e:d1:59:0f:ad:ee:d7:a6:
6c:7e:13:0b:45:e9:ad:01:c1:75:0e:96:90:ad:cc:
81:4b:b8:b4:7b:e1:71:c6:e8:9f:52:0b:20:ef:93:
e4:df:c8:9d:0f:3f:f7:55:a3:c5:6e:d1:b8:ee:94:
af:12:95:9b:f6:7f:f8:1e:9f:f8:c6:67:f7:8e:c3:
d5:06:7f:ad:53:a5:f9:08:cf:3a:b9:91:fd:ee:2a:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:10:C9:38:5F:B0:C4:91:DF:02:56:11:EF:FE:92:E1:3E:E5:44
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ftgQyThfsMSR3wJWEe_-kuE-5UQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:2d:4b:45:6f:09:7b:c0:4d:ea:6c:7d:cf:be:ee:d7:d2:31:
71:3d:71:cd:e1:81:21:bf:f6:b3:2d:5c:14:e0:39:2b:c3:96:
ad:72:81:c3:5b:fe:0d:fc:42:df:d7:26:ee:9f:2a:f7:c7:f7:
ae:6d:35:37:89:a2:45:d4:06:ab:45:8f:47:03:0f:fd:0c:87:
43:1e:40:d0:dc:da:ab:0b:64:56:3a:41:b1:0d:57:43:5f:da:
2d:d2:94:ae:26:6a:99:90:5e:a5:44:1a:9a:98:41:c3:15:bd:
b9:4e:fe:2b:6e:01:6e:5e:f4:b7:83:65:8a:19:1c:b8:d5:a7:
3c:14:36:05:18:a7:cb:0b:5f:70:ee:b7:3c:83:cb:6f:62:75:
91:51:4d:19:71:c8:31:c1:b6:aa:fa:25:c0:c8:4f:29:24:1a:
6e:41:35:08:c3:e7:56:15:32:45:ba:24:27:15:ec:8a:bf:4b:
35:6d:7c:09:f3:fb:0d:ce:f7:93:41:62:13:bd:ef:92:1d:45:
7e:79:37:fb:7d:45:89:d5:a5:7e:75:24:bd:b7:59:85:a5:6b:
2f:db:8e:91:73:74:15:61:d5:9a:ec:f7:24:b1:e0:64:ea:87:
09:87:41:cd:0f:3a:71:67:a4:fd:00:cb:7e:e5:82:d3:df:0e:
5f:0f:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org