Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g7DMPlogZrz-PQxH9tiJGyCb4jg.roa
File: g7DMPlogZrz-PQxH9tiJGyCb4jg.roa (raw, json)
Hash identifier: HVOmocTfZiu/vhTNx7y2eCmbZike7vltFeR77arotyg=
Subject key identifier: 83:B0:CC:3E:5A:20:66:BC:FE:3D:0C:47:F6:D8:89:1B:20:9B:E2:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g7DMPlogZrz-PQxH9tiJGyCb4jg.roa
Signing time: Thu 15 Sep 2022 02:35:27 +0000
ROA not before: Thu 15 Sep 2022 02:35:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.32.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=83B0CC3E5A2066BCFE3D0C47F6D8891B209BE238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:37:a9:37:9f:d5:0b:ef:72:d0:fc:80:99:
40:44:45:9c:95:7b:f4:50:75:9c:9a:06:d4:da:d1:
3a:6e:93:28:3b:4e:6d:5c:5c:10:fb:bc:cc:94:18:
d0:8f:d5:93:f1:d7:be:58:24:ec:bc:66:5b:b0:70:
8a:10:59:9e:e6:ce:ea:70:2b:fa:2f:fc:08:27:42:
b4:c0:fc:94:9e:3e:1f:a1:31:4e:ac:90:64:11:3f:
0e:6d:0c:99:ab:d0:12:b3:b5:48:a7:3d:62:25:ab:
03:50:31:5d:dd:44:19:e3:f7:b9:6f:14:bc:e6:34:
88:f3:5c:e7:26:d7:cd:ca:55:7a:1c:aa:80:be:fe:
60:11:c4:0e:26:10:b3:c4:cf:61:3c:c3:93:32:1c:
6f:84:1b:6e:1b:3f:c1:93:f6:c6:1a:70:43:e8:47:
5a:19:8b:59:1d:9e:7f:75:d9:ed:4a:f4:0f:27:d7:
00:ec:7d:da:81:11:e4:ca:42:8e:4a:06:92:33:61:
97:33:07:ba:af:10:2c:55:01:89:57:63:80:95:4a:
1a:71:75:c1:d5:1a:04:16:25:19:05:61:5d:eb:00:
26:3b:a3:7e:b6:4f:5b:76:a3:89:55:d7:e3:71:82:
8b:f9:49:66:ad:a6:3d:f8:93:79:18:68:25:68:62:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B0:CC:3E:5A:20:66:BC:FE:3D:0C:47:F6:D8:89:1B:20:9B:E2:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g7DMPlogZrz-PQxH9tiJGyCb4jg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:c0:0b:51:3c:e3:6d:20:16:04:51:8f:d4:8a:18:c4:77:ac:
bd:6f:e6:a9:88:00:04:b9:e1:b5:73:f9:1c:6f:5c:18:a9:31:
bd:0b:10:b7:47:a4:34:1b:ed:9f:be:2f:ee:87:70:04:55:28:
63:ae:a1:2d:1b:e7:1b:40:3e:73:61:ca:21:da:e7:ca:56:f2:
ad:46:72:7b:97:d3:5a:53:ca:63:3f:51:3c:ed:b4:01:52:3b:
79:7f:a0:29:04:17:bb:68:e2:6e:2d:0e:7f:a8:1a:c6:54:3a:
59:5b:c4:55:04:03:a0:16:0c:d3:8d:47:c7:32:51:c1:f9:c4:
86:b9:24:63:86:c1:6f:87:33:e4:83:8d:7e:25:1d:35:ce:0b:
0d:fa:61:92:8b:56:73:15:b7:ea:b0:a6:53:ad:1e:21:23:24:
f8:27:9f:76:60:1f:91:cd:f1:65:7c:4d:cb:6d:e9:4c:9f:ee:
2b:25:62:a6:30:c6:e1:8e:20:09:32:dc:b9:09:62:d9:e8:4e:
22:0a:60:aa:87:2d:70:8e:47:2c:63:32:58:e7:71:e1:d3:cb:
f1:1e:4f:9e:34:ac:38:48:c8:98:3b:b0:3f:e5:9b:69:ab:bb:
ab:a4:72:c9:4d:b1:b0:4d:a6:68:b4:8b:85:01:3e:37:ef:0e:
29:fa:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org