Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBfhsYZz0ZJ85lBe7a4eGOONocc.roa
File: gBfhsYZz0ZJ85lBe7a4eGOONocc.roa (raw, json)
Hash identifier: UhVVrRTFeYaOQlgq6k46wXgX3zWz8P6ABHgASnDseTE=
Subject key identifier: 80:17:E1:B1:86:73:D1:92:7C:E6:50:5E:ED:AE:1E:18:E3:8D:A1:C7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1900
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBfhsYZz0ZJ85lBe7a4eGOONocc.roa
Signing time: Sat 22 Oct 2022 06:05:58 +0000
ROA not before: Sat 22 Oct 2022 06:05:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6400 (0x1900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8017E1B18673D1927CE6505EEDAE1E18E38DA1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:fe:a4:ae:cb:b4:e5:5a:ed:40:6f:0f:82:
3c:24:38:2f:90:0c:04:fe:a0:38:6d:00:db:3e:a2:
f2:6c:ca:cd:83:b7:ab:37:3f:09:10:ec:30:df:31:
ac:50:95:10:14:9c:4d:c9:9d:d7:d5:4c:07:7c:73:
81:0e:74:a0:f5:be:7e:24:3a:fc:75:17:26:f3:4a:
1a:aa:02:50:d6:b0:19:d7:05:b6:3c:76:7f:8a:1f:
86:95:0e:1c:64:bc:a3:a2:62:79:24:a4:c1:a5:0a:
a0:d8:01:f7:84:92:58:60:f6:6d:05:ee:e2:a2:63:
b0:fa:20:40:c6:b3:47:b5:d4:8b:6a:10:36:38:47:
00:e8:03:18:f5:92:98:58:ef:5b:b4:25:98:03:4f:
ad:d0:ba:e5:d3:7b:c5:1d:46:19:95:df:33:fc:66:
2d:68:b3:3c:e9:e8:e9:88:72:90:e1:05:48:7f:90:
76:eb:97:c1:be:ae:4b:67:f8:fd:0a:50:ac:29:a1:
f9:3c:cf:70:40:c9:41:ac:fa:1a:09:8f:0c:b3:c5:
72:76:10:5c:e5:87:62:cb:8f:f1:a9:50:07:e8:ab:
e4:6f:83:3a:e7:d3:ca:cc:8e:48:5a:1c:24:70:46:
4f:e0:07:22:55:aa:5c:56:fc:09:32:a5:71:0e:2d:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:E1:B1:86:73:D1:92:7C:E6:50:5E:ED:AE:1E:18:E3:8D:A1:C7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gBfhsYZz0ZJ85lBe7a4eGOONocc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/22
Signature Algorithm: sha256WithRSAEncryption
81:74:6a:be:8e:9f:04:34:7d:31:44:cf:8f:7f:b6:73:fb:10:
9f:13:f3:de:c6:e9:87:41:8d:9e:34:b1:10:88:b3:a5:fb:1b:
77:24:94:8c:cb:80:42:70:66:cb:61:f6:f8:63:ad:a9:83:9f:
e8:cb:65:aa:0f:f3:ae:ae:f5:b0:a2:08:65:45:d0:73:f5:79:
25:a3:41:bc:7a:5e:1b:15:60:9e:7f:ce:fe:95:81:5f:d8:7d:
19:d4:f2:b6:96:36:9c:ff:30:cf:71:c4:69:8a:aa:53:95:97:
64:86:93:7d:1a:57:32:05:f2:4e:d6:7c:e2:07:72:eb:d3:ea:
93:99:74:f2:0f:8a:a5:6e:24:20:e0:95:9d:55:3c:c9:d2:1a:
3c:99:34:88:80:75:4f:c9:8e:0f:20:ea:e1:ad:ef:2c:62:f2:
62:29:e2:6a:09:d3:0a:bc:7c:ef:da:06:76:76:c5:78:3c:5c:
26:9e:8d:e2:1a:8b:c6:f7:ce:63:b5:29:a1:e4:c7:58:b1:16:
66:34:43:5c:30:08:67:69:4d:4b:54:e5:91:04:fa:88:a4:d3:
f4:c9:e3:f3:a1:28:26:45:3c:6f:89:4d:96:57:ef:c1:1d:3f:
15:b1:e0:64:b9:ef:98:93:b5:b6:f5:0f:06:f0:92:a9:73:1d:
e9:11:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org