Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hKMT-erRpIwlZnVNgHdo8_1pTsY.roa
File: hKMT-erRpIwlZnVNgHdo8_1pTsY.roa (raw, json)
Hash identifier: gojg9dNhtIKhSYWFAhPpNCfWC2dbPN1f1yO8ib+VWZM=
Subject key identifier: 84:A3:13:F9:EA:D1:A4:8C:25:66:75:4D:80:77:68:F3:FD:69:4E:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hKMT-erRpIwlZnVNgHdo8_1pTsY.roa
Signing time: Thu 15 Sep 2022 02:36:31 +0000
ROA not before: Thu 15 Sep 2022 02:36:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=84A313F9EAD1A48C2566754D807768F3FD694EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:8a:e2:78:cb:70:da:eb:82:c4:1e:a1:ce:
7e:8e:e4:3d:ab:f0:00:0d:5e:c5:c9:7b:b1:cf:97:
12:06:8a:ce:99:56:e9:c7:a1:48:15:97:db:5a:dc:
8d:b3:f2:90:5a:7d:1b:67:2c:d4:cf:02:99:2b:c6:
c7:9c:19:f4:79:87:46:0e:d2:f9:5e:c4:a5:1a:86:
d6:70:80:6a:be:66:2b:41:a2:d8:ce:79:d1:05:d6:
e7:31:13:e6:fd:44:ab:52:24:13:c5:2e:05:7d:ad:
31:50:50:bb:e5:8d:b3:6d:92:d9:64:60:35:eb:8f:
e6:32:53:47:8c:b3:a9:07:d2:e0:b7:a7:18:5d:f1:
ed:04:d6:ed:ce:31:50:d8:83:7e:0c:d0:7d:33:6b:
0a:9d:1c:ea:3e:47:6a:6a:bb:b6:33:92:82:0e:a5:
71:98:13:b5:bb:69:e5:71:72:dc:eb:b0:1a:ba:1f:
3c:b0:49:30:4c:4d:51:a5:65:49:36:21:67:e6:8d:
da:b8:be:4e:84:2b:ee:25:e8:bc:6b:3b:63:c4:c8:
d5:0d:e0:94:31:de:9a:0a:97:7d:62:6b:d0:13:b6:
47:dd:98:29:46:96:de:eb:20:97:57:d8:f6:77:70:
62:47:97:99:b7:6f:84:65:aa:14:26:14:7e:5e:67:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:13:F9:EA:D1:A4:8C:25:66:75:4D:80:77:68:F3:FD:69:4E:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hKMT-erRpIwlZnVNgHdo8_1pTsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
72:97:6b:0d:bb:2e:60:3f:a2:90:bf:14:bd:4c:d0:fa:7a:d0:
f9:6b:06:a5:fd:33:33:02:20:91:4e:b6:0a:c3:71:62:94:39:
04:80:83:91:ed:0b:73:a6:ca:44:84:f3:0b:67:d9:cf:d9:65:
e1:98:e3:30:4d:30:2a:86:ac:9e:1e:d0:fd:84:ff:a9:62:3a:
8e:5f:52:9e:96:4b:67:a3:85:99:c4:4f:bc:8d:b9:2e:09:ec:
a1:e3:00:05:b6:52:94:53:79:5a:ba:4c:7b:04:38:69:4f:5d:
65:60:f3:ee:93:91:86:4c:30:f9:ad:30:dd:5d:1f:93:9a:0c:
c1:e8:33:e1:2d:59:a0:0e:7f:28:d0:1a:d9:e9:78:fa:57:f4:
b1:e8:91:b3:eb:80:1e:6a:e3:a0:c6:cb:7a:b3:fb:d5:16:09:
5c:f3:74:93:95:43:6c:66:32:60:46:25:82:ab:78:94:75:ad:
53:99:71:25:5b:28:e2:cd:00:a0:1e:5e:a8:c5:04:4e:ab:bd:
cb:52:0c:d2:09:6a:81:9e:da:8b:f2:5f:2d:7d:1c:09:1f:db:
e7:df:be:d8:c1:c9:c9:7b:52:13:84:be:b2:30:69:20:af:94:
ff:8a:29:d3:2e:6f:d2:0d:89:2d:cf:a6:30:8a:98:de:51:49:
05:46:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org