Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/haOhTcW5DNX0V-KoTOpkLr6nnsk.roa
File: haOhTcW5DNX0V-KoTOpkLr6nnsk.roa (raw, json)
Hash identifier: zxFlz/9DZ5EqeO7JsjxQW2PO/fgQQJqIL8dQOa7fxus=
Subject key identifier: 85:A3:A1:4D:C5:B9:0C:D5:F4:57:E2:A8:4C:EA:64:2E:BE:A7:9E:C9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/haOhTcW5DNX0V-KoTOpkLr6nnsk.roa
Signing time: Thu 15 Sep 2022 02:35:46 +0000
ROA not before: Thu 15 Sep 2022 02:35:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=85A3A14DC5B90CD5F457E2A84CEA642EBEA79EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:fc:01:0c:97:03:90:91:ad:fd:5c:d0:0e:
29:9f:e3:6a:ad:50:c4:2e:cc:78:af:0c:16:f4:fd:
b9:cb:e3:e0:ba:31:dd:74:06:f6:6e:72:38:56:1a:
ea:50:30:ac:02:7e:fb:19:3e:b9:f9:29:9d:0d:ef:
9a:02:8a:3f:7f:e9:52:fb:69:c2:aa:2a:a6:40:0c:
2c:7e:01:7f:e1:ab:c5:54:b5:de:00:ad:73:5a:68:
53:15:f3:14:78:9a:c6:7c:e3:37:fd:fe:eb:ad:cf:
ea:75:e9:c7:8a:de:fa:ce:09:6f:3c:aa:fc:7a:be:
fc:f3:8d:08:e9:d5:de:da:14:f3:8d:bb:5e:a7:49:
ee:47:bd:76:4f:48:37:47:b5:55:65:12:52:66:c2:
08:41:33:e1:6c:87:a1:05:14:4f:88:99:e1:eb:8e:
4d:e4:15:8c:07:07:f2:9f:4b:52:58:53:bb:93:47:
cb:6d:a5:55:38:dd:36:36:14:28:c6:5f:45:ab:a8:
e5:32:ce:4b:c5:5d:e9:92:14:06:5c:dd:f4:7f:96:
ba:7e:5e:2d:af:e8:8c:66:db:32:f1:af:7a:29:56:
b2:af:60:8b:bb:c6:36:ad:ff:8e:8f:2e:12:63:47:
e3:69:e9:66:9c:89:45:65:59:7a:eb:2d:c4:f4:a6:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:A1:4D:C5:B9:0C:D5:F4:57:E2:A8:4C:EA:64:2E:BE:A7:9E:C9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/haOhTcW5DNX0V-KoTOpkLr6nnsk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c6:22:89:0e:17:7f:2c:61:b8:be:89:5a:4e:4a:e0:c8:db:
43:51:a3:8b:90:99:6f:07:79:84:d8:ff:0c:4a:85:61:9c:ed:
9c:d7:6a:b4:10:95:f2:bc:86:97:68:ee:96:4e:85:f4:5d:d8:
bf:bb:3f:a4:c5:8c:ca:9c:7b:47:7b:08:e6:d8:60:e0:de:db:
0e:5b:fc:0f:42:85:4f:ff:f9:b9:a4:e2:e2:9e:44:3a:ca:ca:
f3:1e:00:a0:7e:57:95:33:3b:4b:fe:9e:6b:f6:db:a6:78:ff:
04:d9:ac:58:eb:1a:3a:8d:43:82:55:37:95:5e:a5:33:61:c4:
94:65:63:bd:e6:b9:f2:9e:77:42:0b:3e:27:c6:8f:16:e8:7c:
19:64:f0:71:90:c7:93:2e:9a:88:0b:6c:b7:98:ad:84:9e:04:
e7:82:32:17:0d:24:a5:34:1a:90:12:3d:2e:6a:ef:03:0e:cb:
ea:74:9a:78:ed:ea:9c:e5:74:3a:f7:65:f4:cd:9c:49:d5:26:
f3:05:11:9b:c6:e2:a5:3b:3d:6d:f8:a8:e2:26:e9:ef:02:f1:
7d:4a:21:bd:17:e5:0c:59:16:a0:f7:4d:b5:44:38:8c:45:30:
70:f4:9a:1e:32:6f:c3:2d:f1:1a:ee:5a:41:17:a6:a8:7f:83:
0e:ce:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org