Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/heq8OAZXyhq4SIvz4Eb11oQlm0Q.roa
File: heq8OAZXyhq4SIvz4Eb11oQlm0Q.roa (raw, json)
Hash identifier: UdJkfhV57p1Lqmypot4uhzS8tX9s3lj+/Kn+wuM96go=
Subject key identifier: 85:EA:BC:38:06:57:CA:1A:B8:48:8B:F3:E0:46:F5:D6:84:25:9B:44
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18A0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/heq8OAZXyhq4SIvz4Eb11oQlm0Q.roa
Signing time: Sat 22 Oct 2022 06:01:35 +0000
ROA not before: Sat 22 Oct 2022 06:01:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6304 (0x18a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:01:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=85EABC380657CA1AB8488BF3E046F5D684259B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:07:13:06:d6:a6:8d:1c:f7:6c:8b:ea:ca:
62:8f:b9:3a:3b:8e:42:0e:96:77:d5:5e:d9:0c:43:
ff:f3:d6:9f:e6:e4:dc:ea:f4:88:bc:43:80:20:61:
19:d7:b4:53:71:7e:e6:f6:b9:ff:9a:a7:08:e3:d4:
32:7e:2b:94:15:50:47:b5:14:da:14:3f:98:b2:81:
a3:a3:4f:48:c4:2c:7a:99:62:1e:45:59:09:6d:7c:
84:31:b7:41:c2:32:5d:41:c5:45:00:f6:a7:d1:fb:
d4:c9:57:7b:08:77:3e:dc:f4:4a:41:80:3c:2d:93:
9f:5d:90:01:f2:09:c0:90:67:d3:0c:c3:bc:d8:9e:
b2:89:47:f9:bb:8f:01:47:54:09:01:09:09:54:a7:
3d:70:df:19:84:22:a5:57:95:66:d2:df:7d:21:f4:
a3:bc:39:29:81:6b:f2:b5:f5:be:eb:9c:3e:68:31:
04:6d:15:cd:1f:7a:dd:60:94:ed:b1:7e:d6:63:60:
f7:dc:7d:d5:35:f5:2a:5a:08:e8:44:79:05:1d:cd:
96:5d:05:6f:ee:3c:08:70:82:c2:b8:f6:4f:77:8b:
10:f8:c4:d9:b6:ba:df:fd:41:80:ab:9e:7f:ac:d3:
c0:75:65:e9:4c:24:d6:5a:5e:16:dd:7e:b6:02:77:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:BC:38:06:57:CA:1A:B8:48:8B:F3:E0:46:F5:D6:84:25:9B:44
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/heq8OAZXyhq4SIvz4Eb11oQlm0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
46:41:5c:8d:70:90:9d:62:5e:17:78:a8:fc:fb:a2:a2:e3:c1:
e1:7e:f6:e6:c5:df:5a:8f:e6:18:da:37:6a:08:fe:b9:5e:99:
c2:5e:1e:c9:0c:9b:ac:b4:b6:8c:c4:df:81:55:90:57:d3:2f:
69:ad:c1:e0:de:1f:ba:74:0c:82:6a:11:ba:74:04:5f:79:d6:
7a:a7:7d:a2:5c:d5:67:26:2e:d1:c0:14:ff:5c:03:b0:6f:2b:
bd:1a:3b:6e:91:d1:9b:c7:6c:94:7f:76:db:6c:4c:78:74:a4:
43:73:e2:6a:8f:72:94:26:14:bc:d6:50:69:26:80:1b:f2:90:
5e:93:20:9b:30:fc:bb:b1:e3:3f:c6:3a:8b:38:b1:e3:25:a2:
81:70:a9:0c:dd:53:b8:e0:02:1b:d3:b3:33:82:52:67:75:3e:
f7:e3:cf:13:49:49:40:0d:07:68:34:a5:80:20:99:6a:36:2f:
56:74:c5:33:f3:ad:76:00:df:35:b8:ad:d1:57:4c:0d:54:08:
4b:b1:c2:4d:68:85:46:f9:e3:b9:d6:a2:d1:f0:48:1e:45:ba:
33:40:ca:b8:e8:43:67:d1:d6:9e:b2:5b:fc:0c:83:ee:7b:ee:
a4:e5:f4:45:05:2c:c7:50:b2:9d:82:c8:fe:67:b7:a1:4f:28:
94:df:4e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org