Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hykc9LTLgITw3liWEACdT25OmZU.roa
File: hykc9LTLgITw3liWEACdT25OmZU.roa (raw, json)
Hash identifier: Oa3PfMNfTDSt6+Xgmz+ukkFTesSX43sAbrqTXRLaPMI=
Subject key identifier: 87:29:1C:F4:B4:CB:80:84:F0:DE:58:96:10:00:9D:4F:6E:4E:99:95
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hykc9LTLgITw3liWEACdT25OmZU.roa
Signing time: Thu 15 Sep 2022 02:36:37 +0000
ROA not before: Thu 15 Sep 2022 02:36:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=87291CF4B4CB8084F0DE589610009D4F6E4E9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:73:21:9f:39:24:ea:63:02:10:09:68:64:
cc:24:01:09:b9:df:56:ca:5f:58:4d:3b:07:ed:1e:
b1:03:17:e3:30:99:22:fb:d2:77:e3:b3:eb:80:c9:
78:4c:13:98:c0:f7:43:e3:5e:ee:99:e8:55:8a:ff:
d3:62:c8:0f:a0:50:68:d1:1b:08:f0:29:e2:f6:7c:
5e:eb:58:c7:78:92:bc:8e:9e:aa:03:78:39:58:26:
23:18:72:dd:6c:1d:88:37:9a:e4:92:ef:28:df:9f:
a6:4d:0c:5b:56:43:bc:b7:6f:f5:f6:5e:6f:3d:1b:
cb:50:f8:54:a1:22:ab:3e:0d:d8:25:2b:73:d1:d4:
06:64:fa:e6:8b:e2:15:68:96:b8:d0:34:18:94:fa:
ff:9d:cf:16:79:bd:f8:2d:a2:f0:01:10:9a:c4:c4:
83:24:bc:50:4d:3e:f5:12:04:60:62:bc:59:49:c7:
16:d3:3b:04:cf:07:6f:b0:de:57:6c:f7:03:2d:d6:
10:67:94:f5:44:29:6a:fb:56:47:8d:0e:e2:4c:60:
46:5a:9d:d8:3c:dd:64:16:3f:aa:22:4a:31:05:fc:
c2:a2:c8:ba:3c:36:15:92:22:73:32:1e:6c:9f:32:
03:06:fd:94:e3:4e:17:34:3a:19:0a:50:5e:28:14:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:1C:F4:B4:CB:80:84:F0:DE:58:96:10:00:9D:4F:6E:4E:99:95
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hykc9LTLgITw3liWEACdT25OmZU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.0.0/22
Signature Algorithm: sha256WithRSAEncryption
21:21:29:d9:c6:b0:d7:40:b7:d7:b0:f4:bb:7f:7c:f9:96:0a:
0a:08:18:25:34:ee:89:1f:bb:47:bf:78:7c:46:24:77:ab:00:
38:b6:dc:49:0e:67:ea:b9:bd:30:84:6d:5c:72:35:30:50:37:
37:4c:af:e2:28:80:af:18:23:0a:48:22:dd:cf:a5:90:d9:b7:
d1:3d:86:ce:67:2b:e6:03:cb:f2:15:e8:b4:e8:6b:5b:8a:c0:
09:7a:9a:01:a5:71:c0:be:4e:f8:dd:b5:41:05:27:ff:6c:f3:
2d:d8:70:f8:a1:71:a5:c8:86:ae:4d:f4:92:2e:09:13:11:56:
3c:e3:f8:3b:eb:9c:cd:e7:53:f4:f3:52:6a:d5:6e:1e:45:5c:
62:1b:3c:92:fa:73:80:6a:fe:b6:98:9a:46:3e:82:b8:47:86:
36:05:65:49:31:5f:e2:a4:9a:72:53:fb:e4:a1:e3:22:86:d4:
26:1e:19:2e:f2:46:df:75:de:50:cc:0f:18:86:51:42:33:18:
30:2d:71:95:da:c6:36:ad:e6:d5:20:11:7b:0e:70:79:a9:86:
73:91:e4:27:19:ae:94:49:61:14:0e:49:a9:9f:2e:d9:b1:9f:
3e:57:82:c0:9f:b4:51:15:e0:2e:15:e8:1a:99:79:bf:49:3c:
a9:c8:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org