Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ie8CNE2FH1ZaaIVeSR1v9BVZLqk.roa
File: ie8CNE2FH1ZaaIVeSR1v9BVZLqk.roa (raw, json)
Hash identifier: WKV3r6gNcW1Jqaki3dNabi1G3JWVVU1GHYJLhKVmquo=
Subject key identifier: 89:EF:02:34:4D:85:1F:56:5A:68:85:5E:49:1D:6F:F4:15:59:2E:A9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1971
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ie8CNE2FH1ZaaIVeSR1v9BVZLqk.roa
Signing time: Sat 22 Oct 2022 06:06:32 +0000
ROA not before: Sat 22 Oct 2022 06:06:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6513 (0x1971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=89EF02344D851F565A68855E491D6FF415592EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:be:eb:76:42:f0:92:0d:9e:26:a5:9d:e0:
2b:63:19:41:17:55:61:9d:98:5a:a1:5c:36:42:0e:
ea:3b:18:87:30:a6:e9:07:9d:93:4b:cd:18:2d:ff:
03:36:aa:ff:03:6d:c6:38:df:ee:06:8e:e8:e5:4c:
2f:a4:b4:2c:73:92:7c:31:ae:8a:2b:17:31:06:1f:
ac:8a:ae:10:42:41:69:bd:2d:83:12:4b:21:86:75:
e7:ff:f1:7d:b7:01:ed:a6:5a:13:b1:c7:c0:2f:d2:
fa:4b:15:c5:8e:90:50:06:38:67:d6:e8:24:97:82:
33:64:f4:7d:67:65:38:b1:55:09:7b:bb:26:cd:0f:
7b:b4:bd:85:51:64:63:fd:fa:41:47:d1:22:60:71:
5b:a2:ca:91:e3:0f:47:8f:dc:5c:2e:b6:c2:b3:48:
95:91:37:cb:b6:d1:4f:5d:1f:bb:27:7a:f0:05:4a:
62:b4:40:33:1e:28:12:63:86:02:3a:c9:a8:62:5b:
b8:17:bd:a8:59:39:63:b3:60:f6:62:60:25:5d:9f:
79:da:87:33:b9:1b:60:30:02:81:3f:75:93:dd:7a:
7b:d8:fa:1a:60:87:74:4d:27:f5:45:91:a2:5d:11:
15:5f:55:5f:2f:4d:30:b1:51:6c:a4:3a:e0:4f:71:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EF:02:34:4D:85:1F:56:5A:68:85:5E:49:1D:6F:F4:15:59:2E:A9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ie8CNE2FH1ZaaIVeSR1v9BVZLqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.46.0/24
Signature Algorithm: sha256WithRSAEncryption
26:af:32:fe:85:6f:05:ac:7d:a9:6d:ee:fc:00:26:94:92:fc:
6c:d2:a4:2f:c7:31:99:20:7c:cf:9b:25:33:21:e3:d6:39:6f:
81:a6:8a:ce:7f:7b:7a:d0:7a:74:47:31:d5:db:ba:28:a9:e1:
fa:e1:c6:7c:f8:c1:5f:b6:2c:4a:9e:2b:3a:80:ec:0f:60:2e:
28:46:31:54:28:4d:fe:c8:65:c5:b6:51:99:59:ca:16:6b:50:
2e:f8:aa:bc:f7:55:b0:73:43:13:ec:75:f2:c9:17:9a:e5:71:
71:f0:13:9e:c1:3a:49:82:32:6d:27:13:26:92:cf:3e:d4:bf:
dc:27:30:0f:d5:b4:1c:d8:18:e8:3d:a1:00:ad:20:00:6d:ea:
d7:d7:64:75:0a:56:2e:dc:c3:cb:aa:53:61:17:bb:68:9d:2e:
89:61:78:77:02:aa:3a:f9:2b:34:88:80:55:77:5a:75:82:29:
28:1b:6c:64:06:d0:fd:fc:44:d8:79:0b:76:07:8d:33:94:4b:
a7:35:7b:42:2f:ef:4c:77:b5:e6:52:85:8b:1c:a4:ba:2f:06:
1f:01:e2:db:d0:ba:9b:1c:68:80:f6:69:66:9f:2b:7d:ee:25:
da:c6:03:69:1d:7c:08:b2:17:d0:df:7e:9d:20:f6:9d:a6:3c:
f6:73:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org