Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ipWLPMVtnx7hrFUvNgP0lZqqx2I.roa
File: ipWLPMVtnx7hrFUvNgP0lZqqx2I.roa (raw, json)
Hash identifier: zAyouih+d9LSQ7R+813azIPauU5BssVo9LbNeO7DeZE=
Subject key identifier: 8A:95:8B:3C:C5:6D:9F:1E:E1:AC:55:2F:36:03:F4:95:9A:AA:C7:62
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ipWLPMVtnx7hrFUvNgP0lZqqx2I.roa
Signing time: Thu 15 Sep 2022 02:35:33 +0000
ROA not before: Thu 15 Sep 2022 02:35:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A958B3CC56D9F1EE1AC552F3603F4959AAAC762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:4c:9c:08:72:da:84:14:ab:41:ea:c5:de:
22:e0:f8:e7:50:e9:6f:5b:6a:20:8e:fc:c6:90:2b:
6e:71:03:9a:b9:59:c3:bc:3a:b4:22:74:55:ff:00:
dc:fb:40:c2:a4:a3:13:fa:54:d1:18:e1:1e:b5:7d:
ee:a1:b1:2e:03:2d:d2:52:9f:07:0d:1b:c0:7a:8d:
b0:ea:89:64:cc:32:a2:ab:2d:00:e2:79:fb:ee:03:
8f:f1:40:93:db:5f:34:83:3d:02:d4:65:ec:49:e1:
c7:c5:cc:fe:52:b6:02:45:07:e2:35:81:73:c3:a4:
b7:ff:5e:61:e9:62:9c:73:d1:56:16:35:36:a6:ec:
2f:0b:12:10:40:b8:f8:9d:71:03:cf:7f:69:2b:8f:
8f:ac:04:58:c7:7c:99:4a:23:15:7b:2c:4a:2a:c6:
28:11:3c:39:4b:51:0d:00:62:8e:b4:41:da:76:31:
3e:68:51:76:27:51:f8:1a:e9:9b:85:18:4c:f4:2d:
5c:91:b2:5f:c6:26:68:84:df:b6:70:ef:9c:ef:59:
4a:1d:f9:bc:20:44:af:2e:a5:57:9f:6f:c5:77:f4:
75:00:5b:0c:3b:3f:0f:74:5d:7a:76:9d:6e:cb:d2:
7b:6c:a8:a3:64:49:80:95:59:0d:68:19:c5:d1:51:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:8B:3C:C5:6D:9F:1E:E1:AC:55:2F:36:03:F4:95:9A:AA:C7:62
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ipWLPMVtnx7hrFUvNgP0lZqqx2I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:dd:2e:fb:dd:2a:1f:35:46:06:d8:b1:b5:1c:19:33:f5:a2:
b4:b1:9a:ed:24:b0:0f:50:de:22:9f:d7:ac:91:dc:f5:3a:50:
71:07:eb:e3:2a:a8:59:66:34:9a:7b:02:d2:b5:fc:c2:e6:31:
40:62:b5:5d:fd:59:f9:3d:67:d0:a6:87:ea:78:2b:cd:0c:f1:
a6:e3:91:27:45:17:7b:5d:64:51:dd:78:06:40:87:af:05:39:
7e:1e:56:8a:04:c6:1a:a7:bb:7a:97:df:90:96:2b:53:01:66:
6f:b3:cc:88:fb:d7:22:de:0f:c5:2c:1d:e2:ca:89:03:5a:b4:
0f:5a:6a:eb:b2:86:0f:07:ae:7a:71:bc:b7:fa:84:f0:77:b4:
40:87:f1:82:11:f7:58:2c:a5:7a:46:46:5a:d3:c1:3a:1b:fd:
b7:3f:c5:89:9f:f9:44:c6:b5:87:d1:d8:54:22:8e:df:43:63:
7d:89:cb:fc:e2:2b:fc:37:aa:d1:6f:d7:e1:7f:be:0c:32:03:
26:78:6a:29:da:77:f5:d7:01:51:97:e1:15:c6:9d:24:28:19:
4d:21:9d:2f:5a:68:57:f4:55:9b:52:e5:ae:41:e1:12:aa:c9:
ec:e4:f1:3f:86:5f:8b:9f:0a:56:66:55:41:34:48:a1:99:3f:
61:5a:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org