Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k3qrlSSoAeODUCLdQ9fZ8coGFG4.roa
File: k3qrlSSoAeODUCLdQ9fZ8coGFG4.roa (raw, json)
Hash identifier: qE57gTW5J/V5Nzs8VFHMWnij7Ic6C7yrMrKcW6JCHAU=
Subject key identifier: 93:7A:AB:95:24:A8:01:E3:83:50:22:DD:43:D7:D9:F1:CA:06:14:6E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k3qrlSSoAeODUCLdQ9fZ8coGFG4.roa
Signing time: Sat 22 Oct 2022 06:05:51 +0000
ROA not before: Sat 22 Oct 2022 06:05:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 45.64.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6375 (0x18e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=937AAB9524A801E3835022DD43D7D9F1CA06146E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3a:bb:c2:0c:e2:2d:bc:7d:1c:bd:37:b0:d6:
85:85:b1:ca:23:22:aa:4d:12:59:46:a7:61:c8:a0:
b1:94:8f:2b:d7:89:d6:e6:dd:d4:e6:f5:ce:a7:b6:
f5:81:82:1b:12:a9:83:d5:b5:94:60:af:91:bf:57:
b1:71:5f:ae:19:75:b0:2c:a3:fc:5f:e0:64:81:bb:
18:d2:fd:ff:d9:b9:d4:da:5e:be:69:a8:9b:15:39:
e5:2f:94:c2:37:2f:e5:fb:46:19:af:c7:a6:7a:8a:
d4:2f:29:fc:c8:c5:73:e4:f7:27:96:e5:c7:1a:25:
10:b5:bb:57:21:5e:24:17:9b:c8:c3:be:b9:34:bd:
ab:c0:bb:63:83:cd:2c:d3:35:41:0d:5c:4e:68:b2:
19:75:be:7a:04:0a:50:eb:be:fe:80:20:08:b0:cc:
38:dc:80:bf:d7:e8:84:b7:22:63:26:0c:4e:d5:fc:
45:9e:07:5c:26:02:ce:88:82:a3:39:ea:1d:eb:79:
45:04:75:78:6a:a3:5b:df:12:72:21:95:2e:26:b8:
8f:ff:32:42:1f:2d:c3:f6:1f:0d:79:f5:66:c2:6c:
63:b6:29:50:d1:4d:c9:e9:31:e3:6d:34:db:b7:ca:
e4:1d:74:ff:80:ef:85:83:8d:80:2d:a9:de:01:68:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:AB:95:24:A8:01:E3:83:50:22:DD:43:D7:D9:F1:CA:06:14:6E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k3qrlSSoAeODUCLdQ9fZ8coGFG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.35.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ea:ff:14:36:53:57:73:da:e4:32:39:76:04:11:b2:94:e2:
d3:dc:88:68:b6:08:01:53:c1:f5:01:0b:d6:0e:c0:83:3a:c1:
e1:9b:a7:e4:02:24:4b:ba:4b:c2:a5:6c:11:c3:fb:56:f6:19:
b1:b1:db:b4:37:63:31:5a:e2:6c:0e:a5:6d:ff:d6:56:f9:10:
f0:b8:67:16:46:77:56:0f:fc:da:d0:74:16:19:60:fe:77:85:
b0:9a:5a:d2:dc:2c:29:66:a5:94:42:f4:f5:ea:bd:8b:52:5a:
62:de:4a:4d:97:53:ef:f0:1e:bb:dd:ff:6d:a5:42:6a:d1:33:
bb:59:da:03:c6:55:06:a4:77:75:ef:2d:a1:07:17:eb:68:73:
5a:35:fe:b5:a7:32:c7:62:70:c2:a7:bd:27:c1:cb:80:87:e8:
d3:0d:d7:a0:af:9a:72:40:b0:23:1d:80:12:fa:62:40:63:a6:
3b:bb:19:3a:c9:8b:5b:28:76:51:a2:25:b8:61:61:f1:1b:06:
10:6e:79:b4:65:dd:ab:03:76:41:6f:07:e8:c1:90:2b:92:b5:
3e:7a:cc:86:a6:9d:56:0f:99:77:59:67:90:a8:27:d6:97:ad:
b2:b5:e0:1c:cb:44:b6:6c:80:fe:cb:03:07:88:58:ab:a8:83:
e8:cd:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org