Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lG3IHShC1e10fYWIsZwUx1B9mYY.roa
File: lG3IHShC1e10fYWIsZwUx1B9mYY.roa (raw, json)
Hash identifier: VG7r4NIzYPVK9Hjn2XbSyyo/Mbmn2HgjsAYlDDHkMFQ=
Subject key identifier: 94:6D:C8:1D:28:42:D5:ED:74:7D:85:88:B1:9C:14:C7:50:7D:99:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1994
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lG3IHShC1e10fYWIsZwUx1B9mYY.roa
Signing time: Sat 22 Oct 2022 06:06:42 +0000
ROA not before: Sat 22 Oct 2022 06:06:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.220.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6548 (0x1994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=946DC81D2842D5ED747D8588B19C14C7507D9986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:81:30:86:03:57:b4:32:0e:7b:32:fd:eb:
e7:d8:25:f4:be:45:d8:57:8d:7b:cd:d4:f3:b8:83:
16:ae:a6:b2:f3:5e:61:08:f9:6d:a2:a7:a0:28:07:
f4:e3:56:26:94:e7:fd:02:5b:6a:28:3b:10:27:ee:
6b:57:fb:fb:f6:44:38:b2:64:f1:0e:f3:d0:9c:5a:
74:47:55:fd:77:76:bd:20:83:13:31:96:26:10:90:
96:c2:7b:81:a8:28:c6:4c:9e:ac:14:b0:33:ed:e9:
a6:b0:7e:44:58:99:07:53:4d:8b:37:f2:05:09:00:
5d:a2:34:05:91:94:fc:6b:14:94:41:ca:c2:64:68:
13:a7:29:c2:55:60:a6:4d:d0:e2:80:45:4f:fa:2f:
8e:79:5c:6a:c9:26:42:b7:9d:8e:ab:b3:d4:42:1b:
76:6f:bf:f5:3d:b1:60:c0:6f:5c:b0:fd:0a:51:cc:
fe:2c:d0:cd:54:95:6e:d0:8d:2c:65:b2:75:9e:0f:
b6:22:3a:81:92:27:53:4c:e2:41:05:2e:08:f9:0f:
76:59:f8:36:d5:d1:e6:fd:75:4c:44:0c:37:d3:0e:
ba:cd:d2:f6:be:c5:25:de:11:a7:42:8e:a1:e4:e7:
60:50:35:4b:a6:00:ac:89:fd:18:db:d7:db:ed:76:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:C8:1D:28:42:D5:ED:74:7D:85:88:B1:9C:14:C7:50:7D:99:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lG3IHShC1e10fYWIsZwUx1B9mYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.220.0/23
Signature Algorithm: sha256WithRSAEncryption
25:61:30:a8:db:31:ce:f3:5f:7e:78:75:70:49:30:c6:f8:4c:
26:79:b1:16:ec:2c:4e:0e:ac:9f:e4:f7:50:d4:7e:5a:b0:56:
47:8b:61:8e:fc:12:49:46:2a:cc:e4:61:37:b4:40:d4:cc:97:
da:7d:78:45:03:19:1c:75:a5:e8:84:c1:53:69:34:e4:1c:fd:
08:af:74:d3:fa:bf:ec:e9:45:ae:9b:eb:ca:16:93:95:85:fb:
c7:f3:76:d0:ef:3b:92:f7:01:52:08:d3:60:31:07:a4:d0:1b:
da:dd:f9:73:59:7b:3b:44:82:10:6d:c7:bd:2e:97:1c:1d:b8:
b4:f4:bf:48:02:7a:53:ba:f0:39:52:b0:f2:35:98:44:02:15:
e8:58:45:cd:0b:ec:fc:f4:f9:d8:50:68:ad:e5:2f:99:82:ea:
57:1e:bf:cc:52:d2:5a:4a:6b:56:bf:c6:3e:9f:ae:f7:84:12:
d2:50:5c:7e:b7:39:fc:1c:4e:f4:ba:42:81:0f:f5:4d:b1:42:
39:a9:f7:6c:88:01:ec:75:b2:7c:b2:55:c6:f5:21:11:87:ac:
d1:00:ad:ed:d2:74:ab:3c:ee:af:7e:ed:10:9b:b4:a5:a5:4a:
6f:97:64:fe:06:43:7e:0e:df:1b:72:ef:4f:49:c2:02:dc:9a:
bd:c0:dd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org