Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lOhMvfQAh912yqXTSdMuEcwmQn4.roa
File: lOhMvfQAh912yqXTSdMuEcwmQn4.roa (raw, json)
Hash identifier: h8ZT7wpcBDINOd56thpWlYjYPgSr+esG0vm2h87aa5M=
Subject key identifier: 94:E8:4C:BD:F4:00:87:DD:76:CA:A5:D3:49:D3:2E:11:CC:26:42:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lOhMvfQAh912yqXTSdMuEcwmQn4.roa
Signing time: Thu 15 Sep 2022 02:35:54 +0000
ROA not before: Thu 15 Sep 2022 02:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=94E84CBDF40087DD76CAA5D349D32E11CC26427E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:cf:6d:48:75:3d:db:3a:5b:e4:3b:e2:29:
11:f5:4e:61:b4:70:80:84:e6:94:ca:29:58:87:9f:
87:75:6a:f2:5b:c9:a0:04:7d:bd:bd:ba:34:71:c8:
bb:08:15:02:45:d6:a3:d8:70:e9:46:01:a5:ef:79:
54:1a:64:4b:45:db:12:38:99:60:c9:61:f1:2e:72:
08:a6:70:d5:08:50:3b:dd:a7:e4:83:70:00:89:03:
22:28:20:3a:5b:ef:49:2a:5d:90:67:90:3e:e1:f6:
c3:50:2c:a1:bb:bc:50:3f:6a:f5:61:ea:c5:c2:c8:
38:e9:21:3a:d4:c9:a7:ef:58:97:5a:e8:12:52:89:
9f:19:bf:0b:5e:70:64:45:b4:72:88:a6:6e:31:33:
9b:3e:87:fd:0b:df:49:d8:1b:cb:1b:98:90:23:bb:
e1:67:6f:b3:06:54:6c:c6:39:d5:c8:85:f4:95:72:
70:60:6f:43:e8:f3:6d:4d:88:40:aa:97:83:f9:58:
52:40:cd:f6:df:17:7e:78:10:22:81:8e:1c:f2:a0:
a6:e9:a7:9a:4a:89:3f:fc:92:77:32:3b:55:fc:6c:
9d:12:f7:e0:3b:23:42:04:9f:1f:c1:d2:36:00:c3:
e8:78:e4:0c:d5:0d:e6:11:56:40:eb:c8:7c:8f:2f:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:4C:BD:F4:00:87:DD:76:CA:A5:D3:49:D3:2E:11:CC:26:42:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lOhMvfQAh912yqXTSdMuEcwmQn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.162.0/24
Signature Algorithm: sha256WithRSAEncryption
40:43:f7:29:cb:6a:7e:42:7b:ba:12:9b:69:6c:4d:06:e3:ad:
95:62:e2:da:27:d7:8e:5f:4b:82:d8:e7:8b:6a:0c:79:4d:58:
20:61:1a:ef:61:d8:ae:e7:e2:35:da:c2:3a:2c:79:ce:96:72:
b3:ed:31:00:d8:e0:2b:cb:c0:9a:ea:65:c6:66:b2:be:f5:8a:
9a:92:22:79:2e:d8:93:1b:d8:30:4a:11:86:b8:3b:32:29:dd:
27:37:5f:b8:38:01:df:ae:86:6f:26:0b:c8:7d:e5:25:e2:22:
71:e4:2e:10:d4:5d:a3:b8:4b:69:e1:0d:fc:79:eb:a0:74:30:
c0:92:20:a4:38:be:be:19:d4:2a:b7:62:f3:f6:04:62:d1:73:
6b:17:c0:27:29:a0:a5:0f:b8:54:b7:71:8a:27:1e:63:8e:77:
63:8c:53:0d:9d:3d:03:62:96:47:5e:af:d0:52:52:83:25:71:
d2:ed:37:68:b5:03:b4:d3:53:44:a1:2b:0e:65:75:ef:a9:28:
00:b1:38:3a:22:32:3e:df:55:fe:77:af:18:de:1b:87:37:81:
53:f8:be:e7:45:bf:51:c1:73:cf:8f:d4:13:05:5b:2e:ef:e0:
f0:41:b1:32:0a:30:9c:33:de:6b:6c:2e:b2:b1:e5:fd:ea:93:
07:57:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org