Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mVYjjcBas8IseC1aEJScFVT9jqM.roa
File: mVYjjcBas8IseC1aEJScFVT9jqM.roa (raw, json)
Hash identifier: qoosaj7Ux9knQTaCYXRIl1NSFI3ZXB1bmHbqTTjHhVI=
Subject key identifier: 99:56:23:8D:C0:5A:B3:C2:2C:78:2D:5A:10:94:9C:15:54:FD:8E:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AB1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mVYjjcBas8IseC1aEJScFVT9jqM.roa
Signing time: Thu 22 Dec 2022 01:27:56 +0000
ROA not before: Thu 22 Dec 2022 01:27:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.160.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6833 (0x1ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 01:27:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9956238DC05AB3C22C782D5A10949C1554FD8EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:d6:d1:52:b9:80:5a:b9:d6:b2:9f:a1:77:
da:df:7b:c9:09:a9:d0:1e:08:00:d2:79:12:c8:dc:
6f:4d:38:d6:ab:fd:c4:a3:31:84:d5:9c:36:dd:a4:
20:db:e3:15:08:b0:85:1c:27:61:43:81:62:a1:5c:
f7:70:eb:95:d2:06:80:b8:d1:51:00:0a:30:b8:a5:
a2:06:38:4c:76:8b:ca:d4:c0:45:98:13:0e:a6:87:
5f:05:23:81:f3:a8:12:4c:40:12:65:03:67:61:55:
be:83:e7:6f:a0:00:d8:1a:2d:8d:1d:71:11:66:e6:
23:8d:74:e7:15:3a:8f:49:d2:6a:1a:00:8e:1b:b2:
34:d5:41:8f:3a:63:d9:fd:fd:a0:e4:46:3e:8b:dd:
97:4b:b1:9a:77:2f:f5:af:4f:86:b9:d5:c1:83:2e:
fc:ad:86:a5:fc:9c:83:34:a3:c0:83:f5:9e:8a:fd:
9d:10:83:e5:2c:1c:cf:c8:42:73:e6:2b:31:cc:c1:
24:b9:3b:9f:d3:5e:83:f9:ef:9b:c0:eb:68:ad:b0:
21:9d:11:4a:be:fc:0b:d2:c0:cd:04:60:7f:f3:a8:
d5:70:d4:30:ab:2a:ea:72:99:c5:5b:ac:05:44:d8:
91:05:3e:12:04:6c:6e:45:8f:3d:c1:28:39:aa:99:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:23:8D:C0:5A:B3:C2:2C:78:2D:5A:10:94:9C:15:54:FD:8E:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mVYjjcBas8IseC1aEJScFVT9jqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
32:82:9e:bb:3e:03:b0:4d:1a:10:6e:18:c8:46:ff:45:7a:8c:
a0:e4:6e:4b:4d:f6:ad:98:00:87:c3:74:82:09:f8:ad:10:13:
6f:a0:55:aa:37:fe:60:fd:04:25:8c:40:6a:0f:d1:32:7e:48:
f8:4f:52:14:aa:a1:3a:46:d3:c3:22:72:bf:6a:b1:49:60:82:
61:9c:34:c7:2a:a3:16:cd:eb:3e:57:40:51:01:d4:f3:fd:26:
99:1c:1d:4c:11:fb:cf:b1:fc:85:fa:91:0e:88:65:0e:ea:8f:
9f:78:20:9e:4e:5f:67:05:ab:d0:06:28:f7:33:d8:23:32:cc:
ce:c6:59:d4:e3:dd:f8:1f:89:03:cc:d4:7e:b4:d0:b7:83:8d:
61:3f:fc:26:c5:22:65:b2:7b:94:ac:1b:84:44:43:55:75:5d:
ed:6a:52:c7:99:52:73:5a:de:0b:2b:28:14:7b:12:79:d0:bf:
8e:22:df:9f:13:55:56:e2:6c:3e:d8:35:02:ed:e9:e3:32:07:
b7:79:bb:e2:e1:72:30:c3:19:ec:64:75:f6:19:3d:b8:10:d1:
63:3d:8a:ca:58:f5:d1:0b:4c:b9:73:d9:f2:55:fe:fd:dc:88:
84:ca:ae:d8:8a:f8:57:65:73:8e:3d:4d:7e:2b:43:5c:04:d8:
ff:7f:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org