Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mu1Yvb1cduoRhKinXssW1F3SOTM.roa
File: mu1Yvb1cduoRhKinXssW1F3SOTM.roa (raw, json)
Hash identifier: eIJzbWy+KQcovg/nxjEFk41pVsAx9YPOolQlors7pwM=
Subject key identifier: 9A:ED:58:BD:BD:5C:76:EA:11:84:A8:A7:5E:CB:16:D4:5D:D2:39:33
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mu1Yvb1cduoRhKinXssW1F3SOTM.roa
Signing time: Thu 15 Sep 2022 02:36:39 +0000
ROA not before: Thu 15 Sep 2022 02:36:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.192.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9AED58BDBD5C76EA1184A8A75ECB16D45DD23933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:93:db:18:72:e4:0b:20:7d:56:05:e3:88:
5f:59:9b:9c:34:65:db:aa:47:b9:55:1a:58:be:e5:
01:02:8c:14:20:98:73:fe:b9:2e:a0:71:9f:1f:58:
b6:67:6c:c3:14:05:dc:82:38:b0:ec:81:35:74:94:
c4:09:fa:f4:4b:79:c4:a1:b1:5d:cf:04:6e:03:8c:
e4:8f:c7:b1:c6:1b:b1:d2:85:7e:ac:5f:30:cc:14:
3a:ef:e2:2a:99:cc:b0:30:fb:5f:fd:42:32:af:ca:
53:82:f2:22:e7:79:31:23:d8:a6:22:23:3f:08:fe:
9a:06:8b:86:5f:35:d7:48:9b:bb:96:aa:15:6f:11:
33:80:51:7c:e2:fd:12:5a:dd:ef:35:94:15:a7:08:
b2:d3:a6:b4:ee:8b:12:ca:5d:7f:b4:99:3f:b0:f2:
3c:89:67:08:aa:9f:61:17:2d:36:3a:42:34:ef:92:
83:78:e1:f6:07:e8:db:ca:10:e3:29:df:2b:14:aa:
9d:00:f0:a8:ea:21:d8:40:31:3a:cb:be:0d:b8:41:
bc:46:a9:35:5a:bb:f9:bb:99:2c:99:25:86:b3:65:
e0:b3:ce:47:f4:29:41:dd:d1:82:9c:84:4e:37:44:
a4:89:42:c5:25:f4:78:84:70:4a:6e:84:c2:20:4b:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:58:BD:BD:5C:76:EA:11:84:A8:A7:5E:CB:16:D4:5D:D2:39:33
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mu1Yvb1cduoRhKinXssW1F3SOTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.192.0/20
Signature Algorithm: sha256WithRSAEncryption
53:ca:41:b3:78:ae:ad:b4:99:41:ac:99:c7:27:9f:58:23:6a:
04:9f:f4:f5:e9:43:d3:c5:8b:9c:75:1a:ca:e5:fd:db:2d:39:
42:76:2d:af:6e:c9:c8:2e:ca:6c:df:70:0d:cd:f7:53:02:85:
00:22:4f:a2:95:bb:6e:1e:4c:15:0a:74:b0:ea:a3:85:fe:7d:
55:da:7a:f5:ee:10:43:62:dc:8f:22:61:f5:b7:bc:55:3f:08:
f3:b9:d1:87:31:8c:9f:ce:86:12:85:bd:09:c5:6b:3d:a0:37:
ce:d6:28:16:f4:a5:f5:19:df:87:9a:d2:a1:66:72:12:00:30:
48:03:f5:a2:1c:37:fd:59:fe:76:b9:27:6f:a6:7e:79:50:6d:
0b:e7:46:c2:ec:07:7a:e3:63:1c:46:dc:3d:fb:88:77:f4:f1:
46:eb:a7:a7:48:07:8d:f6:5b:b1:e1:b7:33:40:2d:94:a7:5a:
a0:53:39:d7:3b:a4:6d:e4:c2:43:6e:52:d5:3e:ab:a9:d6:a8:
53:29:b7:df:cf:a7:e8:46:b6:5b:ac:49:3b:7d:4d:87:6e:23:
48:0e:f3:88:3b:d3:9a:41:3a:82:07:5e:18:f4:76:be:d0:e9:
dc:95:19:d9:a2:48:10:94:c0:2f:b9:cb:4e:96:df:d3:23:e7:
0d:b8:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org