Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nG2BKwpWWhrcOoJ0Y-xQfUO_smY.roa
File: nG2BKwpWWhrcOoJ0Y-xQfUO_smY.roa (raw, json)
Hash identifier: SlyQY20nMn/pNblg6kCLGJVdGYs/xW1iPvgjCbl505w=
Subject key identifier: 9C:6D:81:2B:0A:56:5A:1A:DC:3A:82:74:63:EC:50:7D:43:BF:B2:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1916
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nG2BKwpWWhrcOoJ0Y-xQfUO_smY.roa
Signing time: Sat 22 Oct 2022 06:06:05 +0000
ROA not before: Sat 22 Oct 2022 06:06:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.48.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6422 (0x1916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C6D812B0A565A1ADC3A827463EC507D43BFB266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:8e:07:c6:68:fd:02:2e:cf:0a:8b:15:e5:
dc:e9:93:eb:09:d0:69:e2:79:cb:9f:d9:36:cf:af:
0e:26:45:b6:61:32:d4:d0:5d:0b:6a:69:b4:4d:b6:
13:2d:17:5f:bb:f2:c6:a6:4e:bf:7a:51:4d:85:8a:
13:62:c8:8d:94:3c:42:e8:60:42:73:bb:6a:65:c4:
07:30:e4:62:bf:11:bd:b4:10:3e:64:02:81:89:91:
43:59:81:ec:56:44:b1:77:ad:f3:da:88:4a:16:69:
03:76:ed:53:b5:97:01:50:9b:cb:33:47:9f:63:0e:
90:1a:38:c2:7e:bb:6a:c6:d9:58:c3:d3:2c:4a:fb:
77:7c:81:d7:53:10:7d:47:f0:62:f4:41:df:38:94:
8d:d5:01:72:5b:b0:dd:d0:a4:4b:80:d8:cd:0d:ed:
2f:72:7d:fc:94:3f:7e:06:88:d2:01:3e:21:f1:e8:
0f:93:27:cc:8c:c5:1e:76:7b:2e:09:72:e3:d9:01:
79:4f:04:32:89:95:dc:06:95:ec:34:f7:a6:d9:f9:
17:8f:ba:90:6a:c0:a0:60:41:25:77:b9:76:52:59:
00:d2:32:0d:5a:2f:4d:9a:ac:22:a7:4c:0a:1f:66:
f1:0e:d3:38:a5:38:e4:bf:0a:68:0d:6b:26:12:0d:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6D:81:2B:0A:56:5A:1A:DC:3A:82:74:63:EC:50:7D:43:BF:B2:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nG2BKwpWWhrcOoJ0Y-xQfUO_smY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:db:72:3f:92:b0:7b:95:b9:b5:d9:9c:e7:cd:7b:0f:14:6b:
f8:0f:9a:64:85:93:4a:16:53:91:b2:b3:00:95:97:46:04:7f:
82:65:e0:0e:7a:e5:37:1d:87:7c:7d:fb:67:74:4b:82:33:de:
28:a1:d1:09:61:72:2b:5b:9c:8d:31:80:fb:ac:4f:b5:dc:16:
01:b9:22:2e:20:16:dd:40:43:cf:37:23:45:cd:02:d1:24:44:
e8:8d:7a:6b:b3:47:18:4d:b4:de:63:5d:b5:5c:d3:57:fd:de:
eb:fb:18:14:a4:12:f1:f4:a9:97:8e:93:28:18:f9:76:4f:db:
dd:26:3d:03:1b:7e:95:5e:28:b6:33:c8:e3:fe:e5:9c:42:57:
44:fe:c1:93:a3:bc:27:31:03:ee:85:6c:e3:c7:29:ba:ab:25:
2e:f6:95:aa:15:67:3a:e9:30:72:72:7f:95:b9:f1:d7:22:0f:
51:b2:2f:7f:95:c8:c8:60:49:d4:7c:ac:94:8a:fd:c8:4b:32:
5f:e8:75:38:a1:e1:a3:60:ac:40:4a:ee:03:23:87:ae:17:0f:
95:d3:31:a5:c1:00:8b:ff:28:29:b2:98:df:0b:be:14:46:78:
3b:11:49:00:e2:6c:35:f7:b4:de:aa:c5:c0:80:4b:e6:bd:91:
f6:83:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org