Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nRybNfq_EYtqGBRl59E7pna1FUE.roa
File: nRybNfq_EYtqGBRl59E7pna1FUE.roa (raw, json)
Hash identifier: rvMBvybu0VLCYUum3geM4IYAx8SZb82UCLy/B/plPk8=
Subject key identifier: 9D:1C:9B:35:FA:BF:11:8B:6A:18:14:65:E7:D1:3B:A6:76:B5:15:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14DF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nRybNfq_EYtqGBRl59E7pna1FUE.roa
Signing time: Thu 08 Sep 2022 04:06:36 +0000
ROA not before: Thu 08 Sep 2022 04:06:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 119.77.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5343 (0x14df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 04:06:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9D1C9B35FABF118B6A181465E7D13BA676B51541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:a1:f7:df:80:83:d6:7a:96:8b:f6:e4:c5:
ac:60:48:c6:64:b5:44:1f:be:32:a9:89:bf:03:85:
e7:b9:31:5e:ca:df:61:89:28:9d:91:0f:ed:0f:2f:
b0:5f:73:e2:ec:02:8a:14:b0:94:e8:81:f1:68:00:
3f:9a:b3:80:ff:44:c0:91:d0:3d:31:97:ef:be:37:
3b:9d:65:ae:f9:cd:e4:1e:7c:c7:70:fa:be:e4:71:
60:f9:8a:db:e0:9d:50:55:e3:7d:c2:10:fc:80:67:
da:bf:53:fb:74:00:7a:6a:7d:1a:6b:7e:4e:28:d4:
31:89:9e:3d:44:55:cc:7a:41:dd:8a:ff:c9:00:c0:
62:c1:bc:68:0e:39:61:31:eb:63:3b:2b:6c:85:33:
fc:17:16:25:b3:e3:de:9f:00:cf:27:ad:2e:43:8d:
91:a3:28:c4:7c:09:5b:06:83:e7:6a:d2:da:c9:64:
ea:3b:9b:cd:f9:bc:3e:db:06:18:85:18:56:bd:38:
4b:40:e3:9f:fb:84:41:c2:b6:47:cb:2b:23:9c:bc:
6f:c4:2f:19:b5:ad:f5:66:76:16:b3:1e:2c:59:7a:
de:e9:c9:2a:be:e3:2e:cc:74:a7:1e:43:b2:a3:8d:
67:f7:10:2d:e2:ca:a7:2b:58:b7:de:18:c1:c4:21:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:9B:35:FA:BF:11:8B:6A:18:14:65:E7:D1:3B:A6:76:B5:15:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nRybNfq_EYtqGBRl59E7pna1FUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:72:21:19:23:0d:6f:89:00:eb:47:a2:17:5d:e8:b4:b3:c8:
bd:52:08:2a:2c:28:0e:f8:99:60:fc:9a:f9:25:a6:fd:fb:02:
a3:a0:44:a2:24:24:b1:14:69:6c:ab:d5:a4:d0:40:e1:bc:a0:
aa:cc:66:24:9a:11:81:a0:4a:40:cc:38:80:24:94:57:59:a5:
9d:7f:ef:d1:ca:d1:90:d8:99:ad:74:32:f8:cf:cf:33:ff:fb:
0a:73:b8:eb:ca:3c:11:79:21:80:ab:aa:75:f7:55:c0:28:e4:
4b:45:c0:92:a3:06:fb:d2:1c:76:b2:1f:95:71:e6:d5:3e:d8:
06:1b:4d:50:5c:58:5b:94:93:37:43:6c:c0:3d:95:56:dc:4b:
c5:54:26:aa:1c:81:6b:e4:f5:b5:cb:2e:db:af:06:31:5f:7c:
44:c1:01:d6:4b:e7:21:18:b6:66:03:4c:ea:51:6f:e7:4a:2d:
d6:34:d1:e7:d5:69:3e:4d:56:17:e0:b2:4f:a1:b6:b3:66:62:
5c:44:85:7a:48:30:d1:ed:27:61:85:d7:38:02:fb:38:df:63:
47:6d:2f:6c:cc:5e:cc:bd:2e:57:5c:6b:50:8a:3b:3f:41:2e:
09:b8:5a:dd:e0:ca:6e:86:af:a2:7e:82:5c:0e:30:34:89:1f:
59:b8:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org