Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVXUKibfjOtEW7h2soJNWWppd_A.roa
File: nVXUKibfjOtEW7h2soJNWWppd_A.roa (raw, json)
Hash identifier: 7kgiWG6sBgsWsCwg+fA0Frx8qUDwQvZb9kKETiAnDAI=
Subject key identifier: 9D:55:D4:2A:26:DF:8C:EB:44:5B:B8:76:B2:82:4D:59:6A:69:77:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B21
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVXUKibfjOtEW7h2soJNWWppd_A.roa
Signing time: Thu 02 Feb 2023 07:11:56 +0000
ROA not before: Thu 02 Feb 2023 07:11:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6945 (0x1b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 07:11:56 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9D55D42A26DF8CEB445BB876B2824D596A6977F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:1d:87:c4:86:1d:c7:09:7c:e4:d3:6e:48:
24:1f:a1:cb:da:a2:6b:21:7d:5d:2b:8e:d9:17:13:
ec:47:43:82:e5:fe:8b:94:5e:7c:67:43:0d:cf:65:
11:82:a6:d3:5e:e5:fc:1a:06:cb:1c:2d:1f:07:5d:
27:bd:c7:e7:fd:1b:71:30:ca:2e:b2:50:ac:c1:7f:
6f:a7:3f:2c:97:a9:12:a0:b0:c7:01:01:f9:90:1f:
38:6b:e6:f2:47:3b:10:96:fe:01:48:3d:da:a4:96:
28:8a:a8:1b:f7:7f:b8:ea:84:d0:6a:9e:4b:07:b5:
ff:7e:f3:a4:6a:ba:63:56:16:67:d2:21:a6:c9:9a:
75:60:a1:71:b8:62:69:fe:f4:5c:0b:09:3d:36:74:
d6:91:79:d7:c0:91:d5:80:4e:88:82:64:5b:c9:b2:
5a:88:73:01:61:c6:35:1b:9b:98:ff:d8:4a:a1:b9:
87:77:c9:c0:e4:32:32:7c:7e:54:1d:50:9b:cd:15:
b8:04:51:0f:b1:64:bd:8e:82:55:ff:c2:61:58:42:
ca:e1:0f:28:ef:9b:40:a8:60:c1:95:c1:01:9a:36:
7b:e6:44:97:4a:60:64:fd:f8:e1:d6:3b:b5:59:5b:
67:07:2c:b5:5a:be:c8:6e:e4:36:b6:3e:89:8b:1e:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:D4:2A:26:DF:8C:EB:44:5B:B8:76:B2:82:4D:59:6A:69:77:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nVXUKibfjOtEW7h2soJNWWppd_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:84:76:d5:74:b7:9a:13:0e:29:f9:1b:dc:c6:4c:62:de:7a:
52:17:df:af:e9:c8:59:09:6f:22:a2:3d:8f:dd:8f:1a:5d:ef:
e1:62:2c:48:d5:27:af:1c:33:77:10:8e:d9:ef:a0:c9:a6:cf:
85:65:99:90:e9:80:18:9f:4c:3f:86:24:f6:8e:70:75:3c:8d:
59:30:21:fa:71:b4:e9:50:17:d9:72:83:c5:e9:09:c8:6f:71:
ab:5c:f0:2b:10:d2:fc:e3:ab:03:29:ce:81:b8:91:6f:4e:9a:
6c:da:df:22:13:65:e4:88:66:1b:b9:a2:ab:c5:d7:71:78:65:
53:9d:68:9e:bb:8f:8d:2c:e4:ae:1a:fa:1e:ba:63:c7:d7:fc:
9e:e1:b6:62:3e:b5:f2:66:d1:aa:fe:9d:64:8e:8c:3f:85:ae:
2a:43:d4:ba:45:b7:93:6e:49:37:ba:7e:b2:e5:1b:86:58:d8:
fa:9b:61:b0:bf:c7:c7:ae:3b:2e:16:7b:98:7e:f6:84:8b:4f:
e7:4a:cc:5c:33:a8:db:1b:ea:ea:ef:91:1c:b5:fc:fe:96:9b:
54:c0:d1:4b:37:01:04:46:9f:0b:ef:db:3d:72:b9:f9:1c:3a:
3a:89:ef:6a:75:7d:9c:32:ef:8c:dc:23:7f:5e:f8:94:79:3e:
36:36:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org