Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/okR9upDHCWVtsKl8qZ4cic-ZDCc.roa
File: okR9upDHCWVtsKl8qZ4cic-ZDCc.roa (raw, json)
Hash identifier: acvJn/112AlPhbTEXnjGduBKgbCZQugqIucVF4S0fZE=
Subject key identifier: A2:44:7D:BA:90:C7:09:65:6D:B0:A9:7C:A9:9E:1C:89:CF:99:0C:27
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/okR9upDHCWVtsKl8qZ4cic-ZDCc.roa
Signing time: Thu 15 Sep 2022 02:35:28 +0000
ROA not before: Thu 15 Sep 2022 02:35:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.240.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A2447DBA90C709656DB0A97CA99E1C89CF990C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:56:20:e0:ce:b7:f1:51:13:ae:45:72:bc:
20:ba:1b:06:62:2f:ac:bd:01:42:26:05:53:d9:0c:
81:55:bc:13:9b:52:89:f5:b5:5a:a9:b9:24:97:90:
b2:88:d5:df:fc:2c:c7:3e:cf:27:62:39:bf:e3:53:
15:11:c0:78:8d:94:49:c3:08:18:58:bc:b6:53:00:
e0:5d:5b:48:0c:3a:14:57:03:d8:ef:9f:35:8a:84:
3b:6c:ae:37:b4:12:38:1e:e2:38:8d:5b:f0:b5:ee:
6f:44:c8:ca:47:42:c8:66:fe:37:f6:10:69:9f:1d:
0c:e2:7e:ab:13:29:6b:20:7b:61:d2:70:f7:09:1c:
78:5c:59:ed:db:32:24:bc:8d:a6:6d:97:dc:a4:0b:
9e:e5:f8:07:08:5d:3e:9c:1a:85:5f:70:bf:d8:66:
6b:43:96:20:cc:55:4c:c0:43:6d:0c:7e:5f:34:36:
04:8a:51:11:2e:13:4f:23:4f:35:09:77:4d:a0:b0:
72:ac:7f:22:d1:32:59:ca:52:99:4e:c1:af:42:00:
ac:36:15:f8:5c:7e:64:1e:78:56:8a:a8:ce:6b:4b:
4f:98:ac:ff:0e:e0:43:b2:87:a2:3d:3b:89:d9:93:
9b:f2:0e:59:8b:83:1c:9b:c1:1a:b3:6b:e9:24:0a:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:7D:BA:90:C7:09:65:6D:B0:A9:7C:A9:9E:1C:89:CF:99:0C:27
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/okR9upDHCWVtsKl8qZ4cic-ZDCc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.240.0/21
Signature Algorithm: sha256WithRSAEncryption
26:22:9c:ef:ee:b8:30:30:92:9d:7c:5b:a7:b9:89:c5:15:7b:
5d:3d:b7:a0:9d:d9:8a:cc:5e:95:32:ae:b2:db:d9:d7:dd:19:
d7:84:dd:0c:f7:14:59:d2:a4:9d:82:57:17:b4:74:ac:ab:8a:
76:9c:08:6f:c6:67:22:3e:5a:33:61:97:83:77:32:2c:54:75:
0a:c8:7b:60:b9:43:1d:d4:f6:bb:68:8f:c6:9e:73:92:4e:7c:
85:94:bc:d4:61:85:06:74:5a:81:1f:cc:2b:a3:cc:a3:6a:ab:
15:81:2b:03:71:cc:c8:ee:5d:55:22:96:72:d3:25:c4:89:10:
a6:ba:f1:a6:5c:b9:a7:d3:31:ec:ec:4d:59:4f:c6:a0:9c:94:
aa:22:66:ac:0c:66:4e:fb:f9:21:34:c0:35:f3:c9:53:0d:2e:
03:00:44:77:eb:bb:9b:00:e1:b2:08:e6:b7:89:9c:ff:40:5f:
e4:17:08:89:fa:7a:c9:24:b5:e3:21:cb:49:73:51:29:28:e9:
bf:b8:31:24:dc:ee:2a:48:fa:03:81:77:55:15:b7:ce:02:75:
2c:df:60:cc:a8:c7:31:b9:ba:e2:43:75:a6:35:b8:a2:d2:94:
ba:af:b8:db:9a:33:2d:31:18:31:8a:6a:1a:24:60:92:8c:84:
31:86:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org