Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO8dEjqGFYNBdIy8HlIKuVSq1Xw.roa
File: qO8dEjqGFYNBdIy8HlIKuVSq1Xw.roa (raw, json)
Hash identifier: eExOo9q98Jd/6fv/wrRajpW48K/hBf/7Dw2eI0p0rq0=
Subject key identifier: A8:EF:1D:12:3A:86:15:83:41:74:8C:BC:1E:52:0A:B9:54:AA:D5:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO8dEjqGFYNBdIy8HlIKuVSq1Xw.roa
Signing time: Thu 15 Sep 2022 02:36:11 +0000
ROA not before: Thu 15 Sep 2022 02:36:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A8EF1D123A86158341748CBC1E520AB954AAD57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:d6:fb:c0:d3:68:52:c8:9a:17:27:46:be:
bd:e9:dc:07:d3:31:cb:2c:d1:84:6c:82:ad:52:63:
a3:cf:fc:90:a1:61:97:2b:11:b1:99:f6:e1:7b:c8:
93:32:56:dc:36:cc:9b:e0:8e:ff:89:69:c0:e3:16:
1f:48:bb:25:a7:f0:3a:6f:51:8d:42:cf:be:f4:2a:
a7:6a:44:68:aa:5d:41:e5:8f:1d:1a:76:d7:16:53:
fa:ca:85:62:66:24:bb:0f:5c:a9:9e:d8:95:e5:c7:
9a:c1:4c:0c:60:b8:b5:b1:3a:6d:12:40:1b:62:ec:
1e:c1:9e:56:53:36:51:10:6d:c0:5f:6a:28:a3:fc:
47:82:f4:7c:d5:a0:8a:db:b5:8b:49:2b:eb:b2:97:
a8:fd:36:de:16:0f:2a:24:2c:c1:a3:bd:26:2d:79:
92:f3:82:18:b9:af:80:6d:38:2d:f1:97:78:9f:84:
cd:59:b9:53:1d:9e:be:0d:6f:a6:a8:27:a1:0b:59:
b8:fa:08:36:70:22:b8:54:0e:1e:a2:a7:dc:45:cd:
e1:f3:9c:80:59:e3:e0:03:e5:8e:54:ab:e8:1a:91:
f9:d0:d4:db:69:64:15:13:50:33:03:2a:d5:ef:09:
3f:f5:5d:84:eb:4e:77:5a:7c:b7:4b:44:65:bf:e9:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:1D:12:3A:86:15:83:41:74:8C:BC:1E:52:0A:B9:54:AA:D5:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO8dEjqGFYNBdIy8HlIKuVSq1Xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.49.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5e:f4:ed:a9:1d:c7:98:ff:28:29:59:27:e0:86:2a:50:2b:
4d:b4:b9:b4:fe:af:6d:52:77:4b:50:19:d7:51:d5:3a:c8:78:
8d:e9:d1:4e:09:fa:63:2d:9c:fa:64:78:95:1c:64:a4:83:97:
16:20:ea:0a:c0:57:03:be:05:4a:8b:6e:a3:ff:31:02:6c:10:
6b:26:c7:f2:eb:f3:73:2d:e7:e0:2f:a2:98:a6:58:45:57:ba:
b3:3a:96:d4:a5:66:35:16:43:63:b2:63:82:e8:38:c3:33:4a:
d7:5f:d4:d5:3d:95:bb:9c:68:3f:4f:b2:a9:89:b6:b8:e0:08:
30:a1:65:8a:9f:08:b8:b7:37:6c:d4:47:30:a2:57:be:cb:61:
53:55:d3:c2:99:8b:c3:9a:b0:3d:e6:03:4a:dc:55:2a:63:a1:
92:4a:07:95:0a:1b:52:1e:12:8a:86:b9:a0:10:6f:15:08:28:
5e:6e:e8:1f:22:65:f4:da:29:50:22:da:c9:af:88:ed:d2:41:
8e:a8:31:25:70:fb:74:7b:bd:98:a8:34:b8:e1:72:f4:e0:87:
f8:46:fd:56:21:20:40:61:39:18:3a:19:06:ff:d2:9d:6b:7e:
c1:14:03:31:a7:30:74:92:1e:4f:a2:28:e6:0f:54:0c:1e:08:
6d:73:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org