Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qgzrYl1ueMyB6p0SlXbFBspJd4w.roa
File: qgzrYl1ueMyB6p0SlXbFBspJd4w.roa (raw, json)
Hash identifier: jzSGdP2MkZ5lOuoRZv8JLtQG1W/rroo3vns0gMjgp+w=
Subject key identifier: AA:0C:EB:62:5D:6E:78:CC:81:EA:9D:12:95:76:C5:06:CA:49:77:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19A4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qgzrYl1ueMyB6p0SlXbFBspJd4w.roa
Signing time: Sat 22 Oct 2022 06:07:20 +0000
ROA not before: Sat 22 Oct 2022 06:07:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6564 (0x19a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:07:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA0CEB625D6E78CC81EA9D129576C506CA49778C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:0e:2e:19:9a:3a:e8:e0:8b:fb:9c:ce:04:
79:de:40:42:76:06:ae:9e:ca:59:f2:be:53:db:26:
63:d6:6f:03:ae:5b:cc:3e:63:4a:e3:fa:52:4f:0e:
8a:50:0b:a3:b6:81:9a:ae:d4:36:cc:ad:73:96:a4:
f5:64:11:c4:f2:33:07:8a:10:2f:f4:08:eb:90:f2:
6b:12:2a:03:7d:58:0d:c6:09:2b:71:c3:77:2c:74:
d6:ec:3a:94:9e:9a:64:e4:a4:50:2a:90:fd:87:6e:
07:fa:b8:35:7f:dc:62:6f:eb:7e:06:80:b6:53:3d:
e5:fa:e2:4c:00:34:68:27:ff:6f:0e:e3:0b:cc:5a:
b4:a1:18:73:87:eb:a1:3a:5d:e8:1d:56:05:86:31:
58:49:18:32:cd:bf:fa:e2:84:ca:c5:ae:5b:98:a5:
6b:e7:27:f8:ac:5e:2f:d8:98:69:69:5d:eb:ce:e9:
d2:6f:51:9d:8b:c8:ee:ee:69:1d:f8:0a:08:d0:b0:
5f:7d:cc:c5:7d:40:44:5e:1c:4e:f6:eb:15:6d:a6:
55:12:4f:2c:81:1d:10:7c:07:1f:ab:9f:6f:31:9b:
31:4d:c4:3f:8c:9b:1e:55:f3:1a:18:2f:d4:e6:ac:
e5:4b:89:f8:54:f1:57:69:eb:e6:ce:59:91:70:fe:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:EB:62:5D:6E:78:CC:81:EA:9D:12:95:76:C5:06:CA:49:77:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qgzrYl1ueMyB6p0SlXbFBspJd4w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/21
Signature Algorithm: sha256WithRSAEncryption
39:38:6a:90:5b:b4:2d:64:44:b9:ac:0f:25:eb:08:7a:cb:bd:
5e:fa:84:73:12:e9:a9:30:7a:e4:ac:4f:2c:2b:08:12:37:52:
cf:3c:a6:c4:50:07:e0:34:80:1a:54:36:d9:34:d8:76:4a:79:
18:bd:e2:1f:93:40:b2:24:c0:43:e8:a0:25:87:af:eb:1a:9d:
c5:93:e9:76:1a:f6:11:85:24:5a:30:8f:91:1c:0a:3d:93:a5:
bf:42:ca:10:db:e9:7c:f3:ae:35:fd:21:a9:db:7d:bd:0a:72:
71:e0:cc:47:0d:7c:46:b2:df:ca:7b:48:a9:32:eb:d5:cf:7a:
93:d1:12:e5:e4:d7:fc:e9:4f:13:a8:69:19:01:8e:56:52:b9:
96:bb:f1:5d:be:15:75:1e:ea:06:9c:17:a7:c9:ed:0f:53:c5:
90:e7:59:7b:42:29:18:0e:27:c0:f7:91:77:ba:b9:10:19:9b:
3c:0b:b5:14:67:b1:b0:93:ce:f2:c5:ae:c2:2d:f0:89:5f:43:
0b:19:8a:fa:83:f5:02:c3:b7:42:61:10:41:7a:8a:77:9a:42:
a0:0f:d5:26:40:9e:c1:2c:f4:76:4e:62:0c:98:3d:2b:76:11:
68:10:50:8c:34:71:f3:04:fc:94:eb:65:73:18:00:b2:4b:9e:
f7:3e:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org