Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpAF2_KBb7ZaMvhVOJIQzFfSLDY.roa
File: qpAF2_KBb7ZaMvhVOJIQzFfSLDY.roa (raw, json)
Hash identifier: 1loK5IPkpc6Di7MAKcfaOLBiIuSqMk4wNgNGRI/izWQ=
Subject key identifier: AA:90:05:DB:F2:81:6F:B6:5A:32:F8:55:38:92:10:CC:57:D2:2C:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpAF2_KBb7ZaMvhVOJIQzFfSLDY.roa
Signing time: Thu 15 Sep 2022 02:35:57 +0000
ROA not before: Thu 15 Sep 2022 02:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 45.64.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA9005DBF2816FB65A32F855389210CC57D22C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:40:b4:88:f4:45:f3:8c:47:ea:32:14:ed:
0f:36:85:c8:35:5d:42:8b:56:a2:27:4c:37:a5:1c:
a2:c5:4b:21:4e:54:61:65:7a:bc:16:76:99:6f:45:
91:b4:9b:f5:7c:24:49:99:18:c3:3f:96:87:1b:e2:
08:6c:12:2d:18:8c:d3:52:b9:2e:7b:d3:d3:46:55:
2d:2e:9d:04:97:ca:72:29:98:53:78:02:96:1b:ff:
29:2a:a5:97:68:61:80:91:90:31:46:b3:3b:fe:bd:
15:37:61:31:b8:0e:da:0f:8f:d2:94:d1:7d:64:56:
4b:af:b1:73:21:b7:9e:fb:e3:fb:a6:19:6d:13:e0:
d7:10:bc:69:70:2f:a8:08:b7:e4:68:b3:d2:60:7c:
03:11:b2:13:e7:41:9d:63:1c:2b:c4:1c:a3:30:cd:
38:53:47:c1:c6:54:42:82:12:ef:c7:b4:69:0e:e5:
89:4c:7c:99:7a:d4:2e:76:89:37:b7:d9:df:55:65:
d7:3c:5e:ac:a6:f5:ed:22:3a:bb:14:01:25:5b:4f:
b3:5a:2a:e4:ca:dd:d6:6e:33:ee:0b:92:68:ba:73:
d1:3d:ec:41:5e:e9:ff:42:78:45:9e:f4:a8:d1:c7:
82:37:21:74:cb:b7:84:52:78:f3:4a:c1:e0:d7:ca:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:05:DB:F2:81:6F:B6:5A:32:F8:55:38:92:10:CC:57:D2:2C:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpAF2_KBb7ZaMvhVOJIQzFfSLDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4d:51:f2:92:e9:6c:20:ee:fd:04:7a:2d:78:26:97:53:87:
e0:37:19:e3:15:95:77:10:62:d9:5a:0a:e2:ef:dd:ed:b7:51:
60:b7:a6:2b:c9:b9:66:53:31:f8:e8:2e:a6:e4:2d:62:68:c0:
82:e5:70:19:e1:f3:5c:08:94:14:fa:44:c5:45:dc:82:44:0c:
2c:97:f4:07:a5:77:16:6b:de:f0:72:c9:23:11:08:7d:b2:0d:
59:70:67:89:e4:77:73:b1:45:e0:1f:d5:03:55:be:b9:5b:cf:
de:4f:69:2a:61:23:a1:be:07:00:bb:ab:68:45:79:7d:26:c2:
5b:2b:14:c5:4e:d3:96:1d:c1:5b:1c:63:66:70:2d:43:41:27:
e5:aa:a1:8d:66:2e:4e:96:02:cd:31:54:11:b9:7e:62:5b:31:
22:1a:ae:b0:b6:5d:1f:d5:61:2a:e1:53:59:06:ab:2f:4e:1a:
23:2f:42:c3:24:82:25:83:03:61:ff:5c:04:fc:3f:36:94:a5:
6e:34:7b:35:f4:b7:e1:ab:00:40:28:68:e4:13:3b:c4:c0:aa:
21:33:3e:ee:45:87:6b:36:23:ad:a7:e4:4e:8c:bd:bb:da:a1:
cc:29:ec:1e:65:9d:86:30:04:d4:a5:d5:de:6d:6a:6c:30:07:
26:ba:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org