Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r0ECVxyRTVoR5lDPsySnyVDDuA8.roa
File: r0ECVxyRTVoR5lDPsySnyVDDuA8.roa (raw, json)
Hash identifier: qWULLQUDep1HiypMqe9VQvySZaZU4YIj69Q/L/2uDaw=
Subject key identifier: AF:41:02:57:1C:91:4D:5A:11:E6:50:CF:B3:24:A7:C9:50:C3:B8:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B71
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r0ECVxyRTVoR5lDPsySnyVDDuA8.roa
Signing time: Fri 07 Apr 2023 07:32:49 +0000
ROA not before: Fri 07 Apr 2023 07:32:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.0.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7025 (0x1b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:32:49 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF4102571C914D5A11E650CFB324A7C950C3B80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:c4:37:80:96:5d:54:6f:15:dd:5b:e7:4f:
29:88:a3:6e:0f:f1:2d:dd:13:82:81:80:02:82:f7:
f7:03:4f:d4:9a:72:d5:04:40:35:7b:20:45:f3:5f:
c4:b9:b3:fa:6d:d6:54:55:5d:20:93:cd:b9:88:c3:
3f:e2:1f:cb:ba:5e:6b:b3:45:2b:8d:09:2c:05:aa:
ae:10:9b:b5:fd:0a:b8:b0:36:0e:e3:22:05:eb:0f:
fc:88:67:5b:2a:87:5c:eb:57:6f:45:18:d5:40:10:
40:03:08:9e:ff:6c:a9:77:94:24:0f:f8:32:c8:92:
ba:29:da:bb:b7:4e:78:e4:fe:71:09:c3:1b:47:2c:
c0:96:b8:4e:b3:96:09:cd:70:6c:40:23:62:b1:a9:
0f:a8:4d:3b:45:cb:cd:73:3f:d7:27:08:ed:dd:77:
ec:29:37:4d:2d:73:b9:fc:c2:58:95:bd:64:cf:13:
c5:20:08:71:38:43:76:05:c4:c3:05:2b:cc:0f:3d:
7c:ce:78:0e:71:63:1b:4e:2f:a5:8c:b4:f2:4c:d5:
54:03:14:a5:5b:10:9d:ef:a9:91:bf:0c:6b:e9:60:
f3:1e:7c:75:83:81:24:9e:8d:d4:ba:81:5a:75:af:
24:fb:50:4f:e1:ea:20:5f:70:c8:eb:ce:1d:a7:9f:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:02:57:1C:91:4D:5A:11:E6:50:CF:B3:24:A7:C9:50:C3:B8:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/r0ECVxyRTVoR5lDPsySnyVDDuA8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/19
Signature Algorithm: sha256WithRSAEncryption
04:2f:9d:98:c9:c8:ff:e2:71:fe:52:22:6c:c2:3e:8d:ad:a5:
4a:54:7e:3f:8b:62:33:0e:cb:01:8a:29:40:a5:e4:ca:5b:59:
78:75:c5:80:32:25:bf:f3:ca:23:a0:b6:81:1b:bb:5f:08:57:
3a:f3:2e:a8:7a:ce:6a:cc:eb:a0:8e:f8:a1:9b:2c:20:29:48:
9b:fc:f4:2b:f6:35:82:26:bc:eb:41:ee:4d:c9:a6:22:01:1f:
8a:1a:b6:db:29:39:9f:9b:d5:87:b0:f1:06:a7:a7:d7:ef:03:
9f:f5:75:e2:6f:c9:37:4a:c5:01:ee:1c:0a:d8:73:69:15:4e:
e9:9f:f1:be:10:ac:e7:f9:52:00:40:82:bd:52:1e:05:90:bb:
07:79:31:50:ce:78:40:1e:0b:8b:ca:c0:26:cc:4a:23:12:15:
ec:d0:89:ef:56:2d:ce:b8:c9:1b:4e:84:49:e2:50:71:8d:be:
cd:04:b0:08:93:73:20:67:20:32:32:74:96:0c:7e:67:a3:f3:
2b:a3:55:f4:1a:3b:30:96:b3:47:e2:a9:cb:f8:49:dc:53:f9:
9b:c2:f7:0d:16:ee:03:d6:bf:3b:5d:9d:e2:1d:15:75:ca:b3:
19:ee:69:00:6a:b5:b4:7f:30:74:a4:f1:c4:07:ea:63:6b:08:
4e:23:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org