Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rQ3cx5Qzp1ULu4rc2ajpOa2dq_E.roa
File: rQ3cx5Qzp1ULu4rc2ajpOa2dq_E.roa (raw, json)
Hash identifier: FhJlm9hkJ47FFXmEhK5Asxv8dVN0UEuhsGL7Err9AlQ=
Subject key identifier: AD:0D:DC:C7:94:33:A7:55:0B:BB:8A:DC:D9:A8:E9:39:AD:9D:AB:F1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rQ3cx5Qzp1ULu4rc2ajpOa2dq_E.roa
Signing time: Thu 15 Sep 2022 02:35:30 +0000
ROA not before: Thu 15 Sep 2022 02:35:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AD0DDCC79433A7550BBB8ADCD9A8E939AD9DABF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e4:bd:b5:b4:67:b6:c4:07:d5:b0:b8:58:19:
65:42:90:26:5c:70:b1:3d:f2:f5:3c:12:a0:a3:14:
15:d0:7e:8a:a1:89:0b:fa:21:0f:ce:42:e1:c7:84:
08:18:d0:c6:94:5c:70:c4:65:d5:98:16:4d:70:19:
ef:11:39:66:f7:18:4c:be:cd:c6:ca:e6:b2:f4:9d:
74:6b:ac:a5:9f:b2:6a:4f:6e:b3:15:f2:6a:84:49:
a1:d6:8f:a7:16:ed:60:66:a0:18:eb:1b:98:3d:67:
f2:40:74:29:5a:2f:1c:29:07:08:e9:b0:85:85:70:
c2:d3:ab:b0:cd:c3:2d:e9:40:0d:39:86:95:96:3b:
c8:5b:bc:2c:fa:11:83:2b:02:c5:8c:2c:82:be:ac:
cc:a4:f6:01:99:56:87:cc:c1:fe:e9:d3:90:22:27:
12:ad:54:f0:42:3a:ad:cd:d6:de:26:45:29:f8:cb:
96:3b:64:81:65:72:2b:ed:9b:93:07:de:79:dc:bc:
88:45:53:cf:25:21:e8:60:d5:c3:2d:26:1f:85:d4:
17:7e:5b:a2:2a:e1:d9:8c:3a:09:ea:57:2f:cc:ab:
3b:eb:21:04:79:28:b5:6f:29:e8:82:95:cd:0f:53:
42:b6:11:bd:3d:03:16:f1:67:98:f3:c3:15:8d:1d:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:DC:C7:94:33:A7:55:0B:BB:8A:DC:D9:A8:E9:39:AD:9D:AB:F1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rQ3cx5Qzp1ULu4rc2ajpOa2dq_E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
06:93:5c:6b:79:4e:65:b4:a0:da:0a:9f:33:cd:5c:cc:84:eb:
5e:59:c5:e0:7c:b5:3d:fb:a1:3b:e5:2b:0c:51:bf:71:9b:08:
4a:f9:53:c7:5f:2d:a8:f1:58:cd:cb:b9:51:67:ae:91:87:db:
c7:6a:68:fd:c2:df:eb:ea:47:72:34:d4:1f:8b:29:03:51:43:
fc:3c:21:f5:1a:0f:ed:b5:6b:20:27:85:89:2e:6b:8c:f8:e3:
e4:29:43:79:a7:11:1f:b7:5c:18:46:10:9d:58:85:46:ce:19:
25:ad:77:84:23:9c:68:bf:71:d4:a2:d0:e1:40:5a:cc:9c:23:
9b:fb:aa:fe:a4:cc:29:60:4a:6d:48:fd:a4:e8:90:cc:ed:0f:
13:41:0a:1a:72:04:b3:f5:7b:c8:54:f9:0b:ee:0b:7f:58:27:
41:3a:2d:cb:16:98:3f:d8:76:8d:c6:c9:58:b5:cf:38:0a:3d:
5d:b6:f7:6d:d4:27:07:bf:97:8a:0d:3e:9f:ec:2c:fd:20:f7:
d7:92:e3:1e:3f:78:a9:18:2a:ed:26:a2:c6:d1:38:d4:4b:0f:
ed:d5:a4:72:a3:4a:21:7d:a7:31:6e:f5:0c:51:54:d5:f3:68:
33:b4:89:c4:a5:10:f3:d1:4e:71:97:e5:41:b9:47:d9:60:a7:
a0:eb:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org