Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rpxjamh9IPjdVRodNeawBnvbwtY.roa
File: rpxjamh9IPjdVRodNeawBnvbwtY.roa (raw, json)
Hash identifier: G6MNtBrffvEVTwfy+vjGGk2DolkZtEaYxnhpabd6bJM=
Subject key identifier: AE:9C:63:6A:68:7D:20:F8:DD:55:1A:1D:35:E6:B0:06:7B:DB:C2:D6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rpxjamh9IPjdVRodNeawBnvbwtY.roa
Signing time: Sat 22 Oct 2022 06:11:19 +0000
ROA not before: Sat 22 Oct 2022 06:11:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6606 (0x19ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE9C636A687D20F8DD551A1D35E6B0067BDBC2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:da:03:be:8a:d4:f2:a4:76:13:29:ff:48:
b9:0e:4b:b2:15:7f:88:f0:fe:c5:4f:e9:d6:a7:f6:
97:0c:50:0c:cb:8c:b3:1f:ed:89:5d:85:17:4a:8f:
8d:99:63:cb:4e:41:71:39:bd:f8:3b:a5:f1:89:62:
df:69:17:bf:5c:5b:bf:64:f1:4f:6a:b3:05:88:4c:
24:89:d2:c0:c0:a2:83:e0:99:94:63:8a:63:f8:94:
f6:c7:7d:36:c5:ac:be:ec:81:d2:12:da:d4:71:fd:
53:b1:be:1b:e8:45:cd:b8:05:25:38:bf:88:64:23:
af:ac:6a:75:9d:67:13:99:23:a6:48:0e:8c:38:1f:
23:cc:c5:0d:56:3d:d0:69:31:54:3e:cf:d9:2f:bd:
46:18:cc:ce:ed:e4:dd:21:c9:02:1b:ad:6f:8e:f7:
7b:99:8f:03:1c:6c:1b:87:ca:2f:9c:aa:9c:58:0d:
3e:8e:16:18:4c:f0:a3:26:6d:20:ed:1e:ce:f5:3b:
10:f6:14:ae:5d:cf:fd:50:14:e7:1f:a4:2a:b5:76:
1c:7e:fc:90:1b:06:a3:b6:b9:24:e1:ab:52:22:26:
46:5b:59:bb:ce:02:aa:67:89:3c:2f:29:1d:c8:96:
4b:4e:ab:61:6f:8b:db:b2:49:9d:b0:e5:6d:93:9e:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9C:63:6A:68:7D:20:F8:DD:55:1A:1D:35:E6:B0:06:7B:DB:C2:D6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rpxjamh9IPjdVRodNeawBnvbwtY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:47:a1:f5:e0:ca:d0:5d:b9:ac:d6:b7:9b:9e:94:12:e3:d0:
a8:3f:25:90:8a:35:56:e2:df:d2:d3:32:9a:cc:c4:21:88:65:
ff:10:f7:71:7b:12:e1:a4:83:f2:4a:33:fb:54:55:73:95:63:
18:fe:32:7a:2f:01:9e:ac:fd:6d:a4:ee:3d:19:c5:89:3f:69:
89:9a:c5:f5:56:56:39:9b:0e:ed:0b:db:51:c6:d3:a0:cf:31:
86:9c:aa:90:df:1c:6d:cd:e8:92:f4:1b:2f:97:f5:95:03:a0:
c4:69:c7:ce:6f:db:65:b7:a7:04:db:8a:43:87:dd:e4:d8:9b:
33:59:10:ea:ed:27:2c:2e:24:37:d2:48:d3:03:68:e3:5c:6d:
80:c5:52:90:1c:7e:26:12:36:70:8f:0a:70:f0:69:4c:66:cc:
cd:50:e2:34:fc:5c:01:ee:14:58:85:70:f6:17:7c:53:e1:f3:
c4:45:33:c7:6c:31:de:57:aa:83:93:25:fd:ca:4a:8c:ca:67:
ba:94:13:33:4a:e6:ec:c7:98:4f:09:de:89:e2:b7:92:e2:c0:
c7:f5:91:b5:05:22:de:41:d5:d5:16:25:e5:d7:dd:ae:78:35:
29:9a:9b:b6:a9:30:5a:ec:8a:14:c9:33:78:9f:8f:9a:f3:c5:
28:0f:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org