Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ufUSYUGAcb2MZcc4hbUbV9-iF0U.roa
File: ufUSYUGAcb2MZcc4hbUbV9-iF0U.roa (raw, json)
Hash identifier: 8H+V2lfFyNDO/WVtfrvLhp9/1l6QfEe2/BkqAlE1yik=
Subject key identifier: B9:F5:12:61:41:80:71:BD:8C:65:C7:38:85:B5:1B:57:DF:A2:17:45
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 16FC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ufUSYUGAcb2MZcc4hbUbV9-iF0U.roa
Signing time: Sat 22 Oct 2022 05:28:29 +0000
ROA not before: Sat 22 Oct 2022 05:28:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5884 (0x16fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:28:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B9F51261418071BD8C65C73885B51B57DFA21745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:99:00:aa:16:86:8d:f0:9b:fc:82:b2:d1:
b1:84:f1:18:55:9b:73:2b:fc:29:ec:f0:2f:48:fe:
41:87:77:48:8f:39:f9:bd:29:30:a0:90:7f:5d:67:
7f:4c:a4:20:25:64:e5:61:28:6d:15:eb:db:99:c5:
4b:fd:ad:ef:f3:c4:6c:a1:38:37:ff:04:6a:aa:2f:
cd:da:f6:f6:b9:30:3d:81:0e:c1:ec:d3:27:39:14:
ba:5f:91:d8:97:47:83:d2:78:9d:72:de:52:30:90:
cb:14:3f:f7:fb:03:63:8f:63:e0:42:74:fd:ca:99:
a5:27:41:fc:66:9b:98:6a:73:a9:f9:67:e0:30:95:
57:06:d0:5f:02:09:01:59:65:4b:ca:f6:7a:dd:fb:
a4:c9:b4:db:52:41:07:c5:7d:ab:ac:6f:5a:e9:4d:
fb:c0:a9:05:e5:bb:28:bc:93:b4:2e:d7:a8:ae:90:
7e:1a:ec:84:eb:c2:36:a5:a9:3d:5a:48:3f:ff:f0:
e4:b9:02:47:aa:66:d5:c1:60:fa:7e:5f:ab:8c:95:
9b:df:37:ff:27:ab:46:28:7d:0b:b2:ae:fe:7e:8d:
ad:16:0d:86:20:15:46:62:3b:0b:a0:1b:e1:b6:bf:
1e:2f:03:60:36:3b:22:6b:b7:86:7e:85:f5:98:1a:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:12:61:41:80:71:BD:8C:65:C7:38:85:B5:1B:57:DF:A2:17:45
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ufUSYUGAcb2MZcc4hbUbV9-iF0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:53:01:08:ed:b1:da:c0:58:4a:67:c1:20:1a:a1:f1:11:cb:
bc:a9:be:b3:de:41:a6:6e:d1:76:fc:80:91:ad:16:1f:c5:cd:
29:34:e8:60:04:d0:1f:b0:ff:a0:5f:bf:cf:55:1a:bf:50:20:
36:da:71:f1:0b:d2:97:52:2b:30:40:f9:aa:82:b6:ff:0f:87:
32:b9:c5:7f:51:25:06:07:26:08:3f:3d:bb:e1:5c:fd:51:8b:
49:38:a4:49:1b:73:13:e4:d0:83:e8:08:e7:8d:b2:b0:e7:09:
fa:cd:96:be:86:99:68:9a:bd:c5:5c:d7:4e:3a:1d:01:72:49:
76:0e:40:88:6d:b0:02:0e:05:ea:bf:4e:20:4a:22:72:7c:42:
4f:fb:69:11:6c:7a:6b:91:d9:76:c8:69:29:cc:cd:5f:f0:ca:
9e:08:bd:5a:57:45:f2:ea:98:d1:23:ad:33:fe:5d:ce:bd:5f:
be:ce:1c:b0:69:b5:e6:7c:bd:c6:6a:6d:49:90:07:d2:c3:37:
7c:c7:49:bf:51:14:ca:b9:d6:e4:7a:96:6a:9b:fb:25:8c:12:
1e:00:35:d7:d6:f2:8c:31:73:21:36:0f:0c:f1:b0:e4:b4:15:
37:51:13:3d:8c:78:2f:70:32:76:3c:b1:38:3a:4c:34:2e:d4:
b4:db:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org