Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vkMBoW8rn68Ed7x3OAkERWUm78c.roa
File: vkMBoW8rn68Ed7x3OAkERWUm78c.roa (raw, json)
Hash identifier: KxX8pIKkwji4Cakmofcyb9cOCosOQpTmNJIB7pcfPLw=
Subject key identifier: BE:43:01:A1:6F:2B:9F:AF:04:77:BC:77:38:09:04:45:65:26:EF:C7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vkMBoW8rn68Ed7x3OAkERWUm78c.roa
Signing time: Thu 15 Sep 2022 02:35:45 +0000
ROA not before: Thu 15 Sep 2022 02:35:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE4301A16F2B9FAF0477BC77380904456526EFC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:54:9a:5f:ff:ce:31:1d:44:98:ad:ab:e3:
59:79:86:6b:6a:f4:bb:0e:9b:5b:61:8c:59:83:ba:
00:c0:28:74:b5:45:e9:9c:c5:cf:d2:16:8a:e5:d1:
79:04:09:5e:21:91:79:4c:09:26:68:59:15:5d:b4:
80:d8:af:18:45:6c:cc:3a:ab:55:0d:71:f3:4e:b7:
a7:85:6c:06:e8:60:20:e4:4a:ce:c3:0c:79:5e:c9:
d6:9f:8c:fc:b0:b1:4d:5c:10:33:d5:bd:ac:86:bd:
e0:21:fd:0b:37:27:eb:46:c6:c3:57:16:8f:ce:b7:
93:5d:9b:93:89:7f:5e:d3:39:7d:d4:f4:8f:98:f7:
ff:6c:f3:06:9e:7e:a0:59:0e:82:5c:be:57:27:1f:
28:58:22:f3:9a:9e:dc:02:9b:4d:e6:08:8a:37:be:
2e:b5:d1:5b:99:e5:98:f1:80:26:19:fd:79:a2:64:
d1:4d:a1:78:60:91:e5:ad:6a:fe:7d:50:d9:8a:76:
69:0b:6f:09:97:13:cc:04:a9:7b:79:5b:e4:07:01:
85:24:65:5c:9c:71:1f:30:86:52:36:22:d3:59:e2:
09:ef:ac:d4:1f:9e:49:c5:0b:60:d8:53:3b:5d:df:
bd:d0:19:d0:0d:e9:84:14:86:35:66:35:26:89:3b:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:01:A1:6F:2B:9F:AF:04:77:BC:77:38:09:04:45:65:26:EF:C7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vkMBoW8rn68Ed7x3OAkERWUm78c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:fd:70:1b:7d:8b:2c:92:af:5a:84:9c:9e:a5:ab:d1:5b:0d:
f0:19:57:0a:75:66:6e:49:5e:d6:30:f5:9f:5c:fd:30:9f:ad:
ee:86:27:af:be:b2:b3:2b:43:22:e9:cd:ad:9d:af:54:55:35:
cd:0a:ab:1b:d4:94:0f:fb:c3:e7:bd:6f:1e:1e:3e:f9:2a:90:
2b:52:99:3f:61:2b:04:78:56:ff:4f:24:6e:1e:de:61:fc:b6:
1d:d0:c4:a6:b9:9a:3d:b7:9d:13:6c:ac:9f:63:58:ff:e2:46:
dd:8b:5d:fe:52:03:2f:cf:29:1f:99:8d:c3:94:8d:f4:77:40:
c5:ad:63:e9:ca:3d:e5:63:d2:22:92:e6:43:51:9a:ce:7b:d4:
0b:f5:ee:56:5a:b9:bd:9c:6b:fc:4c:d6:0a:b4:0e:0a:b9:60:
a8:77:34:e4:40:03:40:f1:23:01:af:02:77:7a:57:c0:d9:e3:
b5:f4:25:89:a8:68:c8:4d:83:d3:d3:cc:d5:68:d9:43:f0:e8:
4a:bd:4f:e4:a3:97:cf:87:3b:66:c6:61:bf:3a:e4:8e:f8:d1:
71:b1:1d:75:ac:7b:1f:2c:ef:8e:d9:cb:67:8b:ce:90:b9:cd:
c3:86:44:e8:57:62:a1:0d:e8:f4:ce:d3:74:10:a4:98:6d:02:
37:a0:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org