Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8in9rZH_WNEY7NDq85UE3QWCNg.roa
File: w8in9rZH_WNEY7NDq85UE3QWCNg.roa (raw, json)
Hash identifier: JhTF2jm6YKqsH0XiLbXvlLIR2fusw+pEaSzThJSHs0g=
Subject key identifier: C3:C8:A7:F6:B6:47:FD:63:44:63:B3:43:AB:CE:54:13:74:16:08:D8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1924
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8in9rZH_WNEY7NDq85UE3QWCNg.roa
Signing time: Sat 22 Oct 2022 06:06:09 +0000
ROA not before: Sat 22 Oct 2022 06:06:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6436 (0x1924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3C8A7F6B647FD634463B343ABCE5413741608D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:2f:2b:24:05:57:d3:e8:c6:ad:de:b4:4f:
5b:1d:63:f6:c8:48:e5:97:47:bb:ff:13:30:34:e7:
0e:47:29:18:78:4b:0f:39:95:bb:2f:9e:18:30:62:
9c:c4:21:59:54:14:80:94:2a:15:66:52:e5:aa:2d:
c4:d2:42:a1:e5:6c:47:3a:16:0d:b5:e7:45:34:41:
76:7d:2e:e3:3b:98:9e:96:6a:c9:b5:47:ea:6b:3f:
61:9d:92:82:b2:f5:ad:ab:b2:01:d8:b2:98:2f:87:
ff:3b:36:8b:18:63:b6:f1:8e:65:7f:70:95:f6:cb:
45:de:7f:4f:c7:01:ba:65:25:4b:a9:9c:17:82:97:
08:f5:ef:9a:47:72:a3:8b:e9:56:1f:fc:5b:0a:33:
1c:4a:f9:27:2b:78:33:09:29:6c:31:1d:72:bb:8c:
f0:c6:30:1d:8f:f7:54:d7:56:64:db:68:4b:b9:3f:
87:57:8a:f4:9a:78:aa:19:68:6b:52:77:a9:64:f8:
45:35:e3:84:46:c3:e5:06:47:c5:40:a4:5f:7b:5b:
4c:32:9d:72:71:5d:1c:d4:86:7e:24:4b:7f:1d:00:
25:39:e9:0f:68:67:de:55:68:14:7a:82:3c:57:9e:
d2:da:cb:2f:93:3f:f5:93:30:aa:b3:54:97:73:cb:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:A7:F6:B6:47:FD:63:44:63:B3:43:AB:CE:54:13:74:16:08:D8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8in9rZH_WNEY7NDq85UE3QWCNg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.55.0/24
Signature Algorithm: sha256WithRSAEncryption
05:11:14:a0:23:db:08:54:60:2c:f6:a1:41:25:1c:e5:78:37:
41:c3:51:37:b4:44:6d:e3:00:7a:e5:18:e1:4e:6d:d1:18:2e:
4b:2a:b1:35:a2:cb:5c:90:96:98:eb:81:5f:a0:21:c2:52:19:
06:7a:0f:4e:d0:9e:8e:a2:91:1d:e9:d5:e0:7e:2d:8d:51:d2:
ee:85:28:65:d3:89:a9:be:90:98:86:6f:3b:62:e1:f5:ed:4f:
f4:75:f3:d6:5d:62:a4:48:80:f4:84:d3:a6:70:36:ea:ca:c8:
30:91:25:dc:fe:d3:5e:fa:57:de:c7:1c:19:13:5c:01:b9:62:
6a:9c:23:28:5c:5d:1f:5c:59:55:91:52:be:64:df:d0:5f:34:
ec:c0:cb:9b:15:21:8e:75:4d:0d:58:9a:a5:0e:80:a8:1b:4e:
e5:f6:b0:62:74:02:10:ce:22:d8:47:5a:8d:b0:ef:4c:bc:f5:
19:fc:d5:86:ed:2c:31:a2:d2:1c:96:fa:a4:40:cb:53:9a:74:
b8:33:e9:ce:f4:69:6d:d3:d7:3e:da:6b:ca:ab:9d:b7:b1:74:
8f:9d:00:0b:56:a4:af:e1:64:67:e1:30:f7:62:44:09:f7:be:
20:9b:1e:2d:28:12:8e:1b:d4:0c:96:8a:90:0b:37:34:28:e6:
fa:35:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org