Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weWD-D8e6oIfVOc3itCynyAkGzY.roa
File: weWD-D8e6oIfVOc3itCynyAkGzY.roa (raw, json)
Hash identifier: UceFsvHWIUqqPktV7CZZWaeBCg39yVHwz6tKFlTMS1w=
Subject key identifier: C1:E5:83:F8:3F:1E:EA:82:1F:54:E7:37:8A:D0:B2:9F:20:24:1B:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1915
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weWD-D8e6oIfVOc3itCynyAkGzY.roa
Signing time: Sat 22 Oct 2022 06:06:05 +0000
ROA not before: Sat 22 Oct 2022 06:06:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6421 (0x1915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C1E583F83F1EEA821F54E7378AD0B29F20241B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:b7:eb:10:45:93:08:6b:ba:12:c9:2c:53:
b8:44:1e:e2:cc:28:a9:c5:b7:5c:e1:cd:2d:5b:1e:
6c:1b:b1:bf:00:a2:02:04:00:ae:49:69:ea:e6:f1:
ed:f1:a0:ef:59:b3:e4:ec:1b:c1:91:98:af:88:e5:
04:9e:e5:f5:8e:72:25:f3:8e:de:d1:25:20:99:fd:
a3:ca:b9:0a:a9:fa:85:ce:84:91:ba:af:2e:a3:b2:
a4:6e:8e:b6:b9:1c:92:38:d7:f2:f5:7b:0e:da:e4:
99:9f:fc:9b:78:eb:89:04:fd:b8:74:29:4a:a1:0d:
b4:42:fc:17:72:c7:8e:35:a4:63:a6:33:a7:9a:b9:
8e:df:9e:ed:16:f4:3a:9b:32:7b:bd:08:df:6d:2a:
d1:9a:6f:f9:6c:1a:24:52:4c:ff:76:2f:e0:be:28:
59:bd:c1:56:7e:8f:1d:ad:37:00:24:18:1f:59:26:
19:ed:d2:39:7f:28:80:e2:7a:ad:17:a9:ef:c4:f8:
c6:6a:0e:0b:8f:b2:82:77:1c:d6:21:84:13:b5:c1:
08:40:f0:16:6b:f5:55:b6:ba:ac:b8:7e:34:1c:57:
12:1c:d8:35:21:1c:a1:05:9f:01:2b:04:4e:b2:30:
c1:b2:a1:23:55:9f:f4:4a:d9:f3:3d:ac:f7:12:af:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:83:F8:3F:1E:EA:82:1F:54:E7:37:8A:D0:B2:9F:20:24:1B:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/weWD-D8e6oIfVOc3itCynyAkGzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
95:b1:d6:fb:ce:62:2e:d9:ee:7f:a9:6e:41:ab:56:e5:c1:45:
ea:7d:3e:dc:f8:84:8d:b4:57:3e:05:5a:d0:14:70:30:0e:a9:
62:ba:96:c1:cd:7b:f3:83:15:a7:d3:8f:3e:f7:2f:3d:a0:a0:
c9:5c:cb:b7:36:4c:b5:eb:89:d0:37:f0:0d:c4:f5:be:02:e8:
61:ea:0a:30:03:cf:67:2d:98:8f:b1:62:7b:d3:e2:a1:25:66:
dd:5b:fb:b0:4a:24:05:da:4a:7e:b1:e6:d0:03:1e:c6:ed:50:
23:fd:7d:d8:c3:25:fc:6f:e0:b2:fb:bc:75:7d:63:3d:01:64:
88:69:38:bb:5a:5a:c6:c1:dc:f7:f7:29:55:5c:2f:83:3d:bf:
03:c6:a4:4f:81:49:ab:57:d2:d0:7a:0c:40:6c:90:ab:3d:5d:
b0:1f:1e:05:0c:6c:d5:e1:65:c2:35:7b:39:a3:51:5b:ee:e1:
7f:4a:90:5a:24:d7:8b:ad:6a:cf:34:c0:cd:c6:ea:db:06:91:
8a:1b:31:cf:07:8f:83:d4:d8:27:79:eb:ce:4b:d3:5e:7c:2d:
38:25:33:14:6e:96:2f:ce:02:04:97:78:d3:2c:f4:1f:a6:ca:
16:91:d7:9f:34:6c:4e:ec:00:ad:2c:14:78:f3:51:bb:17:5c:
e8:e4:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org