Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xodYLoCIQg-rU-iF5H2xrIN07kQ.roa
File: xodYLoCIQg-rU-iF5H2xrIN07kQ.roa (raw, json)
Hash identifier: kUxajz9aWw64CFFgu5vqq0eWt7iABn2Mow1EGv2InUY=
Subject key identifier: C6:87:58:2E:80:88:42:0F:AB:53:E8:85:E4:7D:B1:AC:83:74:EE:44
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xodYLoCIQg-rU-iF5H2xrIN07kQ.roa
Signing time: Thu 15 Sep 2022 02:35:54 +0000
ROA not before: Thu 15 Sep 2022 02:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C687582E8088420FAB53E885E47DB1AC8374EE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:b2:11:8d:86:59:4a:e0:34:17:2a:71:4a:
a0:41:39:fc:bb:5c:eb:08:fc:d8:03:a9:0a:39:76:
1f:36:a2:d1:3c:0e:3b:d6:d6:77:a6:05:de:70:18:
c3:62:99:b5:82:14:96:6e:b1:8b:5e:83:be:c2:d4:
ca:77:37:4a:e0:0d:8e:89:ff:05:e5:d4:31:09:28:
c3:8a:72:0a:46:3d:4e:6c:42:68:2b:4c:d2:ba:a8:
78:fa:ea:ff:c7:1b:b0:fb:5f:a2:b9:35:14:0d:f5:
c6:96:73:22:a6:08:dc:58:20:dd:f6:90:79:ff:15:
fa:b1:e3:62:29:33:e4:74:2f:dc:e8:ab:8c:25:23:
48:93:86:66:2a:6a:78:a8:61:4d:64:77:48:78:b1:
36:33:cf:42:ff:4f:37:0d:a2:ad:bb:34:c6:ea:02:
0d:d9:cb:0b:73:57:75:3e:ce:5a:8d:13:8c:af:6e:
3b:79:3a:fc:d9:c9:78:63:21:66:13:29:61:12:72:
3b:2a:7a:1f:fa:cf:fd:e6:a0:17:08:76:39:0c:93:
57:cb:b6:24:71:8d:54:ca:b9:83:81:8b:02:f1:76:
ac:03:74:49:3c:5d:ec:a3:67:bb:48:cf:49:dd:47:
22:18:a0:7d:b1:e1:9c:7d:b4:77:14:4b:e1:dd:fe:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:58:2E:80:88:42:0F:AB:53:E8:85:E4:7D:B1:AC:83:74:EE:44
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xodYLoCIQg-rU-iF5H2xrIN07kQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.81.0/24
Signature Algorithm: sha256WithRSAEncryption
89:04:73:e2:ce:a2:95:af:94:94:86:db:90:97:24:b1:38:b7:
83:01:89:59:48:bb:5f:f6:89:b1:18:ed:96:20:4d:60:54:aa:
88:23:a5:6b:c7:16:c4:11:54:65:72:e8:7d:06:c2:ad:51:39:
92:7d:4c:44:52:13:ef:78:22:6a:e6:e7:a3:7d:08:4f:64:6f:
a7:40:41:76:d0:35:ae:70:f5:f3:34:54:65:c7:e6:26:6b:1e:
18:7b:28:b7:e5:1a:d1:51:ce:d8:2e:0a:69:67:fb:90:1e:a3:
17:cb:be:1c:b5:15:aa:ba:1e:51:97:a9:d5:84:8c:7a:4d:bc:
39:c6:aa:18:55:07:e5:9f:37:c3:92:fb:59:d9:f9:b9:e5:dc:
eb:19:05:d3:12:4c:da:26:c7:72:63:54:bd:91:9d:eb:2e:5d:
11:6c:34:f9:1d:33:8d:01:6c:e3:00:6c:6d:49:4e:d8:ac:e5:
1c:08:ee:fc:c0:3d:9b:09:4e:6a:12:78:1d:55:f4:c6:d6:8e:
26:34:de:ac:49:d1:06:d5:80:55:f3:60:02:8a:89:e9:a2:6d:
64:9e:a2:f0:48:1e:cc:ea:34:64:b1:08:d8:e8:29:3c:4f:70:
ef:a7:d3:ad:d8:9d:e5:5c:e3:5b:85:e3:53:62:1c:31:22:cd:
aa:48:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org