Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yAupENX6QSEP-vRzvUekN8UmCOk.roa
File: yAupENX6QSEP-vRzvUekN8UmCOk.roa (raw, json)
Hash identifier: R3xLsAatRx6m1wZTbJzeVyueELmWBzsOyfWS4RHtFIQ=
Subject key identifier: C8:0B:A9:10:D5:FA:41:21:0F:FA:F4:73:BD:47:A4:37:C5:26:08:E9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1975
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yAupENX6QSEP-vRzvUekN8UmCOk.roa
Signing time: Sat 22 Oct 2022 06:06:33 +0000
ROA not before: Sat 22 Oct 2022 06:06:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.112.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6517 (0x1975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C80BA910D5FA41210FFAF473BD47A437C52608E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:95:45:43:44:61:eb:a8:50:99:7e:d8:85:
19:cb:e4:e3:86:18:2c:2c:a2:3f:45:2c:b4:54:83:
ec:43:46:90:53:4d:ff:fb:99:63:15:96:6b:ac:88:
0e:c0:25:65:08:a2:8b:df:08:d0:c5:87:f7:9e:7c:
81:14:5e:37:24:19:c4:be:5e:92:47:4e:85:98:c6:
71:b5:bc:3c:6b:ef:b1:88:69:23:83:12:4b:6d:c6:
3e:26:8b:3d:ea:54:0a:18:71:93:85:b0:b6:7d:08:
ed:84:5d:63:0b:f5:27:10:1e:18:d4:74:89:8c:01:
e6:e8:16:63:00:01:3b:cd:9e:8e:53:f4:bb:fc:63:
f7:a7:bf:20:42:b0:8b:fb:c8:2d:35:4a:d3:15:42:
94:63:89:6d:b6:4f:d3:36:ae:40:6b:7f:33:74:6c:
a1:de:c7:53:64:84:c0:ee:70:1a:87:17:a6:d4:38:
ca:07:71:00:02:4c:07:28:f7:f2:dc:58:59:b6:f8:
9c:c0:f2:bc:54:f2:2f:99:03:dd:5c:a4:be:0a:02:
b0:ec:f7:cf:5a:a9:de:7c:24:89:8b:f7:cf:6e:05:
99:ef:a6:ea:91:e5:81:f9:4e:ad:58:74:4d:88:bb:
97:f5:b5:14:bb:1f:91:40:93:3f:1e:3e:9e:b6:cf:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:A9:10:D5:FA:41:21:0F:FA:F4:73:BD:47:A4:37:C5:26:08:E9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yAupENX6QSEP-vRzvUekN8UmCOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:43:9c:23:71:34:95:cd:e5:25:3e:d2:3e:97:bc:02:fb:a2:
cd:ff:0b:8b:f3:39:72:06:eb:5e:87:21:19:47:49:fb:d1:d6:
56:7e:d4:1d:86:5f:a6:bb:9d:90:ed:95:e2:65:c5:b1:2f:18:
3a:4f:17:57:60:72:8a:60:8b:e6:68:86:17:33:b1:3a:a1:d3:
39:b9:ae:0e:e8:ee:9f:d6:22:9d:06:e1:07:4c:33:06:fd:b3:
3c:3f:bf:1b:0c:bf:2b:e3:c1:4c:8c:e1:38:cb:1c:73:a7:4e:
7f:27:dc:80:5b:12:f2:69:1b:d2:83:ba:c1:31:4c:e5:9c:aa:
d1:81:35:d9:38:ae:9d:0d:e9:3a:05:be:62:46:85:b9:ae:32:
99:d6:58:b8:5c:4a:53:bb:23:7c:8d:c8:80:09:f8:dc:27:63:
e9:fd:e5:4d:0c:0b:ff:af:d2:9c:82:f9:38:7e:05:8b:72:42:
a6:bf:6b:56:1e:65:fe:cc:e4:1d:a2:af:f3:b3:2c:3d:c9:5d:
68:a7:fb:69:6d:56:6a:b0:92:8b:e9:01:4c:b9:15:3a:2f:a8:
fa:db:46:23:9d:fd:86:3d:00:24:b7:53:4c:cb:24:44:ce:39:
a4:c6:c7:3f:08:ad:6f:00:15:29:95:29:49:8c:49:17:25:92:
46:99:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org