Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zXiVJ6psU7A_OViHsYZ1qrcjOzA.roa
File: zXiVJ6psU7A_OViHsYZ1qrcjOzA.roa (raw, json)
Hash identifier: vQmvdvBKNKc2o/p2cEY5jkZvsXPIzoAKxDYRDN+CmHY=
Subject key identifier: CD:78:95:27:AA:6C:53:B0:3F:39:58:87:B1:86:75:AA:B7:23:3B:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zXiVJ6psU7A_OViHsYZ1qrcjOzA.roa
Signing time: Thu 15 Sep 2022 02:36:22 +0000
ROA not before: Thu 15 Sep 2022 02:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD789527AA6C53B03F395887B18675AAB7233B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:6e:48:7c:90:a1:0d:64:c6:c1:ad:30:57:
cb:51:b8:1a:39:e3:07:18:c2:0e:f1:e0:56:cb:b3:
99:5f:12:d7:c3:ba:f9:d3:60:7d:e0:22:78:fe:00:
f7:c8:eb:41:03:f1:59:75:a6:fa:51:6c:85:ac:b0:
47:81:b5:eb:bd:38:f6:e1:2f:3b:dd:a6:be:3f:a9:
57:3a:1a:33:2f:87:e6:db:f9:35:6d:15:fa:41:7f:
02:16:95:1c:59:ae:cb:58:9e:ba:99:d2:13:58:c6:
15:68:5b:f3:ee:47:38:8d:54:fe:a1:90:33:a6:13:
e5:9e:b3:14:9c:00:1c:45:b7:a1:cd:70:2f:8b:ed:
4e:4c:44:78:2b:54:7c:16:6f:9e:c9:5b:07:e3:ae:
0d:dc:9c:5f:e3:f7:46:2e:6e:2f:f4:a0:85:2a:a8:
e8:27:77:0e:d7:5d:53:1d:5e:3b:8d:b6:82:4c:31:
c8:ca:01:4a:c9:bf:d2:a9:33:0b:17:8f:69:58:3f:
2a:7a:d1:42:24:2e:34:dc:65:a7:cd:07:59:20:de:
96:3e:5e:6d:94:6a:f4:6d:61:2f:7d:31:28:99:30:
65:bb:98:72:a2:ae:4d:d5:f1:29:98:d4:76:3e:8e:
ea:1a:d9:fe:ec:dd:5a:18:b8:a5:ef:5d:80:bc:b7:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:95:27:AA:6C:53:B0:3F:39:58:87:B1:86:75:AA:B7:23:3B:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zXiVJ6psU7A_OViHsYZ1qrcjOzA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.68.0/22
Signature Algorithm: sha256WithRSAEncryption
63:32:ae:f2:77:f4:4d:d7:73:e7:5f:fc:8d:34:15:8a:d2:0b:
23:e3:90:b1:5e:78:6e:53:9b:25:bf:4b:08:89:a5:17:ed:5b:
9a:4d:6e:22:d0:c1:09:81:0e:b4:3c:19:5f:c1:22:30:73:b1:
a7:3d:7e:ef:7d:39:b0:75:c6:e1:83:eb:b9:09:74:ed:06:c3:
9f:1e:61:2a:9c:b9:db:9a:ff:82:04:1a:55:e4:f5:64:34:65:
4c:76:3a:1f:35:16:b3:27:d5:9b:f3:b4:ad:29:5f:80:e3:21:
90:af:5d:a9:8f:65:41:57:82:c8:e8:37:f2:57:6f:f3:b7:2c:
6d:2f:e1:43:98:69:39:bc:bd:24:d8:40:96:f1:88:69:2d:21:
f9:cd:87:4e:0d:f6:cc:5f:cd:01:8c:cd:a7:f8:cc:44:51:34:
66:8e:4e:97:b4:b8:42:c4:07:5b:99:25:26:4b:f7:8b:84:eb:
3c:ff:d8:16:2a:94:a2:9a:28:06:d2:e9:b1:7e:50:98:a9:09:
71:46:3f:85:e2:6f:e3:94:85:42:09:3f:50:f3:53:42:8c:21:
6d:cb:a4:b5:32:e1:78:05:a7:e9:ba:8f:ef:4f:b7:16:e6:f5:
12:02:2f:79:87:19:f5:79:92:bb:b1:46:16:79:0d:2d:e7:b5:
e8:f2:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org