Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LpewRwlZYtD-ti-48dDRNxWQIk.roa
File: -LpewRwlZYtD-ti-48dDRNxWQIk.roa (raw, json)
Hash identifier: qMYiH0FIaJG8lU2dLZItEDux0kyOO4TQZnauATd9GVA=
Subject key identifier: F8:BA:5E:C1:1C:25:65:8B:43:FA:D8:BE:E3:C7:43:44:DC:56:40:89
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19E8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LpewRwlZYtD-ti-48dDRNxWQIk.roa
Signing time: Sat 22 Oct 2022 06:12:46 +0000
ROA not before: Sat 22 Oct 2022 06:12:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.56.160.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6632 (0x19e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:12:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F8BA5EC11C25658B43FAD8BEE3C74344DC564089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:b4:bb:01:86:12:13:3c:a0:5f:f3:a6:28:
a2:f0:47:8a:a5:dc:67:22:77:3d:fe:ec:03:58:09:
3f:2c:c5:95:a7:88:c9:32:3d:28:c5:57:ab:30:79:
04:40:74:bd:be:07:27:27:fa:66:71:7d:c2:96:20:
8a:78:05:e8:66:28:c3:b7:d7:ae:41:59:f2:51:c0:
e8:5d:8b:15:9d:13:c9:a9:20:90:26:3a:91:85:5e:
c5:81:fa:f1:29:33:58:a4:11:b5:ab:47:ab:db:9e:
94:54:8a:cb:92:27:90:5d:10:65:ad:59:ac:f9:0f:
e8:fa:3d:f8:5b:ca:a1:a5:c3:4a:04:34:43:e8:2e:
1b:54:eb:c9:72:1a:cc:fd:fa:0b:02:1f:78:c7:57:
2d:50:ff:f0:6f:47:19:6c:11:18:8b:a8:91:79:50:
12:e1:b5:66:fc:d0:68:ef:ff:d4:ee:20:82:f3:5f:
6a:ad:77:00:01:ea:27:85:d6:a2:13:b0:87:a1:0d:
51:0c:59:e0:6d:b0:fb:ee:1a:44:37:ad:3f:5a:e5:
c3:9e:bb:ee:c2:60:8c:53:cf:45:d7:cf:48:1e:f0:
eb:60:84:04:c7:39:30:a4:b7:54:bd:d4:d3:7b:aa:
3a:a7:7c:57:ad:9a:60:cb:52:11:cf:ec:f8:17:56:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:5E:C1:1C:25:65:8B:43:FA:D8:BE:E3:C7:43:44:DC:56:40:89
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-LpewRwlZYtD-ti-48dDRNxWQIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/20
Signature Algorithm: sha256WithRSAEncryption
54:87:de:91:7a:6f:6e:8f:05:92:2f:d2:9a:21:3a:3d:5a:fb:
5f:bd:36:92:88:02:77:a8:01:0c:88:81:65:06:63:f8:67:f0:
a0:62:7a:66:ee:c2:7c:c8:1e:ac:ff:ea:6c:66:da:5b:1d:6d:
91:de:27:93:dc:90:b9:d6:d1:56:91:0d:13:55:18:f2:33:ea:
5f:cd:e0:57:88:7b:01:b8:2d:16:f5:84:1f:dd:5d:9d:79:6a:
b3:7d:f3:49:69:ac:19:52:c5:68:80:4f:a0:40:d6:58:a6:67:
e9:c2:55:df:ef:d1:c7:88:0c:d0:02:4b:fc:bf:b3:b6:23:4a:
ea:dc:b6:9c:ea:0c:08:92:62:b1:87:45:91:26:ab:ba:e0:24:
c1:5e:9a:d6:e8:b5:50:58:c3:5e:6d:b8:8e:29:ee:19:3e:68:
a1:e9:9e:bd:34:5d:06:95:cc:bb:9b:c6:cf:4c:18:03:fb:3f:
ef:0e:c6:5d:cf:f4:99:d3:33:c9:7c:20:b2:fa:8f:a2:c3:99:
bc:31:f1:93:f1:2f:94:58:61:ec:a1:9d:3b:17:92:dd:f1:40:
55:bd:b5:2e:4a:63:4a:be:b6:45:94:bf:79:e2:25:e4:66:9c:
db:4d:93:51:22:f2:e9:e3:27:f3:6d:ec:4b:19:b8:12:aa:7e:
a1:a7:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org