Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-ePoPST89YVVOVMmSlIWdeD2ka0.roa
File: -ePoPST89YVVOVMmSlIWdeD2ka0.roa (raw, json)
Hash identifier: pOfi4orPOJdgBAMAIc9YbaAefiCj6XncWdQlJleqT4o=
Subject key identifier: F9:E3:E8:3D:24:FC:F5:85:55:39:53:26:4A:52:16:75:E0:F6:91:AD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A35
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-ePoPST89YVVOVMmSlIWdeD2ka0.roa
Signing time: Mon 24 Oct 2022 03:29:32 +0000
ROA not before: Mon 24 Oct 2022 03:29:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.61.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6709 (0x1a35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 24 03:29:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F9E3E83D24FCF585553953264A521675E0F691AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:82:28:93:7a:ce:8c:71:45:b2:f2:c3:52:
e8:5d:f5:57:49:be:b0:70:b8:82:bf:32:7b:a3:49:
c2:db:c4:f2:de:83:5f:0a:a2:47:62:ef:90:a5:08:
7f:5c:83:3c:e8:04:68:07:b5:15:70:8a:3f:c8:99:
b5:36:7e:55:c6:4a:d6:e7:19:97:04:ec:8c:2c:1b:
a5:42:c6:73:14:09:4f:83:e4:56:c3:ff:02:4d:8a:
a8:26:71:20:7b:b3:96:c6:b8:8f:29:3c:37:06:08:
8a:bc:cb:d9:38:17:d4:e6:a1:51:d5:15:63:28:3f:
7e:5e:ed:c0:21:45:85:ef:dd:79:4a:35:25:6e:d4:
ba:cc:a6:bd:13:99:ce:c6:84:02:92:a4:52:c9:70:
a6:a3:ae:c2:ff:4a:1d:be:8e:8e:74:c7:35:50:f1:
4b:c9:9f:cd:c1:e3:b9:24:cd:7b:14:06:c6:fe:76:
04:60:86:0e:d9:e6:b9:07:46:b5:03:e1:df:b2:92:
cf:8a:48:90:24:d5:72:e1:e3:12:f9:86:62:76:36:
ec:50:05:99:d8:64:ef:76:cc:9e:93:b1:42:e7:39:
32:22:0e:02:cb:22:5e:22:f0:08:3a:de:82:71:5e:
b6:ef:fd:a1:bd:23:6d:48:39:37:b6:57:7f:c2:c5:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:E8:3D:24:FC:F5:85:55:39:53:26:4A:52:16:75:E0:F6:91:AD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-ePoPST89YVVOVMmSlIWdeD2ka0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
22:5a:10:65:44:4b:c2:2e:0a:da:85:ac:e5:00:33:c0:6d:58:
09:3c:b1:95:ef:06:99:6b:af:0d:63:08:10:41:4f:b6:23:04:
7e:a9:7f:0f:4d:4a:41:c9:35:7b:ee:35:b3:2f:d8:cd:1a:9e:
ba:bc:02:92:10:00:48:d9:b2:bf:c0:3c:5d:3c:1e:23:50:5e:
55:8b:e0:2b:25:00:99:d5:47:d1:38:a8:d9:34:7f:1a:09:db:
be:64:78:5f:5e:d1:c8:d2:a0:97:97:bb:c7:9d:4a:5d:7d:c0:
6a:ae:91:5b:97:24:64:cd:50:0e:c6:98:02:a4:df:9a:df:46:
3c:71:cb:53:d2:1d:43:ac:40:2f:9f:21:31:6f:3d:6d:0b:4f:
d4:8d:1f:5c:92:1c:b2:5c:a7:f9:16:30:65:2f:40:09:f2:1c:
e6:27:87:1d:1e:c9:c2:53:f5:d0:c1:55:f9:ec:45:09:94:e9:
54:a9:aa:f2:c4:a7:82:61:49:58:9c:0f:69:19:f0:4f:fd:de:
fb:e8:5e:27:80:3c:4a:24:23:00:1d:fc:e9:e8:77:0d:80:03:
dc:42:47:1d:4c:bd:87:67:7a:f6:cf:90:c2:5e:39:d8:37:54:
92:2f:ae:35:b8:e0:bf:0d:27:7a:63:f8:44:1c:6c:65:d0:b2:
fe:a8:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org