Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/APAWxoCy5ESmhBTTHbgBaS1qB9A.roa
File: APAWxoCy5ESmhBTTHbgBaS1qB9A.roa (raw, json)
Hash identifier: hQ47zJVavmwT7rqMYVtuBXNv+ajn0buBipVwe0yZbwE=
Subject key identifier: 00:F0:16:C6:80:B2:E4:44:A6:84:14:D3:1D:B8:01:69:2D:6A:07:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/APAWxoCy5ESmhBTTHbgBaS1qB9A.roa
Signing time: Thu 15 Sep 2022 02:35:35 +0000
ROA not before: Thu 15 Sep 2022 02:35:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=00F016C680B2E444A68414D31DB801692D6A07D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:56:0d:fc:2d:f4:c5:06:67:bf:0c:37:60:
7f:b6:db:a2:aa:19:03:2a:69:fd:6e:a6:e4:88:82:
fe:37:77:9f:6f:91:af:54:cd:f9:5c:f9:50:0e:7d:
ed:a9:4f:07:0c:64:62:1c:a8:43:2a:e1:44:81:5a:
fb:da:7b:75:2a:2c:a6:93:74:5f:9f:14:16:78:69:
16:96:26:62:f3:2a:4a:06:34:b3:94:d0:19:9b:ae:
0b:40:05:44:af:9b:ff:69:e6:7f:b6:7d:79:fe:37:
c6:06:57:f0:c8:d0:fc:7a:ea:d4:e4:61:80:8e:91:
9f:22:01:1d:87:2f:a5:b9:f1:5c:77:b6:07:69:88:
6e:0a:30:61:df:c2:62:6b:96:24:3e:11:a6:62:97:
7d:9a:64:1a:e5:2b:e8:73:79:fe:5d:73:5a:e3:67:
f9:c0:3c:6f:8e:dc:da:7a:58:87:ae:10:5a:25:4f:
d7:92:a8:ed:33:90:1f:90:44:7b:ef:7a:6a:c1:bf:
f4:e9:dd:be:59:1e:47:ff:4e:76:05:c9:ca:17:e1:
e1:22:b9:f0:6a:c4:8f:ae:de:c5:e8:48:b2:66:c9:
6b:50:2a:e5:1d:ea:db:c7:fc:de:b1:24:3c:ae:d3:
50:3c:6e:e1:ef:97:4c:ec:cf:88:2c:82:26:95:32:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:16:C6:80:B2:E4:44:A6:84:14:D3:1D:B8:01:69:2D:6A:07:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/APAWxoCy5ESmhBTTHbgBaS1qB9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:63:be:e0:40:f3:9c:a2:9d:b6:2a:47:18:10:f7:23:d9:94:
a3:98:76:b3:f3:f5:07:1c:42:99:54:a0:35:a5:14:61:89:73:
89:38:af:8f:a2:41:83:29:19:a6:0e:2e:a9:23:4e:96:13:b7:
33:76:3d:a9:70:66:1e:f5:ae:bb:aa:81:44:67:bf:f1:bf:64:
71:3d:cf:e4:d0:73:3d:3a:3e:d7:cb:f3:8a:f9:90:b9:34:a6:
f9:53:5e:55:c6:25:f9:bf:3b:67:8d:32:93:94:28:4d:02:ce:
fe:90:d0:a2:f1:62:bc:c6:56:60:db:ce:cd:c2:6d:ba:01:41:
7f:76:b3:f7:66:5f:a7:66:b7:bc:44:f2:12:1f:00:79:51:92:
f7:a8:ab:70:b8:2e:30:7f:05:73:8c:e6:b3:66:8b:67:4f:39:
bf:81:16:3f:66:4a:40:73:3f:55:b4:e0:b5:7f:be:a6:1a:2d:
cc:1d:4b:8c:a3:83:8a:82:30:2e:d7:3c:0e:ba:cf:cd:35:67:
20:b1:2f:b8:89:59:ae:65:14:34:67:33:5a:1d:e0:bd:33:6f:
d8:05:22:5f:44:78:8b:0e:af:e7:45:fc:d8:7e:c1:52:ad:65:
02:ed:db:ad:b8:37:0e:9c:17:8d:19:0e:5f:17:bc:ef:0a:06:
a3:8b:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org