Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kh-Jfb_E6KSzbk9xHs187DVa5co.roa
File: Kh-Jfb_E6KSzbk9xHs187DVa5co.roa (raw, json)
Hash identifier: qrYwvQ3LqaLwa9jw55Eid4ZyEoTUlc6C5bPUKfKRht0=
Subject key identifier: 2A:1F:89:7D:BF:C4:E8:A4:B3:6E:4F:71:1E:CD:7C:EC:35:5A:E5:CA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A16
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kh-Jfb_E6KSzbk9xHs187DVa5co.roa
Signing time: Sat 22 Oct 2022 06:17:46 +0000
ROA not before: Sat 22 Oct 2022 06:17:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.64.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6678 (0x1a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:17:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A1F897DBFC4E8A4B36E4F711ECD7CEC355AE5CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:76:6e:5a:be:09:22:aa:a3:35:3d:6d:2c:
71:27:61:29:d3:bf:82:60:fc:ae:d4:af:c7:35:e6:
fc:8b:43:2e:60:64:8c:12:7f:6a:c4:e3:60:e4:ac:
a8:5b:35:70:21:0b:8c:1f:6e:38:89:9b:61:5f:26:
ec:5e:a6:06:90:27:2c:b5:86:cf:85:4f:0b:ee:5e:
c4:fd:51:21:42:ce:5c:2c:19:57:9a:40:2f:48:27:
18:f3:89:f4:e4:68:71:e2:81:6c:0a:e3:4b:4a:9f:
9a:4c:50:12:32:b3:39:d9:3e:00:36:ba:f5:7a:31:
26:da:00:db:9a:3b:23:15:30:53:7d:9a:39:ee:53:
0e:e0:3f:05:4c:8b:87:34:96:54:0a:25:87:92:24:
d5:83:6f:be:cc:89:7f:35:36:c4:8c:8d:ab:e9:4a:
e5:c0:7d:f9:4b:ae:d0:b9:7f:6a:91:eb:00:6e:c7:
e4:c0:ae:6e:4d:fe:62:1a:2e:67:cf:50:30:b8:2f:
57:4d:03:8b:37:f1:72:64:eb:c1:7d:29:a2:1b:7a:
93:0e:42:65:02:2f:7b:9e:62:ba:fa:1f:8f:9e:0d:
fe:64:df:34:a9:18:ab:73:72:2f:30:5a:e4:2e:8e:
ba:17:6f:63:58:44:5b:3f:b1:dc:b7:21:a2:df:a7:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:89:7D:BF:C4:E8:A4:B3:6E:4F:71:1E:CD:7C:EC:35:5A:E5:CA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Kh-Jfb_E6KSzbk9xHs187DVa5co.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:7c:af:94:7c:d2:a7:b9:71:dd:b0:26:e0:ce:0f:e7:26:0f:
1d:b3:33:9c:c6:78:54:a7:a6:17:c2:a3:71:ba:16:eb:ff:5b:
c8:32:ac:3f:f7:0c:80:69:e3:96:8c:b5:3d:6c:c2:dd:7f:7e:
a6:39:38:94:45:a2:be:0e:b0:cb:37:d5:e2:9d:b1:41:0b:f0:
bd:24:e4:75:cd:e1:62:ae:18:73:98:25:af:69:db:a6:54:2f:
da:1e:fd:2c:95:ec:3b:1f:8b:6b:7b:08:77:39:c8:c9:7c:0c:
3a:05:37:92:9f:22:78:c3:76:2a:ed:2a:d7:91:36:d4:0c:61:
b8:82:e2:6c:03:e5:0d:b6:c9:a1:26:a0:e3:ce:3b:4b:e5:f0:
08:ba:64:03:96:bf:7e:10:2e:b4:c9:5b:c0:a1:76:39:27:ef:
0c:44:84:0d:e5:32:77:17:e3:7c:6e:91:9e:79:8a:01:25:1e:
31:b5:37:97:77:6f:1e:68:0d:7d:c6:c3:c2:da:c2:fa:e0:eb:
69:bc:d5:0b:6b:6f:84:66:6e:ca:63:e1:27:ae:b5:51:b0:86:
d8:7e:a6:0d:fd:bb:d6:5f:36:da:19:c6:b2:f3:2d:0e:94:89:
a1:c4:5b:4e:d9:e3:5e:78:83:48:ae:f5:b7:64:ed:2a:6a:ee:
6a:4d:79:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE3NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBMUY4OTdEQkZDNEU4
QTRCMzZFNEY3MTFFQ0Q3Q0VDMzU1QUU1Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9lXZuWr4JIqqjNT1tLHEnYSnTv4Jg/K7Ur8c15vyLQy5gZIwS
f2rE42DkrKhbNXAhC4wfbjiJm2FfJuxepgaQJyy1hs+FTwvuXsT9USFCzlwsGVea
QC9IJxjzifTkaHHigWwK40tKn5pMUBIysznZPgA2uvV6MSbaANuaOyMVMFN9mjnu
Uw7gPwVMi4c0llQKJYeSJNWDb77MiX81NsSMjavpSuXAfflLrtC5f2qR6wBux+TA
rm5N/mIaLmfPUDC4L1dNA4s38XJk68F9KaIbepMOQmUCL3ueYrr6H4+eDf5k3zSp
GKtzci8wWuQujroXb2NYRFs/sdy3IaLfp8ZFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKh+Jfb/E6KSzbk9xHs187DVa5cowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0toLUpmYl9FNktTemJrOXhI
czE4N0RWYTVjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9
QAAwDQYJKoZIhvcNAQELBQADggEBAI18r5R80qe5cd2wJuDOD+cmDx2zM5zGeFSn
phfCo3G6Fuv/W8gyrD/3DIBp45aMtT1swt1/fqY5OJRFor4OsMs31eKdsUEL8L0k
5HXN4WKuGHOYJa9p26ZUL9oe/SyV7Dsfi2t7CHc5yMl8DDoFN5KfInjDdirtKteR
NtQMYbiC4mwD5Q22yaEmoOPOO0vl8Ai6ZAOWv34QLrTJW8Chdjkn7wxEhA3lMncX
43xukZ55igElHjG1N5d3bx5oDX3Gw8Lawvrg62m81Qtrb4Rmbspj4SeutVGwhth+
pg39u9ZfNtoZxrLzLQ6UiaHEW07Z4154g0iu9bdk7Spq7mpNeds=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org