Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
File: WLfGITllPOTR5uxRSiDwQFBAe_U.roa (raw, json)
Hash identifier: uwnDaxY2ox4cGxL+r7BO44/dFf+r1HuG8qzAnkzEv8E=
Subject key identifier: 58:B7:C6:21:39:65:3C:E4:D1:E6:EC:51:4A:20:F0:40:50:40:7B:F5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A9A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
Signing time: Fri 16 Dec 2022 04:09:22 +0000
ROA not before: Fri 16 Dec 2022 04:09:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.209.0/24 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6810 (0x1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 16 04:09:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58B7C62139653CE4D1E6EC514A20F04050407BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1e:cf:38:71:8a:8f:b0:d0:ae:c5:a1:96:20:
46:c5:99:aa:10:24:a5:b1:dc:80:8b:3a:7d:0c:e5:
78:90:4c:cf:f7:24:0f:d2:2f:22:b7:db:ed:8d:92:
b1:1e:be:c3:41:3c:56:7f:cb:9c:7b:9e:de:ee:90:
05:4c:74:4b:f4:9e:59:f5:fe:51:72:d4:73:93:91:
65:70:9f:6c:9d:b6:ad:c7:56:81:2d:f0:e2:3a:44:
64:09:7d:8e:11:42:ab:66:42:c9:44:2f:d9:65:60:
2a:f6:92:88:85:f8:5a:2b:bb:dc:26:1f:5b:1d:d6:
cf:5d:00:8f:52:62:99:05:c9:44:e8:d5:8b:44:c2:
c9:e6:d7:fe:70:36:f6:9e:a3:08:1d:0c:53:2c:56:
e1:88:ff:71:29:09:84:03:e8:e7:62:3f:35:8d:d2:
f2:a7:8c:48:ce:39:26:5b:52:bb:ba:8c:6f:36:a8:
27:bc:b5:84:e2:68:3b:72:f6:1b:ce:5d:4b:8c:51:
22:b9:ef:b2:9f:ca:55:72:f6:75:43:12:c8:59:2b:
80:1a:27:7d:69:97:ec:12:93:a4:a8:8a:c5:95:66:
f5:de:a1:bb:3b:be:13:21:16:65:a4:e0:6a:fb:3e:
4c:8d:62:f4:e2:25:ff:61:7f:fc:a2:ba:7d:b8:5d:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:C6:21:39:65:3C:E4:D1:E6:EC:51:4A:20:F0:40:50:40:7B:F5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f9:00:93:27:57:6e:f9:83:59:9c:f2:7c:1d:23:64:e8:af:
2c:59:58:52:ac:d6:7e:41:09:8f:a5:b5:0c:68:d5:da:49:dc:
bc:3d:15:e2:5e:28:11:3e:f4:1f:72:77:01:a2:71:1b:f3:3c:
c7:f1:30:27:6b:99:4c:fc:5d:3f:6c:6b:f0:d8:c6:7f:b7:ba:
ce:75:5e:94:dd:3e:c3:0b:9e:88:28:99:8c:f2:2d:26:32:1f:
c6:41:e3:a1:1b:6a:c6:7e:da:c6:8f:63:ae:cd:29:c1:d8:8e:
8e:4f:d0:90:e6:e5:2f:85:b5:a5:5c:d9:94:91:0b:1f:b0:14:
be:28:34:34:6c:66:a5:a5:9d:7d:1e:e2:a6:2a:57:8f:54:34:
46:47:de:3b:81:e9:d7:8f:40:e7:8e:b5:d2:e6:97:80:d1:36:
37:d6:15:31:9a:fb:d8:36:f9:71:cb:e3:af:75:ab:d7:d4:7b:
91:54:8c:ee:b5:ee:35:a1:09:cb:3d:cd:f6:2c:fa:09:a5:4b:
c8:3c:7e:dd:ac:ac:76:30:5e:bd:b0:34:0d:5b:dc:89:ef:b3:
72:53:3a:89:da:2c:f2:d5:49:ff:08:40:45:28:83:eb:45:cb:
b5:f2:29:ef:69:9d:b6:59:5a:41:ad:fd:31:19:b5:2f:6a:26:
ba:f9:07:14
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEyMTYw
NDA5MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU4QjdDNjIxMzk2NTND
RTREMUU2RUM1MTRBMjBGMDQwNTA0MDdCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1Hs84cYqPsNCuxaGWIEbFmaoQJKWx3ICLOn0M5XiQTM/3JA/S
LyK32+2NkrEevsNBPFZ/y5x7nt7ukAVMdEv0nln1/lFy1HOTkWVwn2ydtq3HVoEt
8OI6RGQJfY4RQqtmQslEL9llYCr2koiF+Foru9wmH1sd1s9dAI9SYpkFyUTo1YtE
wsnm1/5wNvaeowgdDFMsVuGI/3EpCYQD6OdiPzWN0vKnjEjOOSZbUru6jG82qCe8
tYTiaDty9hvOXUuMUSK577KfylVy9nVDEshZK4AaJ31pl+wSk6SoisWVZvXeobs7
vhMhFmWk4Gr7PkyNYvTiJf9hf/yiun24Xb3tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWLfGITllPOTR5uxRSiDwQFBAe/UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dMZkdJVGxsUE9UUjV1eFJT
aUR3UUZCQWVfVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
PdEwDQYJKoZIhvcNAQELBQADggEBAGv5AJMnV275g1mc8nwdI2ToryxZWFKs1n5B
CY+ltQxo1dpJ3Lw9FeJeKBE+9B9ydwGicRvzPMfxMCdrmUz8XT9sa/DYxn+3us51
XpTdPsMLnogomYzyLSYyH8ZB46EbasZ+2saPY67NKcHYjo5P0JDm5S+FtaVc2ZSR
Cx+wFL4oNDRsZqWlnX0e4qYqV49UNEZH3juB6dePQOeOtdLml4DRNjfWFTGa+9g2
+XHL4691q9fUe5FUjO617jWhCcs9zfYs+gmlS8g8ft2srHYwXr2wNA1b3Invs3JT
OonaLPLVSf8IQEUog+tFy7XyKe9pnbZZWkGt/TEZtS9qJrr5BxQ=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org