Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wu3v2qkwHTUAKrQfPJB9lhXfTKY.roa
File: Wu3v2qkwHTUAKrQfPJB9lhXfTKY.roa (raw, json)
Hash identifier: uytT5vYgzXcC0lLAM8BFp6NHRHrbiu3lRXRwTBVwP9Y=
Subject key identifier: 5A:ED:EF:DA:A9:30:1D:35:00:2A:B4:1F:3C:90:7D:96:15:DF:4C:A6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19F6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wu3v2qkwHTUAKrQfPJB9lhXfTKY.roa
Signing time: Sat 22 Oct 2022 06:13:32 +0000
ROA not before: Sat 22 Oct 2022 06:13:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.60.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6646 (0x19f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5AEDEFDAA9301D35002AB41F3C907D9615DF4CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:c9:fc:0e:9c:77:17:22:5b:9e:24:47:b7:
e0:40:3b:2a:67:69:1b:93:90:a3:d4:85:d6:3e:ed:
4e:f7:c3:bd:bb:1d:73:91:dc:4d:e2:24:bc:9b:db:
4b:1e:25:91:6a:f7:9b:26:4c:80:90:a8:c5:99:2d:
9d:85:2d:44:97:df:f3:50:49:ff:06:9d:d9:8d:22:
00:09:00:ef:18:c2:36:74:c4:16:c4:5d:5d:76:cb:
80:14:5b:90:e1:43:4e:df:e8:01:cd:97:88:d6:67:
c0:4b:73:94:c9:52:e2:63:eb:88:23:04:05:51:7c:
f8:fb:d3:7c:70:90:ab:e6:da:2e:73:c5:ce:cc:73:
81:b7:94:65:d0:65:34:70:33:d4:f1:0e:ba:5f:ff:
d3:2d:d1:dd:9a:8e:72:45:0e:b1:ea:86:87:7b:45:
f8:d3:76:42:dd:03:7d:8b:0d:d0:c6:5e:f5:41:b3:
d6:3c:11:57:9a:83:3a:21:91:6a:b4:5c:bc:10:f7:
7b:1b:07:bd:a8:08:ef:ad:eb:35:b0:62:85:2f:0b:
b1:e8:78:7e:4b:0c:cd:23:0a:46:73:0d:3e:d4:40:
d2:5a:5e:53:6c:62:44:03:8f:5c:77:e2:ed:54:1d:
f7:27:ca:ea:29:1b:48:2c:05:b3:02:f7:2f:3b:0b:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:EF:DA:A9:30:1D:35:00:2A:B4:1F:3C:90:7D:96:15:DF:4C:A6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wu3v2qkwHTUAKrQfPJB9lhXfTKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/21
Signature Algorithm: sha256WithRSAEncryption
85:d2:82:b5:cf:98:80:0c:43:eb:63:11:06:61:85:c5:33:70:
de:d5:88:2b:c8:48:13:9a:57:0f:9f:87:45:67:09:00:68:34:
c0:27:78:2c:02:e3:2e:48:bb:2e:48:c9:69:49:2b:c3:e1:cd:
07:34:39:c2:25:8b:5b:18:e6:c5:e7:5e:a9:1a:b4:e7:cb:85:
68:43:e7:80:5d:a2:c9:8c:64:87:92:b9:5c:ad:68:3d:10:6c:
c8:e8:67:76:3b:03:82:66:09:10:0a:7a:64:fb:56:08:73:6e:
1d:95:9c:84:32:05:6c:a4:c4:b3:49:74:c2:79:8a:15:82:24:
e4:cc:ba:24:ba:33:a5:ab:78:06:b3:96:ff:9c:96:2f:32:a2:
59:d6:bc:4c:b8:aa:c2:e5:e4:00:2f:ec:2c:db:67:02:d4:df:
fc:98:f7:16:8c:20:de:70:97:92:77:03:32:62:e9:5d:86:70:
fa:78:07:87:10:53:7c:7a:8c:45:75:16:42:64:91:5d:47:eb:
7f:59:30:c2:93:00:e1:b9:bc:09:c1:52:e2:c9:22:aa:e5:f2:
4a:a5:21:7a:64:69:cc:04:99:be:01:a9:6d:23:42:95:c3:e8:
d1:4b:c1:41:3d:cc:b0:79:f4:81:41:23:c8:f6:5e:19:f5:95:
22:6a:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org