Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YL9EZx827vatQPF3CAv4yQazxBM.roa
File: YL9EZx827vatQPF3CAv4yQazxBM.roa (raw, json)
Hash identifier: XcKMwRhu2ykk71sihRxE0KWU4Xp+s+6Y9o4KRLlZWcM=
Subject key identifier: 60:BF:44:67:1F:36:EE:F6:AD:40:F1:77:08:0B:F8:C9:06:B3:C4:13
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19B0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YL9EZx827vatQPF3CAv4yQazxBM.roa
Signing time: Sat 22 Oct 2022 06:07:59 +0000
ROA not before: Sat 22 Oct 2022 06:07:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6576 (0x19b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:07:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60BF44671F36EEF6AD40F177080BF8C906B3C413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:7c:43:87:7c:51:e3:b5:70:11:7d:b8:b0:
ca:c5:92:da:e1:87:47:06:07:72:b3:2d:c1:c3:1b:
40:7f:7f:e8:0d:eb:8a:62:ea:75:33:5b:11:32:b6:
ea:ab:20:48:70:f8:16:78:5a:b4:f4:55:d7:04:3f:
92:0e:00:63:04:86:cd:7d:dd:33:95:56:59:fc:59:
3e:39:6c:de:29:ec:50:54:b5:50:16:e7:d3:a9:ff:
45:13:a2:ed:6d:5f:72:2b:90:79:95:62:42:a3:c3:
ce:f9:53:ea:5b:a8:ce:a7:8a:ea:f9:a6:b3:c2:b9:
72:2d:ec:8c:e5:c4:0f:cd:95:30:3d:e9:a4:c7:c9:
0a:42:81:ac:15:0d:a3:3a:9f:76:86:ee:de:36:5c:
71:7d:ee:ea:48:62:cf:7a:88:62:d5:4f:b3:55:12:
47:b3:4a:41:70:2e:9e:40:01:bb:f4:16:cd:a4:d5:
9c:6f:3d:b5:d0:6d:ee:b6:ef:94:28:7e:30:46:7b:
20:7a:54:a2:86:9f:7b:1c:ba:08:0c:df:76:1f:92:
34:87:ad:62:6e:a5:b5:bb:3a:ce:a3:ba:1c:00:05:
b8:8d:12:4c:ed:1a:1a:89:21:01:70:57:97:40:d4:
9f:02:95:e0:9d:23:59:d0:90:f0:c5:71:2b:26:05:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:44:67:1F:36:EE:F6:AD:40:F1:77:08:0B:F8:C9:06:B3:C4:13
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YL9EZx827vatQPF3CAv4yQazxBM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:02:d6:d0:78:b5:67:7f:4c:68:6a:86:1b:3d:44:8d:de:d7:
1e:a4:ee:c5:0c:ad:e1:57:36:15:ad:03:75:eb:2f:79:ac:75:
bb:91:a7:4e:a7:3b:1a:da:b7:ae:69:d5:01:a4:12:b1:33:cb:
5c:82:20:6f:a8:ed:b4:1a:94:6f:3b:45:76:e5:df:65:f7:de:
93:39:2a:22:f4:94:73:7a:f8:9f:13:f4:65:67:07:fe:f4:71:
10:1a:46:32:b0:ac:ce:b4:e1:36:da:c0:c1:0e:99:41:90:d2:
5c:8c:21:4c:83:c8:34:fa:f9:ab:46:7e:5d:62:38:bb:36:e6:
1b:97:6f:18:d0:37:5e:55:7b:35:6a:48:76:dd:d1:18:13:7f:
ae:29:95:3c:be:0a:a0:97:f8:a1:52:17:55:b1:bb:4e:f0:f2:
72:42:7e:5f:19:d3:60:aa:85:41:e0:e2:b5:ea:bb:cf:0d:25:
48:38:78:44:90:92:be:c0:2e:b5:12:c4:4d:57:d8:7c:44:75:
ca:58:89:22:c0:a0:37:c8:7e:55:bc:41:62:3d:f9:3a:41:24:
d3:6f:fe:9d:0a:da:19:b0:98:fc:12:01:06:e0:a3:73:9c:03:
d2:c0:35:fb:8e:cc:ed:16:d3:9d:99:7b:4c:e4:c5:68:57:c7:
ad:75:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org