Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YbVLfT4FzN2GPZiKpHRmGgtda9U.roa
File: YbVLfT4FzN2GPZiKpHRmGgtda9U.roa (raw, json)
Hash identifier: NdNmvA8XG3eMxFE4sOWiWgFDP8bwgH3gJ3x4as/2sic=
Subject key identifier: 61:B5:4B:7D:3E:05:CC:DD:86:3D:98:8A:A4:74:66:1A:0B:5D:6B:D5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YbVLfT4FzN2GPZiKpHRmGgtda9U.roa
Signing time: Thu 15 Sep 2022 02:36:14 +0000
ROA not before: Thu 15 Sep 2022 02:36:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61B54B7D3E05CCDD863D988AA474661A0B5D6BD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:9e:11:59:8b:0a:4d:c0:25:97:98:c9:69:
4d:3f:a7:e5:85:1c:11:62:a1:74:74:d0:aa:47:c1:
67:e1:41:b6:e6:bf:49:b8:90:1a:9b:4e:99:5f:a7:
f9:7c:2c:7e:0e:e0:f6:ab:a6:e0:18:70:1b:81:52:
bf:40:b4:f3:39:64:9e:2f:76:c5:88:fb:7b:84:75:
f4:2a:52:cf:3b:14:4b:83:9b:23:93:c3:81:50:91:
4b:aa:7b:47:ba:7e:92:f5:3a:a9:b2:d4:cf:13:74:
a7:a8:ef:cc:17:fd:ef:16:23:70:8a:64:b2:50:ac:
90:52:55:a3:2e:82:c1:c8:57:cf:62:ce:44:f1:99:
ad:74:b0:f3:35:ac:15:21:80:4f:35:1f:2d:b6:51:
b3:22:c8:e9:21:58:80:e8:a0:8a:68:58:71:75:f4:
44:e1:3a:b8:27:e8:6c:d2:b2:db:ea:f6:51:9b:b7:
7d:db:ba:48:b7:e0:59:50:df:3e:a9:9f:fe:5b:3e:
18:3c:c7:82:dc:68:e1:45:97:a8:7d:f0:cf:69:6c:
5a:06:43:4c:5c:26:b4:69:69:aa:49:f1:ad:c6:4f:
4a:11:58:3c:db:76:65:4e:35:6c:fb:c3:79:fc:56:
32:aa:c4:08:d0:a4:28:12:8f:21:ee:2c:aa:bd:f6:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:4B:7D:3E:05:CC:DD:86:3D:98:8A:A4:74:66:1A:0B:5D:6B:D5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YbVLfT4FzN2GPZiKpHRmGgtda9U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.232.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:c5:80:ca:47:3b:86:05:cb:8e:07:45:13:99:f3:22:fa:1f:
08:dc:41:e4:44:a0:90:cd:4f:93:8d:34:6f:d8:e0:13:73:0b:
68:92:4d:29:91:ba:52:3f:ef:3c:cc:2b:08:10:7b:82:bb:29:
55:55:cf:86:cb:20:bc:40:76:a6:aa:c1:b1:24:13:94:eb:a5:
ef:1a:bf:bf:11:b3:21:94:41:17:59:e3:7a:34:ff:d4:09:27:
3c:62:71:16:f0:da:fc:5f:9d:b3:27:1d:ba:d9:b4:49:dc:09:
8a:73:60:da:b7:e2:46:c0:8e:cb:b3:38:0d:c6:44:3e:97:2c:
59:d4:e1:b2:56:9d:f4:e2:91:cf:a4:db:9c:0c:94:27:c0:55:
1e:be:4a:e3:16:4e:1a:7c:8a:b5:ee:c9:cd:e4:91:1b:0e:a8:
95:53:ee:96:d9:b1:6d:4e:22:d5:01:0f:03:30:9b:bf:e9:45:
0c:1e:17:d1:f7:e8:a6:04:ea:fa:d5:09:b5:41:1c:98:48:36:
7e:c6:e1:a4:cb:b7:c7:80:c3:85:ca:5c:d4:02:52:2e:65:e9:
83:c1:a8:b0:5a:f1:3e:90:eb:d9:bf:41:db:81:56:fb:9a:24:
72:d4:15:db:75:e6:05:2f:89:d8:71:c6:e9:b9:c5:68:dd:05:
27:01:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org