Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Xk133LnbmbWePJfm3JT1_lHbxU.roa
File: _Xk133LnbmbWePJfm3JT1_lHbxU.roa (raw, json)
Hash identifier: H0StmRe55GOd8HeoXpMv4FpXi7YSafNmJV3Tk8kcJX8=
Subject key identifier: FD:79:35:DF:72:E7:6E:66:D6:78:F2:5F:9B:72:53:D7:F9:47:6F:15
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Xk133LnbmbWePJfm3JT1_lHbxU.roa
Signing time: Thu 15 Sep 2022 02:35:54 +0000
ROA not before: Thu 15 Sep 2022 02:35:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD7935DF72E76E66D678F25F9B7253D7F9476F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:1b:50:1f:43:16:df:1c:1e:62:7e:76:fe:
8a:61:79:bd:37:cd:5a:a2:30:db:f3:4f:19:35:73:
01:03:ae:f2:66:8c:cc:b7:63:e9:aa:ae:66:90:8e:
c7:b4:c4:45:3a:9a:38:b7:b3:8c:59:6c:2e:de:0c:
56:89:28:93:f2:6b:b5:42:62:fa:94:cc:2c:d9:61:
9c:f2:43:19:b4:31:91:48:4d:89:c2:d2:6d:bd:2c:
ea:ba:3e:d5:7a:44:ac:6a:dc:5e:1b:d5:8e:9a:5b:
27:8c:7b:95:79:14:bf:6b:ac:22:d6:ef:3a:bf:7c:
33:f9:60:76:12:94:a0:19:66:f4:e1:f4:20:8c:9b:
bb:1b:2b:b0:64:c5:1d:b9:34:a1:f8:63:f4:a4:64:
12:f9:53:8e:c7:bd:98:50:0f:b8:b0:75:d8:5d:8a:
b2:0c:52:7f:e8:44:b9:ef:cf:23:78:b3:aa:76:a2:
a3:11:1f:cb:50:7f:d0:87:f8:70:ec:ed:e2:6f:e9:
7c:67:eb:1a:a3:d0:97:33:cc:10:9d:e1:9e:8b:93:
70:7b:f3:20:bc:2d:8f:4a:52:2d:8e:51:0b:01:9d:
66:ca:e8:b5:6e:66:c6:42:61:0f:cc:c6:93:5c:53:
8e:76:b8:19:39:54:8f:5b:e1:2f:7b:ce:17:0a:28:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:35:DF:72:E7:6E:66:D6:78:F2:5F:9B:72:53:D7:F9:47:6F:15
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_Xk133LnbmbWePJfm3JT1_lHbxU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
60:46:16:35:2d:0c:0a:02:3c:a7:08:ad:6c:9a:21:cc:e3:c0:
23:99:5c:72:ee:e6:92:58:07:2c:90:2c:2f:6b:e8:f6:68:9a:
51:19:69:05:b0:e8:b1:ae:4b:56:f8:21:90:ea:bd:a5:65:0a:
c4:96:40:fe:50:25:5f:61:81:10:be:87:21:da:fb:e2:d7:79:
49:43:93:a8:d8:0f:5a:6f:d3:ed:b9:8f:cd:f3:68:92:86:bb:
cf:6a:e2:bd:4d:e3:a9:2b:17:06:a0:a5:26:3e:1a:d4:8c:c5:
4d:c2:5c:7d:b0:51:74:69:1f:25:9b:4f:82:b7:1f:f1:48:a9:
50:fe:04:21:08:ee:24:8d:0c:7e:aa:2d:4f:8d:ed:ca:c9:d2:
53:7c:36:ff:8c:66:ad:12:da:35:61:72:74:20:e5:b2:dc:c1:
6c:69:20:0e:ea:97:4e:d7:8a:7e:88:e3:46:11:31:2f:e4:d5:
e1:28:33:4f:43:a2:4f:2f:6a:31:86:7a:3b:1a:b9:3b:3a:0a:
1a:75:d8:94:76:82:11:6a:19:9e:0f:74:34:b7:7a:2c:91:49:
10:67:6e:0b:dd:c1:b8:fb:ae:de:64:be:0b:0c:6d:a4:f1:09:
20:16:d7:43:7d:e9:b0:3d:87:fd:cc:ef:bf:37:31:3f:4c:39:
6a:fe:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org