Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_t5rQ0wk4P0ODmC4rn5cJU5yjDU.roa
File: _t5rQ0wk4P0ODmC4rn5cJU5yjDU.roa (raw, json)
Hash identifier: YO6CLZ6loEUukBRdr3Z7SvNWrPgIqoF8wCDQrlYTXNU=
Subject key identifier: FE:DE:6B:43:4C:24:E0:FD:0E:0E:60:B8:AE:7E:5C:25:4E:72:8C:35
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_t5rQ0wk4P0ODmC4rn5cJU5yjDU.roa
Signing time: Thu 15 Sep 2022 02:36:19 +0000
ROA not before: Thu 15 Sep 2022 02:36:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.60.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FEDE6B434C24E0FD0E0E60B8AE7E5C254E728C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:b3:b2:44:f2:5e:6e:95:bc:61:c9:60:22:
26:19:34:04:63:fb:54:a0:74:3e:07:27:1d:2a:10:
e3:c4:2a:53:6e:8a:42:a7:6f:f7:39:4f:1b:e4:ef:
df:2c:51:da:4c:12:2d:b5:59:39:1e:40:c8:de:61:
b8:80:8f:43:8d:80:9f:93:1a:50:1a:37:1d:6f:49:
82:5c:c9:d2:73:aa:da:5a:22:63:33:5b:af:94:8b:
07:23:23:86:f6:26:69:d5:07:55:04:97:52:e5:46:
ca:fe:6d:c0:e2:83:64:fe:91:bf:17:b8:10:68:b0:
5b:91:7d:78:18:33:b3:6f:81:81:6f:dd:15:92:90:
03:92:ac:45:02:7a:0b:5a:16:1b:3f:55:a8:c5:2f:
e4:76:f5:ca:44:4a:92:cf:2f:97:d9:f4:21:c3:ad:
5f:8e:28:c5:8b:1b:d4:28:90:e0:55:56:28:a0:e8:
1e:3a:ad:69:45:2d:e8:87:64:a9:ba:6c:80:11:66:
03:da:71:34:da:71:62:b5:68:6d:ce:9f:aa:c6:c5:
ea:e7:10:0e:de:e2:e9:0b:fe:94:e2:a4:76:71:e0:
b7:d1:b2:1f:54:1b:ed:03:d2:35:ee:22:a2:62:c7:
1c:87:74:05:40:5c:9b:6c:5d:87:88:7f:3d:28:0d:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DE:6B:43:4C:24:E0:FD:0E:0E:60:B8:AE:7E:5C:25:4E:72:8C:35
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_t5rQ0wk4P0ODmC4rn5cJU5yjDU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/20
Signature Algorithm: sha256WithRSAEncryption
73:fa:e0:ce:1f:07:b5:d5:db:6e:a8:1e:ea:ce:48:4d:d2:44:
64:17:d6:4a:2b:f7:ec:4e:24:fe:17:5d:38:53:f0:fe:d4:8a:
5b:cb:8c:d4:1f:6b:3c:a3:cb:46:d9:8c:d7:59:98:80:b5:b8:
f0:02:fb:8d:46:9c:89:a9:59:db:d5:21:fa:e2:1c:15:0b:56:
15:72:79:47:10:93:4a:2d:56:83:7a:0d:a1:28:4a:ab:fc:f6:
8c:ce:ba:8f:a1:8e:91:8c:9b:bb:b4:20:94:8e:b7:02:9f:39:
4c:12:66:f6:5f:81:f9:aa:de:fe:ef:6a:df:65:df:89:40:d4:
7e:a3:fb:ee:82:f7:f9:18:b2:81:8b:f6:5c:86:68:d1:c7:56:
e5:b0:bb:40:51:f6:93:a9:f5:06:dd:51:82:52:4b:03:29:bb:
8e:ed:09:e9:8f:98:62:11:8c:a7:1d:9a:5d:5a:fa:c6:28:53:
59:43:30:f7:cb:65:21:ac:27:6d:c2:71:9c:a0:99:2b:60:0b:
bf:51:1a:da:6a:c5:a2:04:49:32:40:3d:57:47:4a:34:4f:02:
41:89:1f:50:ea:9c:f8:5d:55:13:96:0a:b5:e9:f8:cb:de:20:
55:cc:e7:33:b9:2c:17:4b:a7:d0:2a:8f:29:30:61:c6:bd:bb:
fb:5e:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org