Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aiPdliuPki5-9EojaipRPGYx0WU.roa
File: aiPdliuPki5-9EojaipRPGYx0WU.roa (raw, json)
Hash identifier: Mc4AOHcKWWkhvA5xabaN3MtGXmB/WP8qjlr1ngTFNM8=
Subject key identifier: 6A:23:DD:96:2B:8F:92:2E:7E:F4:4A:23:6A:2A:51:3C:66:31:D1:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aiPdliuPki5-9EojaipRPGYx0WU.roa
Signing time: Thu 15 Sep 2022 02:36:29 +0000
ROA not before: Thu 15 Sep 2022 02:36:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A23DD962B8F922E7EF44A236A2A513C6631D165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:ed:b4:c7:f6:c8:53:ec:ee:74:d5:00:10:
d4:66:42:0a:eb:3e:90:3e:e6:71:c9:af:d4:02:b3:
83:85:af:ee:3c:83:8e:c6:8c:3b:5b:88:d1:d2:05:
60:8b:ce:ea:45:76:50:55:df:52:46:8b:da:f4:24:
03:8e:ba:ef:3d:34:e0:17:b0:39:8a:5f:81:65:0a:
f4:3c:d9:dd:ec:3d:84:41:4c:b1:95:1f:92:65:83:
da:c8:a6:d7:d6:37:ba:1b:d3:77:b1:a8:90:08:7c:
23:34:82:5e:d0:82:a3:ab:6f:0c:10:b1:1a:7d:3d:
25:58:42:ee:6f:d2:5c:71:de:a6:de:a2:fb:09:eb:
7d:32:8c:4d:d9:ec:18:4f:df:54:ad:28:48:e7:ce:
cb:c0:fd:84:21:a2:d7:18:cc:ff:29:ca:21:a7:41:
7a:cb:7a:d9:ae:94:6d:c3:58:3f:69:ea:40:95:2b:
0e:a7:1a:4e:45:7b:d1:14:de:31:9e:3a:9b:53:35:
da:1b:08:cf:4d:aa:e7:51:00:7f:ce:8c:9d:fb:f7:
3d:1f:45:00:2f:97:2a:3a:b8:7d:54:1e:1b:b1:43:
d1:47:53:23:23:7b:2a:3c:4c:a5:5a:d6:ff:6e:53:
01:64:09:30:39:19:2f:7d:13:4d:33:97:3e:6d:3c:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:23:DD:96:2B:8F:92:2E:7E:F4:4A:23:6A:2A:51:3C:66:31:D1:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aiPdliuPki5-9EojaipRPGYx0WU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/22
Signature Algorithm: sha256WithRSAEncryption
80:eb:66:94:77:94:aa:b9:5b:90:05:23:4b:95:e8:2b:de:3b:
07:db:70:1e:eb:38:b6:64:2c:e0:ca:8f:0e:29:69:97:2d:57:
59:5a:36:11:bd:c9:96:c0:72:17:75:35:47:a8:d9:be:99:c1:
0e:cc:9e:1e:d1:51:1f:03:95:5d:ae:06:da:13:8f:b9:56:28:
c6:67:d9:1f:40:ce:91:8e:d0:5b:15:ff:49:55:e1:89:78:d7:
a4:10:c3:36:05:3d:c4:45:44:f9:bf:3e:bc:01:0a:6e:59:8d:
93:5e:b1:b5:65:cd:31:1d:24:fc:c4:ef:b0:b2:83:af:92:18:
31:22:11:56:b7:81:29:85:a0:89:2a:12:aa:c9:f5:fc:e5:74:
ba:be:4d:de:42:5e:ba:37:4d:79:57:56:fd:9a:e1:45:71:f5:
8c:63:b2:38:85:e1:c2:60:da:46:c4:86:76:e8:4c:73:d7:0f:
02:17:7e:69:e7:66:2f:e0:7b:03:1d:0e:36:99:5c:1a:ee:8c:
e8:3e:48:0d:d3:fa:63:63:92:0c:f1:66:96:ee:17:f3:af:79:
68:a3:9c:91:07:bd:17:3a:62:e7:e1:d9:d6:4f:7a:2a:b1:48:
8e:e3:35:32:27:0c:7f:12:a1:87:35:77:eb:62:28:40:00:62:
1d:2a:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org