Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKKNrrmeoK1epMTh9C9lOjar7hE.roa
File: cKKNrrmeoK1epMTh9C9lOjar7hE.roa (raw, json)
Hash identifier: SAv40YDO/LfupyF4SKADcy9KeHkOmq3WjNLyE1RoVPI=
Subject key identifier: 70:A2:8D:AE:B9:9E:A0:AD:5E:A4:C4:E1:F4:2F:65:3A:36:AB:EE:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1949
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKKNrrmeoK1epMTh9C9lOjar7hE.roa
Signing time: Sat 22 Oct 2022 06:06:20 +0000
ROA not before: Sat 22 Oct 2022 06:06:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6473 (0x1949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=70A28DAEB99EA0AD5EA4C4E1F42F653A36ABEE11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:2f:ee:75:08:ff:c0:d1:48:e2:39:d9:f2:
ff:7a:ea:89:9a:f0:fe:d7:44:56:7d:3b:27:b7:c2:
ea:0d:9d:7e:27:98:e1:94:6d:6a:ad:c3:bd:b2:54:
d1:ab:50:6f:34:df:b3:26:3a:69:94:3f:97:d1:6c:
3f:1a:1b:9b:f1:fc:c9:21:0b:94:9e:e8:57:73:6f:
64:11:6a:2d:36:b1:74:68:7c:17:8f:86:2a:eb:92:
86:12:13:fa:e2:fb:60:17:e5:c9:47:59:0d:84:dd:
1b:64:25:dc:70:86:ab:0d:21:e6:e9:09:d6:01:25:
ca:61:bb:cd:64:14:27:ed:c4:bd:d9:a0:a1:22:f5:
33:45:9c:01:9a:a2:3c:fa:6f:a6:b8:b2:01:57:26:
b9:a1:8b:df:4f:70:20:7c:69:a9:f9:96:83:05:bb:
3a:77:9a:d7:7b:22:81:2a:ae:34:a7:9f:ad:2b:2a:
8e:91:53:04:80:20:c4:91:6b:12:1b:5e:05:84:d1:
43:ce:ff:4f:f7:dc:67:b9:27:f8:38:bf:fb:f9:ab:
13:df:93:64:02:b0:54:4e:72:6c:a0:e5:2b:58:dd:
c3:f8:9f:29:a5:19:1e:f3:cd:91:d7:0b:f4:61:56:
8d:ea:87:95:1d:06:7f:49:6a:ca:99:43:45:13:99:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:8D:AE:B9:9E:A0:AD:5E:A4:C4:E1:F4:2F:65:3A:36:AB:EE:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKKNrrmeoK1epMTh9C9lOjar7hE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b1:69:62:38:ac:66:58:82:84:0f:26:90:fe:41:52:92:2b:
21:01:a7:83:07:70:ca:ee:b6:b0:02:a1:55:ee:fa:5e:41:bb:
ae:2c:f5:79:85:a1:25:b0:df:d6:35:a9:64:fc:28:16:48:8c:
f5:2e:49:2d:ef:f2:69:af:6e:ca:74:ee:e5:8f:a2:11:8e:d9:
be:40:87:20:c4:ae:85:40:5e:6f:a8:57:25:2d:f6:47:72:5d:
53:bc:5d:2a:b7:76:05:bd:47:8b:20:61:27:88:1f:4e:4f:bc:
f8:a8:70:63:6f:4d:48:58:f4:e6:49:13:a2:b9:0f:1d:5f:d9:
30:df:26:3e:01:b9:70:61:0c:7b:da:82:95:bb:39:50:e6:f4:
68:3b:90:e7:2a:a0:2b:e1:f2:9c:71:51:a5:3a:b1:5d:51:dc:
95:fb:1d:e7:bb:13:65:5c:a5:c9:d2:a2:f3:8e:f3:4a:30:2d:
46:95:94:14:3b:82:e2:f7:78:0e:c3:fd:9a:af:42:f9:73:ec:
d4:16:cc:26:64:e3:56:91:2a:41:16:0a:53:e8:4c:72:07:98:
3f:b8:44:ba:0f:c3:c7:09:3f:4c:ad:15:d1:40:fa:a3:90:81:
62:98:36:3b:bf:ac:21:07:ed:cf:1f:63:20:f2:a6:f8:a8:cf:
51:55:98:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org