Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iEB7gXlqv0CvY5KKsK56Uyi1448.roa
File: iEB7gXlqv0CvY5KKsK56Uyi1448.roa (raw, json)
Hash identifier: lVC5DCKAAJ0TvFjqOSQPd7sMhJmt+1TL6pQdBzlvjgI=
Subject key identifier: 88:40:7B:81:79:6A:BF:40:AF:63:92:8A:B0:AE:7A:53:28:B5:E3:8F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AA0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iEB7gXlqv0CvY5KKsK56Uyi1448.roa
Signing time: Fri 16 Dec 2022 04:14:13 +0000
ROA not before: Fri 16 Dec 2022 04:14:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.212.0/27 maxlen: 27
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6816 (0x1aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 16 04:14:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=88407B81796ABF40AF63928AB0AE7A5328B5E38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:50:90:13:0c:37:a3:d6:03:06:3c:03:04:
ce:7b:1a:db:20:b5:e2:a0:7b:53:4d:e8:4b:e7:21:
f7:b3:8e:3e:14:c3:87:c1:e6:2f:bc:df:b6:71:dd:
02:70:7b:c9:94:79:20:14:0b:74:09:19:b6:64:67:
c8:01:22:07:ef:8d:25:3b:63:cd:b8:68:78:8c:4d:
7e:8c:21:ff:30:22:8c:e9:9a:ea:8e:b6:0b:e6:eb:
12:74:5d:04:1d:ae:a3:04:5a:52:9a:63:85:7d:5a:
e7:5c:57:fc:dd:54:6f:18:04:3b:bc:d9:4d:12:88:
6e:f8:7f:8f:1e:9f:2d:b1:c0:25:6b:77:0f:a0:9c:
82:9b:98:29:eb:76:d0:cf:33:bf:d9:63:89:ee:34:
49:45:ff:57:94:48:cc:be:0e:7d:16:ee:2c:ef:29:
73:dd:57:a5:a6:89:bf:22:fe:2f:2c:81:60:78:9d:
9f:b4:f2:29:90:d5:29:f1:09:b2:cd:48:75:bf:82:
54:e4:a4:00:ef:d2:0c:99:ca:5d:80:69:79:e4:87:
07:df:0e:a2:6f:ed:67:7d:16:30:49:04:12:f8:d5:
a0:17:9d:f0:c3:f5:1e:56:f8:fa:a3:2a:82:73:a2:
86:59:34:8f:31:c3:91:37:7f:6a:ae:ca:bd:3f:96:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:7B:81:79:6A:BF:40:AF:63:92:8A:B0:AE:7A:53:28:B5:E3:8F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iEB7gXlqv0CvY5KKsK56Uyi1448.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.212.0/27
Signature Algorithm: sha256WithRSAEncryption
a0:67:7f:56:4c:e7:9a:56:58:30:b2:ac:da:c8:50:32:52:0e:
04:75:c7:fc:db:42:75:a2:eb:62:4f:ea:ac:a6:89:35:a9:6f:
f6:ca:c9:93:2d:bd:f8:2b:ca:a3:f9:38:d5:6e:b5:5e:a0:44:
4f:6e:1d:fe:40:96:6e:a4:ea:b1:3b:dd:d6:a9:cd:5a:63:36:
e5:a0:bd:aa:56:eb:6b:71:73:cd:97:7d:1f:ff:c7:a0:bc:bf:
0e:ea:14:44:46:30:2e:a5:f3:b7:04:b4:53:9d:76:05:4d:55:
55:09:c2:30:b8:28:b5:e0:2b:ee:c1:c8:a0:17:ee:60:66:25:
f1:6b:4b:9b:71:15:fc:c6:cf:eb:c6:8b:8b:46:93:b2:b7:29:
d9:34:5a:60:40:e9:06:1f:56:8f:53:7c:76:67:c5:db:11:7c:
bd:e7:05:dd:40:34:63:43:03:06:71:1b:75:f3:1c:8a:6b:48:
a1:fd:00:cd:d8:44:f0:09:38:89:52:8b:2f:8b:38:cf:e6:45:
59:43:34:78:91:e3:2b:35:9c:c1:79:2f:d9:1e:ce:59:c0:5e:
98:8d:95:b8:01:ed:96:a8:c7:3f:fc:fc:81:f3:24:e4:0d:44:
65:a2:8d:e1:66:7d:7b:a9:e3:73:68:c8:aa:5a:5c:39:ff:53:
4a:ca:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org