Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iab2IrtHPoGFkSPFwsdmvfWXL8Y.roa
File: iab2IrtHPoGFkSPFwsdmvfWXL8Y.roa (raw, json)
Hash identifier: EKQkK6F6ybDVpAfelsBXJUOHyqrfGg7ny0vVljr5nKM=
Subject key identifier: 89:A6:F6:22:BB:47:3E:81:85:91:23:C5:C2:C7:66:BD:F5:97:2F:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1965
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iab2IrtHPoGFkSPFwsdmvfWXL8Y.roa
Signing time: Sat 22 Oct 2022 06:06:29 +0000
ROA not before: Sat 22 Oct 2022 06:06:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 211.76.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6501 (0x1965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=89A6F622BB473E81859123C5C2C766BDF5972FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:b0:90:f7:57:49:98:3b:ba:e9:5b:9d:6e:
cb:74:a0:07:c5:32:9f:e5:e4:9b:16:3d:d2:fb:86:
c7:bc:d7:70:b6:a2:69:2d:3c:92:2c:88:ac:7d:88:
39:30:d4:60:87:02:22:36:76:e8:73:e0:54:94:ec:
5b:e6:b2:d2:51:2a:b3:b2:a8:f8:3e:99:9e:c9:61:
42:ca:13:6b:74:b4:f7:8b:95:17:e4:7a:58:04:de:
21:9e:4f:3d:d4:60:c9:df:ff:e3:21:83:8f:70:70:
10:29:fd:9b:69:5b:c4:84:ac:cc:18:36:97:48:8f:
82:5d:e7:0c:45:7f:42:73:aa:d8:43:84:70:19:bb:
f3:b6:25:83:05:e2:0b:bd:31:d3:58:78:ee:9b:a4:
82:64:ba:87:da:69:7d:8e:1e:51:03:a0:26:c2:de:
6a:4a:6b:f0:fc:21:a1:65:69:20:d3:93:51:be:1d:
a2:a0:dc:e2:fd:c2:09:25:da:e4:3b:2a:b9:39:30:
ef:7a:2c:a0:ea:3e:a4:21:d3:2c:f1:d3:5d:5d:05:
a8:27:cd:56:d8:e1:83:1d:c0:81:d7:99:e6:12:95:
20:e1:cd:2c:31:9d:91:24:10:df:40:42:04:86:12:
2a:64:5c:cc:68:bb:a9:13:b1:df:28:6f:b6:9c:1c:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:F6:22:BB:47:3E:81:85:91:23:C5:C2:C7:66:BD:F5:97:2F:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iab2IrtHPoGFkSPFwsdmvfWXL8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
22:9a:2b:17:70:ae:11:86:d6:3f:8f:60:5b:bb:49:eb:0f:f3:
0f:3e:fe:e0:78:6a:aa:f8:36:be:4d:8e:b9:9b:04:40:5d:a0:
7a:1c:5f:25:1d:48:48:67:55:c1:21:28:a3:d4:cf:35:07:3e:
c9:6e:58:f3:7f:f9:42:9b:69:e3:ac:24:2c:1d:58:9a:b2:f6:
d5:dd:13:16:23:dc:e2:01:1f:33:b1:99:88:a1:3b:d3:59:37:
09:47:98:1e:30:f7:8f:1e:fc:7a:d9:83:7a:a1:1b:ad:48:66:
1f:63:ba:21:ca:30:97:3e:09:14:84:31:64:25:1d:04:a8:09:
27:e0:fc:cd:7a:3a:de:0a:fd:0f:2c:76:e6:0e:15:49:45:90:
ef:b3:7e:ce:af:fc:4a:e5:59:de:b7:d7:01:53:83:2f:b8:0d:
17:ed:47:a0:ad:ea:14:66:21:30:26:ef:9e:2f:f9:63:ad:5c:
9e:77:b7:38:5c:9e:25:0d:0a:30:97:a2:e3:5a:46:40:48:8f:
0b:2d:f9:71:72:88:f9:7e:b2:15:39:d2:26:78:42:03:e0:9f:
03:1c:51:bb:b4:34:3f:ff:0a:41:7c:9a:65:1d:e2:d0:d4:c8:
e8:ff:6f:4f:ea:c9:05:ef:56:6b:3a:85:50:db:24:17:6e:91:
9f:04:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org