Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kmiCetynRn8w20ambioJcep2yLw.roa
File: kmiCetynRn8w20ambioJcep2yLw.roa (raw, json)
Hash identifier: tHk7tERU8SN5XjsrJ4xmJ4axsCgdo3uJWMTD8njMaS0=
Subject key identifier: 92:68:82:7A:DC:A7:46:7F:30:DB:46:A6:6E:2A:09:71:EA:76:C8:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kmiCetynRn8w20ambioJcep2yLw.roa
Signing time: Thu 15 Sep 2022 02:36:31 +0000
ROA not before: Thu 15 Sep 2022 02:36:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.64.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9268827ADCA7467F30DB46A66E2A0971EA76C8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:c4:e1:fb:da:5c:9f:76:06:53:c4:37:5d:
e6:a9:43:03:ea:c1:53:a0:1e:2d:76:e2:d7:2e:17:
05:51:10:bf:e1:5a:f9:bf:b1:99:ab:b1:6b:37:34:
47:d3:3f:b2:7a:e9:be:d2:95:2e:fb:ac:ab:8b:67:
e1:12:d3:36:ef:e8:72:cf:6a:47:0b:5c:f1:bb:ce:
f6:4b:0a:48:1a:1a:0b:41:b5:59:51:85:f3:33:09:
70:be:45:bc:f8:c0:7f:fe:4b:a5:3b:71:72:38:72:
cd:7d:c1:cb:41:a9:77:cd:ce:ff:40:6d:b8:a4:fa:
83:25:11:ab:2f:30:4f:8d:d7:6c:3a:2c:49:6c:e9:
14:2c:6d:1c:6a:26:46:5d:28:02:de:71:6f:e3:56:
2a:39:25:4f:5a:77:f9:76:6f:05:bd:93:d3:67:1e:
29:a6:91:0c:d7:8a:7e:97:87:30:7c:9f:ae:db:ca:
1d:29:1d:f0:23:52:17:f2:f2:a6:c9:7e:4b:12:ab:
f6:aa:be:23:6e:7d:ec:2e:ce:3b:34:84:4c:cc:e2:
8a:75:d1:4f:0f:7f:19:38:9e:74:57:79:5c:f9:68:
d4:ef:16:bf:e7:3b:ff:27:8f:03:ce:e3:6f:1e:ac:
7a:3e:37:39:77:d8:2e:a1:e1:f3:5d:00:92:58:c3:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:68:82:7A:DC:A7:46:7F:30:DB:46:A6:6E:2A:09:71:EA:76:C8:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kmiCetynRn8w20ambioJcep2yLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.4.0/22
Signature Algorithm: sha256WithRSAEncryption
56:bf:ad:a5:31:e6:bd:8f:89:78:ae:11:54:98:73:73:e5:95:
e4:88:02:4e:39:b3:8a:ef:c2:22:25:38:66:d2:7c:00:f0:e3:
f5:a8:f8:2c:2f:d8:79:e2:23:82:1e:7e:1f:93:9f:b7:44:de:
4d:f9:54:bc:f1:87:a0:4f:1f:de:9a:28:28:4a:6e:10:09:d5:
c7:f6:5f:24:2a:b0:6f:d0:b2:42:0a:d2:3d:2d:b7:32:4f:3e:
fc:f1:37:c5:97:c4:c4:ce:97:04:ec:61:4e:1f:ca:23:e6:43:
71:c6:ad:64:d3:32:4e:7e:2a:bc:de:16:b8:c4:bd:1c:66:fa:
2e:bf:48:ec:0c:56:73:c8:59:d4:c3:7b:57:c9:15:42:a4:39:
53:55:17:9d:a5:02:15:97:4f:dc:85:ef:b5:09:07:ba:4d:cd:
e3:64:27:48:6d:04:bc:3a:5e:93:c3:9e:c7:fe:ce:e1:5c:68:
ab:42:c9:fa:e7:5f:62:ad:f6:8e:77:b0:27:65:02:b2:45:10:
f4:08:2e:96:41:1e:ae:d8:cc:04:e6:63:54:f0:7e:b1:76:ce:
71:88:6f:d4:f1:42:bb:fb:01:82:31:4f:d7:02:4d:e2:b3:03:
8c:45:81:69:2e:e6:9d:ad:93:70:76:9a:31:5d:8b:83:ce:73:
61:78:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org