Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCAmMGlzTHV4QNMaFLFO6Ezc7Ao.roa
File: lCAmMGlzTHV4QNMaFLFO6Ezc7Ao.roa (raw, json)
Hash identifier: 26yx47jxBx8B9PAZXa+VAK3QgsJ8OwPOD1Qt5KWNQdA=
Subject key identifier: 94:20:26:30:69:73:4C:75:78:40:D3:1A:14:B1:4E:E8:4C:DC:EC:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B2D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCAmMGlzTHV4QNMaFLFO6Ezc7Ao.roa
Signing time: Tue 07 Feb 2023 08:02:17 +0000
ROA not before: Tue 07 Feb 2023 08:02:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6957 (0x1b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 08:02:17 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9420263069734C757840D31A14B14EE84CDCEC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:b7:dc:68:64:4e:4c:a8:2a:da:76:32:98:
cd:01:dd:a6:57:d7:ff:d6:ac:74:29:2e:6c:73:52:
ee:40:04:37:53:d8:99:55:ff:23:39:08:4b:dd:2e:
a9:5f:39:be:1f:14:46:0a:8a:bb:66:3c:be:13:4a:
4a:9b:36:55:64:aa:e2:d9:55:ee:53:11:e1:7e:01:
2d:e4:5c:d7:af:1e:59:18:b7:7b:ec:dd:d0:be:a5:
59:77:7e:d4:c8:12:13:fb:c3:08:84:f2:e3:21:e4:
c6:bf:43:22:95:b7:34:79:e2:a4:64:7b:83:d0:9e:
1c:fc:43:63:57:46:1f:4e:30:46:62:f2:5f:fe:cc:
19:81:ec:25:c2:47:80:4d:b4:d0:12:ac:ed:b7:2b:
07:40:59:0f:66:d3:55:97:98:59:ee:79:62:42:ed:
32:55:ca:55:98:91:97:60:d0:91:57:74:b8:a0:43:
66:2b:91:38:e2:5b:5c:2a:f6:fc:d4:f5:40:7c:da:
54:18:60:30:75:db:2c:91:c7:6c:72:64:c3:3b:41:
af:87:02:7c:73:a6:ae:96:6c:49:3d:04:dc:a7:38:
ee:e0:df:a6:82:d2:d8:64:8e:20:97:4d:1c:6a:c0:
8e:e3:80:16:a0:57:d1:67:28:14:8c:d6:36:49:d1:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:26:30:69:73:4C:75:78:40:D3:1A:14:B1:4E:E8:4C:DC:EC:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lCAmMGlzTHV4QNMaFLFO6Ezc7Ao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:c0:37:d9:4d:0d:e3:53:e1:71:74:5b:1b:c3:70:16:c1:72:
3f:e2:f1:72:5b:fc:57:ce:75:be:cf:c4:41:30:a4:8a:0a:dd:
0b:19:73:da:0b:03:10:c9:bf:cd:35:e4:d9:9e:7d:80:31:3c:
a2:00:69:f7:90:6a:b4:63:6d:da:86:1b:09:86:1d:f0:f6:ec:
27:43:f2:df:f2:30:d8:83:01:f6:36:ff:2a:6a:a1:ed:80:1d:
f7:47:7d:e1:f9:3e:d2:a7:7f:82:73:85:f9:3b:85:2c:24:dc:
84:73:1d:50:7b:9f:6c:ba:90:a0:b4:a7:4f:bc:1b:20:83:5a:
37:5f:c1:07:55:27:63:97:8c:c8:0b:2f:bc:10:16:d6:ec:bf:
78:cf:d0:c6:d0:df:56:5f:8f:bf:28:ef:80:70:87:57:9b:62:
63:e0:c1:c1:0d:35:f9:d9:87:e4:1f:9e:3b:a8:66:b5:e2:a1:
dd:8b:e9:85:3b:97:67:29:cd:82:10:8f:14:83:9b:4c:74:fd:
b4:c6:7f:a6:a7:bf:61:0c:89:36:07:42:2f:fd:d8:19:f0:f1:
f3:51:08:6f:74:83:c2:92:12:b6:e2:ed:65:71:49:9e:d0:3e:
90:4c:b8:5e:63:b1:55:45:11:2f:12:cb:22:14:ad:00:f1:c6:
f9:dc:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org