Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCyDK9z2VRXcUlDo-Gbd56L-m8Y.roa
File: mCyDK9z2VRXcUlDo-Gbd56L-m8Y.roa (raw, json)
Hash identifier: YTcV9pvILo8Gom2m/C9BMP/MwT9PZHqDHStUVRj3x+c=
Subject key identifier: 98:2C:83:2B:DC:F6:55:15:DC:52:50:E8:F8:66:DD:E7:A2:FE:9B:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A0C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCyDK9z2VRXcUlDo-Gbd56L-m8Y.roa
Signing time: Sat 22 Oct 2022 06:16:53 +0000
ROA not before: Sat 22 Oct 2022 06:16:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6668 (0x1a0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:16:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=982C832BDCF65515DC5250E8F866DDE7A2FE9BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:24:56:47:b4:01:e4:a7:7f:5c:9c:1e:55:
60:6d:53:44:dd:62:88:fa:de:c9:25:21:71:fd:ea:
b3:59:e6:cc:43:ee:cc:df:3b:f0:cc:1f:6b:12:63:
34:46:29:13:55:b0:d2:74:fb:53:6d:4a:93:2d:a6:
60:ee:8c:de:ef:4a:c2:49:19:83:58:53:50:77:82:
d3:2f:6f:a5:c9:58:77:80:c2:03:4e:f0:db:64:14:
3e:50:eb:b4:ab:ea:76:41:05:6d:e8:27:9a:c6:9f:
17:97:48:3f:dd:3e:b4:cb:12:b6:7c:e6:9e:00:95:
00:34:43:fe:e4:ad:bc:ef:0c:2d:3e:dd:e9:a0:ea:
9c:f5:36:f8:ff:93:22:3e:77:22:33:1a:c5:1c:9c:
54:b2:b1:aa:b2:5c:18:72:43:ec:cf:2c:cb:19:92:
3a:ff:41:82:7f:62:6d:e7:24:0d:a2:0b:a6:8b:f2:
7e:da:08:54:12:b0:b2:5d:b9:dc:e9:92:4d:9e:a3:
9d:18:af:d6:b9:2b:16:52:02:32:3e:01:81:e9:72:
f7:8c:be:05:fd:08:2d:76:8e:74:8e:b1:e1:70:99:
b8:63:e7:be:9e:29:5a:5a:38:ce:05:c5:9c:e5:ec:
ef:0f:50:f1:8e:89:99:f1:f0:ae:cf:9c:a4:ef:4b:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:83:2B:DC:F6:55:15:DC:52:50:E8:F8:66:DD:E7:A2:FE:9B:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mCyDK9z2VRXcUlDo-Gbd56L-m8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.220.0/22
Signature Algorithm: sha256WithRSAEncryption
15:ab:cb:81:3f:c7:84:e1:48:66:2a:1c:7c:06:8e:f2:a6:e9:
e6:de:4d:b1:cc:b7:24:10:c7:d9:72:e9:bb:f1:d4:83:d4:cb:
3d:4e:86:68:47:a3:87:67:60:85:88:4c:3b:60:f3:fc:1d:c6:
04:82:76:80:06:df:4a:8d:98:a4:a3:fd:72:c2:9a:87:75:ed:
09:08:a0:a6:28:5e:10:1f:e0:4a:ea:2a:c8:8e:41:dc:66:49:
da:8f:17:38:0d:ce:f1:da:e9:01:69:62:a5:47:a8:f8:dd:1c:
9b:73:f8:06:bc:b2:d9:f0:35:4a:78:22:c9:56:b1:60:14:02:
aa:59:dd:75:4a:be:1d:30:51:58:14:2b:20:f1:04:99:d1:27:
8e:25:2f:6b:6f:c4:ce:e8:f3:27:98:7a:c3:cb:51:87:67:e1:
ce:1e:d0:a9:0c:ea:22:b9:8c:42:4c:e0:88:31:63:b8:bd:32:
f4:c1:ce:d5:e8:0c:3e:be:ed:e7:89:63:33:b9:30:56:30:e6:
da:4c:69:32:9f:d2:bf:7d:ba:1f:79:d4:29:9a:80:a8:19:6d:
54:05:af:b6:bb:da:5d:3c:71:8a:4a:d9:98:58:65:c6:30:e7:
9a:3a:b1:b3:18:d5:e2:43:5b:cd:c0:37:3b:cf:05:b8:82:b3:
ac:41:82:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE2NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk4MkM4MzJCRENGNjU1
MTVEQzUyNTBFOEY4NjZEREU3QTJGRTlCQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPCyRWR7QB5Kd/XJweVWBtU0TdYoj63sklIXH96rNZ5sxD7szf
O/DMH2sSYzRGKRNVsNJ0+1NtSpMtpmDujN7vSsJJGYNYU1B3gtMvb6XJWHeAwgNO
8NtkFD5Q67Sr6nZBBW3oJ5rGnxeXSD/dPrTLErZ85p4AlQA0Q/7krbzvDC0+3emg
6pz1Nvj/kyI+dyIzGsUcnFSysaqyXBhyQ+zPLMsZkjr/QYJ/Ym3nJA2iC6aL8n7a
CFQSsLJdudzpkk2eo50Yr9a5KxZSAjI+AYHpcveMvgX9CC12jnSOseFwmbhj576e
KVpaOM4FxZzl7O8PUPGOiZnx8K7PnKTvS3z9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmCyDK9z2VRXcUlDo+Gbd56L+m8YwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL21DeURLOXoyVlJYY1VsRG8t
R2JkNTZMLW04WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdwwDQYJKoZIhvcNAQELBQADggEBABWry4E/x4ThSGYqHHwGjvKm6ebeTbHMtyQQ
x9ly6bvx1IPUyz1OhmhHo4dnYIWITDtg8/wdxgSCdoAG30qNmKSj/XLCmod17QkI
oKYoXhAf4ErqKsiOQdxmSdqPFzgNzvHa6QFpYqVHqPjdHJtz+Aa8stnwNUp4IslW
sWAUAqpZ3XVKvh0wUVgUKyDxBJnRJ44lL2tvxM7o8yeYesPLUYdn4c4e0KkM6iK5
jEJM4IgxY7i9MvTBztXoDD6+7eeJYzO5MFYw5tpMaTKf0r99uh951CmagKgZbVQF
r7a72l08cYpK2ZhYZcYw55o6sbMY1eJDW83ANzvPBbiCs6xBgks=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org