Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLM3P1aDLZr89SG7UyyDGlK8Kr8.roa
File: nLM3P1aDLZr89SG7UyyDGlK8Kr8.roa (raw, json)
Hash identifier: byTC0yOICz4SiZytc1xFkAOTblVyTa362bnOVhZkVJc=
Subject key identifier: 9C:B3:37:3F:56:83:2D:9A:FC:F5:21:BB:53:2C:83:1A:52:BC:2A:BF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLM3P1aDLZr89SG7UyyDGlK8Kr8.roa
Signing time: Thu 15 Sep 2022 02:35:37 +0000
ROA not before: Thu 15 Sep 2022 02:35:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9CB3373F56832D9AFCF521BB532C831A52BC2ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fc:49:eb:7e:be:7b:82:93:72:e3:fb:01:bc:
90:f0:fc:ee:35:19:a5:9d:da:78:3a:5b:fb:b2:a0:
36:ac:6b:63:96:12:95:ac:67:23:be:69:c8:3b:af:
74:62:56:57:42:bd:4d:81:b9:ac:f6:cf:ac:da:7c:
bc:d1:03:4d:42:e5:02:40:50:54:a1:b9:60:c2:b9:
ca:01:c2:ab:99:be:78:53:6d:bf:78:75:33:dc:7f:
8a:5b:b8:d4:7a:eb:36:8e:b9:d5:df:4b:57:55:54:
51:48:77:c9:24:3e:23:b8:5c:91:32:1f:03:cb:da:
16:b6:d5:6b:30:94:27:a9:60:46:97:3d:16:d1:cc:
4d:98:22:5d:06:10:fa:a0:ee:54:9b:11:26:69:53:
c2:1b:88:06:6e:e5:5d:06:9c:d3:73:0d:f0:53:bd:
cb:b9:15:a9:9c:86:51:b5:0c:aa:fd:44:37:fd:28:
04:4e:c7:aa:4b:79:11:8d:d8:f8:99:2b:f0:4d:98:
6f:22:6d:9c:6d:b4:b1:2a:69:e6:45:e3:6f:c6:49:
bf:8e:e2:31:2e:8b:53:41:f7:f3:f1:61:9f:16:a5:
02:c6:6d:76:2f:c8:22:09:56:fa:61:89:96:b4:39:
9d:8f:fc:02:9e:91:1c:4a:2f:bb:74:21:5a:db:7b:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:37:3F:56:83:2D:9A:FC:F5:21:BB:53:2C:83:1A:52:BC:2A:BF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLM3P1aDLZr89SG7UyyDGlK8Kr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:5d:87:bd:c6:8b:58:0c:a0:15:d7:ab:8f:22:39:e3:96:32:
ea:0b:f0:4d:fa:c6:01:d7:7c:36:e1:dd:cd:24:cc:10:d7:db:
e9:8d:db:7d:ab:58:bc:2e:d3:36:31:63:7a:38:46:71:3b:2c:
a5:4a:b3:59:12:a5:97:1c:d6:23:41:37:c0:92:a9:39:64:10:
c8:ee:43:75:c5:a4:21:df:02:07:17:15:7d:5b:c9:b8:50:7c:
66:3d:51:20:bd:91:7c:c4:4c:e2:26:fb:9c:dd:3d:46:0c:cb:
58:f9:76:85:2d:8a:40:20:22:7a:92:03:3e:e1:99:6b:fb:18:
f0:de:8a:65:86:c1:91:4e:9b:7e:3c:ed:70:c2:f2:4e:67:99:
55:76:61:0a:df:a0:a0:cd:95:91:fc:3a:ff:9c:4f:1a:f6:b0:
47:84:a8:c2:be:e5:9b:f1:0a:b5:83:bd:07:ea:e3:10:6c:d9:
40:db:73:ea:ac:ee:e8:0b:e4:88:22:0e:3c:98:46:6d:3e:19:
91:88:ff:fb:22:b0:56:9b:df:9c:6d:cf:51:4d:a0:7e:b9:ad:
db:f9:34:c9:ff:71:0b:1f:c4:eb:2f:65:72:13:72:90:f2:1e:
8d:77:fe:2b:fb:12:13:63:17:c2:37:63:cf:10:bb:be:72:ba:
59:42:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org