Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5YB55ul9-bMtqIKybLmUmNFeuQ.roa
File: q5YB55ul9-bMtqIKybLmUmNFeuQ.roa (raw, json)
Hash identifier: zwqzqCfgijBulRZrK8QS7x41Sd8iDxXhRcNlhCtBMhY=
Subject key identifier: AB:96:01:E7:9B:A5:F7:E6:CC:B6:A2:0A:C9:B2:E6:52:63:45:7A:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5YB55ul9-bMtqIKybLmUmNFeuQ.roa
Signing time: Thu 15 Sep 2022 02:35:33 +0000
ROA not before: Thu 15 Sep 2022 02:35:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB9601E79BA5F7E6CCB6A20AC9B2E65263457AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:00:12:bc:fd:e1:b0:4e:ad:48:20:a6:64:
7c:a3:fd:a8:cd:b9:75:4c:8f:2d:5a:8a:ea:71:0e:
ea:58:12:0c:77:1c:8e:ac:9c:8e:cf:f2:d9:c3:cc:
1f:42:e3:79:2f:c4:a3:49:00:03:b7:60:5f:06:57:
dd:d8:b7:a5:38:34:5c:88:ba:95:65:dc:36:8e:42:
92:3d:e9:dd:72:24:9d:a6:99:99:9e:c9:d2:d6:44:
3b:6f:7f:04:74:a9:62:23:8c:10:51:43:be:49:f4:
6d:03:8d:69:09:de:b3:46:c5:13:05:78:ed:42:0e:
5f:03:95:51:52:1c:31:46:b3:b0:b1:c7:9b:09:51:
44:f0:9e:81:d5:88:7a:59:e4:38:26:8c:84:6d:da:
c3:a8:2d:a8:a9:3f:06:23:56:9a:79:95:9a:d4:42:
70:2c:5f:58:2c:ef:be:4e:fc:cf:a8:1e:4a:90:2f:
4b:75:9f:23:fc:40:8f:d4:df:1a:7c:9e:c6:2a:64:
d6:b9:43:f8:6b:72:97:4d:29:e5:37:b7:da:e7:77:
51:3f:d7:14:31:05:f6:10:d6:86:44:62:e6:80:6e:
ec:f8:9b:0d:02:bf:62:4f:b5:17:bb:79:81:e6:08:
e2:aa:99:f5:af:f2:6a:78:fb:b3:f8:20:ce:2d:33:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:01:E7:9B:A5:F7:E6:CC:B6:A2:0A:C9:B2:E6:52:63:45:7A:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5YB55ul9-bMtqIKybLmUmNFeuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ff:2c:7a:80:87:76:48:2d:33:f5:43:c4:86:bc:6f:f6:46:
f5:de:c1:18:5f:1b:78:be:cc:68:a0:63:dc:59:b7:4f:ae:5d:
51:d7:e7:96:06:91:d8:99:b0:09:db:1d:ae:95:69:de:31:63:
5b:90:7f:84:45:6c:50:4c:2a:d5:14:e6:62:f6:63:43:73:f0:
7a:c1:07:c5:fa:c7:9c:f4:38:d0:04:ae:2b:28:04:81:8a:99:
94:05:39:ea:3b:47:24:4b:aa:94:61:94:2b:19:30:6e:f4:cc:
f5:70:43:45:8e:46:6b:dd:dc:e0:c0:b1:7f:41:4c:28:54:34:
db:79:a0:47:6d:11:92:38:d1:5e:cf:7a:7f:35:05:b4:a0:5d:
30:04:55:d1:e3:b1:24:3d:04:4c:d6:49:06:f1:c7:b6:48:3d:
9e:24:da:3e:8e:bb:e1:06:a2:c2:ad:81:6a:9f:da:ef:93:44:
04:2f:8a:b9:0c:fd:08:94:55:73:2c:57:a5:6a:70:7f:6b:f0:
5f:3a:97:c5:db:ee:a2:2d:1a:0b:ba:b2:22:ee:68:5e:1b:ee:
08:ea:cf:a0:24:36:a7:9a:d3:03:16:a0:50:ef:2d:2e:7f:af:
c7:0c:f4:44:23:e6:bb:d3:f9:fe:12:ab:9c:81:6a:d7:07:90:
2a:9a:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org