Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTIGdk7XpgOWd5sisLIwdsQhcrc.roa
File: tTIGdk7XpgOWd5sisLIwdsQhcrc.roa (raw, json)
Hash identifier: 2V0aaFFO5sPMy50jvTtBb37LhpADWJvPUfMINoKfCWo=
Subject key identifier: B5:32:06:76:4E:D7:A6:03:96:77:9B:22:B0:B2:30:76:C4:21:72:B7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A04
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTIGdk7XpgOWd5sisLIwdsQhcrc.roa
Signing time: Sat 22 Oct 2022 06:16:05 +0000
ROA not before: Sat 22 Oct 2022 06:16:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6660 (0x1a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:16:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B53206764ED7A60396779B22B0B23076C42172B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:34:69:f0:ed:1a:13:50:0e:a3:86:0c:a4:
96:55:67:53:0b:e5:8d:0a:28:f4:d5:69:43:b7:d9:
9c:b1:c6:95:02:58:c8:74:57:77:df:df:2f:67:25:
8f:ac:f9:0a:65:90:28:ab:70:ed:1c:35:97:62:7e:
9d:29:bc:2f:93:6d:01:87:0d:a0:dd:13:44:2c:67:
d3:8c:e5:d3:97:5a:d5:36:e8:33:d5:d3:68:1e:0c:
2f:71:59:42:f8:96:b2:0a:53:65:0f:34:e1:93:bc:
da:f2:96:2f:f1:68:cd:ad:85:19:d9:b4:2e:d8:c4:
4a:4b:97:81:c9:16:3c:0f:d0:b1:3c:1b:01:90:11:
61:3e:f7:26:3b:43:57:fb:a1:b9:8e:a6:15:64:fb:
35:c0:31:6d:31:b9:b8:2f:b1:87:f5:50:3a:79:7f:
66:ae:3f:ab:1b:5e:ce:b8:ef:49:73:d3:5a:ed:bb:
b5:25:8b:3c:b0:99:6b:2c:42:50:0a:0f:55:69:e6:
0a:88:e7:df:59:6e:4f:7a:38:d1:ce:82:83:bb:af:
bd:98:fa:b7:60:0e:26:58:fc:45:36:c7:6a:61:d8:
41:12:0e:78:be:b3:95:c5:68:7c:00:38:ff:e2:3f:
1f:41:7c:8e:d4:89:ab:81:b8:4f:82:8a:7c:4e:4e:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:06:76:4E:D7:A6:03:96:77:9B:22:B0:B2:30:76:C4:21:72:B7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tTIGdk7XpgOWd5sisLIwdsQhcrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/21
Signature Algorithm: sha256WithRSAEncryption
59:5b:99:0a:5d:ff:5e:ba:82:93:a7:62:31:af:8a:5d:9a:74:
ae:8c:35:cd:ef:ef:df:eb:5d:c8:42:39:ab:2c:ff:24:87:9f:
0c:ef:04:3d:b2:a8:34:b3:a8:43:6c:c6:b5:6f:fd:fa:bf:e9:
47:38:36:6c:4c:03:b2:3f:91:71:7c:f2:e5:f4:20:1f:1f:f0:
f2:1b:32:39:c3:a7:cb:a5:cb:7d:9a:d8:d1:ec:26:4e:43:4e:
9c:2a:e8:ce:99:24:05:fb:86:7f:4e:8b:2c:e6:aa:6c:ec:73:
64:6b:4d:22:8d:62:35:b1:68:22:d5:3a:b3:f2:df:78:08:da:
b0:e2:82:55:08:75:df:22:a5:30:e1:ba:30:bd:ab:22:77:bd:
31:a4:75:0c:78:94:7c:4d:b4:50:de:36:38:00:ed:c3:91:ba:
e7:dd:de:b0:b3:f1:ba:6c:ee:78:56:74:ca:aa:97:04:6e:23:
27:51:03:78:0e:86:ec:eb:ed:1e:80:63:10:71:6f:e0:67:af:
ac:1b:a2:ab:98:f8:c1:0e:76:ce:41:35:f9:74:11:c8:87:da:
80:7c:e5:f5:7e:f9:64:4a:aa:93:a3:c2:b3:29:c4:48:65:7e:
77:9b:28:2a:e0:cb:7f:fd:d7:12:ff:62:dc:2b:4a:37:48:5b:
16:d7:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org