Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcy84owyDUAV7phzYQvlbOuISsA.roa
File: xcy84owyDUAV7phzYQvlbOuISsA.roa (raw, json)
Hash identifier: +V6LKg14OY8Lzg0bO8jwIIsI9qQKgA3Y6lNoe/zVfjk=
Subject key identifier: C5:CC:BC:E2:8C:32:0D:40:15:EE:98:73:61:0B:E5:6C:EB:88:4A:C0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A06
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcy84owyDUAV7phzYQvlbOuISsA.roa
Signing time: Sat 22 Oct 2022 06:16:18 +0000
ROA not before: Sat 22 Oct 2022 06:16:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6662 (0x1a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:16:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C5CCBCE28C320D4015EE9873610BE56CEB884AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:70:57:2a:44:d5:2d:f9:89:85:bf:c9:f0:
68:d9:f4:d0:f0:1f:b5:f1:2c:32:22:9a:4e:4b:a4:
0b:89:4e:67:85:e8:8e:6b:72:f6:95:d1:fc:b0:f1:
c7:7a:a6:48:57:eb:75:16:7d:c9:72:ba:22:72:6d:
3e:25:f1:57:3f:29:4a:32:cb:bb:a0:e6:0b:39:78:
3b:c2:29:ac:33:cf:00:c6:6a:ce:d6:88:98:13:b3:
69:00:64:7e:08:fd:31:75:ee:af:a6:45:57:41:6f:
30:24:2f:b7:dd:65:f7:70:e9:3f:65:97:c8:d3:b1:
58:0e:d9:98:13:03:97:9e:96:5a:2a:3e:d7:62:2b:
25:c1:d2:bb:f0:0e:59:74:e8:31:46:ea:21:be:e6:
01:f3:a1:97:5d:32:f2:04:27:d6:e1:ee:58:3a:95:
11:08:09:db:53:2e:54:3a:7f:a2:d4:5b:fb:0a:d2:
48:5e:3b:fa:9f:5d:f1:ae:7b:61:b9:00:ae:7b:62:
49:8b:1e:29:c4:58:e9:91:89:b9:36:77:2f:a5:3a:
1d:9a:ad:ea:99:15:bd:de:c5:b9:9e:9b:6b:58:d0:
7b:08:37:83:d1:2b:7e:1d:22:07:9f:ec:59:c9:d2:
83:1c:7c:2a:3b:91:ee:b3:06:2a:73:3e:34:4b:9a:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CC:BC:E2:8C:32:0D:40:15:EE:98:73:61:0B:E5:6C:EB:88:4A:C0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xcy84owyDUAV7phzYQvlbOuISsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/22
Signature Algorithm: sha256WithRSAEncryption
48:67:e0:08:45:c3:6a:b5:76:22:70:7d:7f:68:2d:2d:3a:bf:
2d:31:69:d1:a2:97:c6:fd:e8:a7:9a:a3:25:1d:1d:08:97:46:
9b:50:66:d8:c9:94:f4:ec:b4:41:10:b3:e8:b7:1c:48:d8:4a:
db:9a:03:a5:e5:43:14:e4:e5:30:78:17:56:da:07:3d:43:92:
5a:2f:9d:9c:c8:78:f1:80:2e:a7:97:a2:d8:0f:71:3d:9a:5b:
bb:e4:a7:29:ca:5f:52:2b:3d:e8:2c:78:c5:75:28:db:e0:37:
8d:2e:38:1b:11:0f:ee:29:06:84:cc:6a:c4:43:ed:e7:6e:cd:
0a:f0:d6:63:84:89:fc:b9:c1:5e:ce:16:86:fa:0a:e0:2c:7c:
87:f4:ec:52:70:f2:a5:c2:12:3a:b4:ec:13:a4:fc:a9:79:a4:
16:34:b6:00:49:bf:26:51:86:d7:73:b0:fb:47:3f:0d:e7:19:
1d:d4:cf:e7:4a:13:fb:6b:7f:e9:39:60:a3:95:97:38:dd:9f:
68:01:34:d9:49:02:72:16:d4:1b:0c:66:67:56:05:46:39:ae:
b5:b5:f5:f1:e5:81:5f:5a:f3:75:dc:44:9d:dd:3a:e8:6d:2d:
47:d8:06:fe:13:c2:ce:13:35:50:3f:63:e7:c7:6f:1b:04:f6:
08:2f:32:5f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE2MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM1Q0NCQ0UyOEMzMjBE
NDAxNUVFOTg3MzYxMEJFNTZDRUI4ODRBQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqSXBXKkTVLfmJhb/J8GjZ9NDwH7XxLDIimk5LpAuJTmeF6I5r
cvaV0fyw8cd6pkhX63UWfclyuiJybT4l8Vc/KUoyy7ug5gs5eDvCKawzzwDGas7W
iJgTs2kAZH4I/TF17q+mRVdBbzAkL7fdZfdw6T9ll8jTsVgO2ZgTA5eelloqPtdi
KyXB0rvwDll06DFG6iG+5gHzoZddMvIEJ9bh7lg6lREICdtTLlQ6f6LUW/sK0khe
O/qfXfGue2G5AK57YkmLHinEWOmRibk2dy+lOh2areqZFb3exbmem2tY0HsIN4PR
K34dIgef7FnJ0oMcfCo7ke6zBipzPjRLmni/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxcy84owyDUAV7phzYQvlbOuISsAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hjeTg0b3d5RFVBVjdwaHpZ
UXZsYk91SVNzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdAwDQYJKoZIhvcNAQELBQADggEBAEhn4AhFw2q1diJwfX9oLS06vy0xadGil8b9
6KeaoyUdHQiXRptQZtjJlPTstEEQs+i3HEjYStuaA6XlQxTk5TB4F1baBz1Dklov
nZzIePGALqeXotgPcT2aW7vkpynKX1IrPegseMV1KNvgN40uOBsRD+4pBoTMasRD
7eduzQrw1mOEify5wV7OFob6CuAsfIf07FJw8qXCEjq07BOk/Kl5pBY0tgBJvyZR
htdzsPtHPw3nGR3Uz+dKE/trf+k5YKOVlzjdn2gBNNlJAnIW1BsMZmdWBUY5rrW1
9fHlgV9a83XcRJ3dOuhtLUfYBv4Tws4TNVA/Y+fHbxsE9ggvMl8=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org