Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yTKlOZ663gKoHECNMLbKekTQi9c.roa
File: yTKlOZ663gKoHECNMLbKekTQi9c.roa (raw, json)
Hash identifier: /IQ1yN90z+oHeWqnWjo/hbS+uJupssDFbzmcDRm1Zao=
Subject key identifier: C9:32:A5:39:9E:BA:DE:02:A8:1C:40:8D:30:B6:CA:7A:44:D0:8B:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yTKlOZ663gKoHECNMLbKekTQi9c.roa
Signing time: Mon 24 Oct 2022 03:25:12 +0000
ROA not before: Mon 24 Oct 2022 03:25:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6705 (0x1a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 24 03:25:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C932A5399EBADE02A81C408D30B6CA7A44D08BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:f3:a3:63:9a:2e:ab:a2:53:58:c8:57:9b:
94:81:a7:9e:57:b2:5f:6a:43:f7:42:dc:81:a7:62:
1c:a5:99:25:26:61:18:19:f7:17:f4:1b:68:19:60:
38:01:25:33:ac:c0:c1:cf:9a:f2:6e:97:8b:fa:89:
ae:38:16:6d:85:41:53:2c:0c:26:05:2c:a2:95:87:
54:3b:8f:44:c3:b9:f8:46:2a:ce:2c:6b:f5:1b:3c:
b8:c0:90:f8:20:bd:aa:ab:2a:58:84:16:6b:b8:c3:
3c:99:17:6d:9d:11:6b:31:45:90:43:de:af:7f:31:
29:61:c5:b6:8b:f8:26:80:10:35:8f:43:2a:eb:9c:
0c:58:8f:8c:36:6a:b0:f4:ed:4a:be:44:51:25:4c:
ed:0a:ab:3a:06:06:15:eb:90:58:49:c2:1d:88:6d:
32:0e:96:d3:c5:cb:9a:1f:a0:49:76:24:af:35:79:
c6:11:61:3a:b7:bb:18:a2:c7:98:d4:7a:91:e9:55:
9e:08:ba:6e:a1:94:09:01:35:5d:f4:52:f7:7e:42:
a5:53:0f:3e:3a:47:b5:f3:20:a4:5e:7a:a2:f3:37:
e8:59:61:a1:c5:7c:9a:e3:b6:c5:54:36:82:b8:d6:
21:43:fd:87:68:43:0d:ed:28:65:b9:f2:09:ca:6a:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:A5:39:9E:BA:DE:02:A8:1C:40:8D:30:B6:CA:7A:44:D0:8B:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yTKlOZ663gKoHECNMLbKekTQi9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:89:18:8e:4a:0f:46:a2:fa:12:33:ab:1e:6e:a2:e0:59:7b:
6d:d7:4e:2a:01:83:ef:45:4f:5a:75:4f:4f:e6:6a:d4:86:29:
4b:83:70:0e:de:a4:a8:71:cd:89:f8:3c:b1:c1:c4:f7:a5:ac:
5e:b7:d9:b6:34:d8:ed:ae:da:d2:6e:d3:29:12:40:97:b9:bf:
48:50:db:c5:ec:5f:cc:b0:cf:66:89:3e:06:14:d0:cc:58:84:
38:eb:4d:f8:cd:49:3b:ec:68:e9:2a:9a:92:78:97:db:71:a8:
8f:bc:53:fd:50:2b:95:c8:b2:aa:49:2d:0b:91:70:af:d8:dd:
9b:a1:7f:a1:5c:98:e8:3d:68:4c:79:c8:b2:1f:c7:f5:d2:3f:
c4:a6:57:c0:82:b1:7e:fa:bd:d8:d7:7f:cd:60:0f:9f:dc:60:
e1:4b:6c:a9:b1:ec:5a:60:f3:1b:da:37:eb:db:45:ca:78:1c:
b3:90:f9:4d:4a:2c:85:df:ed:08:1a:32:42:a0:eb:f3:56:8c:
01:5f:1f:f8:b1:18:9c:9e:60:09:14:4c:40:04:1b:a9:68:4b:
89:a7:6e:74:22:2b:e4:db:8e:59:fa:23:0c:24:cf:90:a6:51:
24:84:0f:53:98:6d:48:fc:7c:7c:a4:28:b3:3e:1c:ef:6b:32:
74:06:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org