Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/ujlviFYoYrvtIy2QgNWGpcehDh8.roa
File: ujlviFYoYrvtIy2QgNWGpcehDh8.roa (raw, json)
Hash identifier: SVD7HUNWwreCQiABfx4v3bwSsCVmg/HD+njfEYaHYcM=
Subject key identifier: BA:39:6F:88:56:28:62:BB:ED:23:2D:90:80:D5:86:A5:C7:A1:0E:1F
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0A49
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/ujlviFYoYrvtIy2QgNWGpcehDh8.roa
Signing time: Thu 15 Sep 2022 02:50:23 +0000
ROA not before: Thu 15 Sep 2022 02:50:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18183
IP address blocks: 2001:4500::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 15 02:50:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BA396F88562862BBED232D9080D586A5C7A10E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:fa:9d:4b:6b:68:fc:a8:df:e0:eb:59:75:
82:e8:61:b4:b2:02:39:ee:1d:44:ad:b1:aa:39:01:
5c:89:ad:d6:4b:a7:b4:ae:0f:c7:b0:47:08:1b:f1:
30:d7:d2:c6:17:b2:82:71:4b:15:51:b3:71:fe:fa:
0c:ec:b4:9c:73:63:e0:a3:e7:5b:ca:ce:8c:65:74:
b5:72:03:99:18:6d:62:78:26:8b:74:a4:eb:18:4a:
2a:7f:6e:21:5f:18:5c:64:36:9a:1a:e2:87:ce:81:
f2:b7:0b:39:ed:32:c8:f4:fc:3d:14:3e:27:ae:3a:
3d:a2:69:e4:05:88:a2:86:05:ff:17:8b:15:f2:d9:
50:78:fe:19:02:39:8f:da:17:59:63:08:82:3a:cc:
06:91:ef:1a:37:56:23:c1:0a:9b:fd:43:b9:e1:d6:
bf:92:fd:d0:09:76:17:a2:f0:0d:83:b2:71:c6:6a:
b1:5f:6a:ef:ea:31:fd:5e:8a:9c:7c:5d:4e:0a:ce:
fb:60:94:95:c8:03:9b:20:48:22:cd:3c:44:29:8f:
73:01:b2:c7:89:3a:99:18:69:5d:ae:a3:4b:f4:bf:
b6:5e:ab:85:85:1e:32:11:81:02:52:70:95:e2:d7:
80:c5:5f:1f:22:54:60:87:1c:07:55:c8:0d:84:73:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:6F:88:56:28:62:BB:ED:23:2D:90:80:D5:86:A5:C7:A1:0E:1F
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/ujlviFYoYrvtIy2QgNWGpcehDh8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4500::/32
Signature Algorithm: sha256WithRSAEncryption
86:2d:5e:41:8d:c7:ce:7b:ff:09:a2:eb:e3:d6:29:eb:19:82:
1b:bb:95:34:da:f4:20:00:21:e1:d3:32:9a:3b:33:0c:4e:f0:
5f:72:ac:ee:1b:57:12:b3:67:97:26:e7:cc:ea:f9:b7:92:42:
cb:a9:4c:8e:33:17:40:7f:60:93:ed:80:ce:7c:88:59:bd:48:
af:b9:a3:0b:48:7f:09:82:e1:a3:7e:ad:f6:ea:01:da:d6:6c:
08:3d:5c:9d:d8:7d:87:9f:f4:a5:62:d2:03:5d:6e:13:15:48:
99:d5:81:33:61:37:69:0b:9e:44:a2:87:6f:1f:dc:bc:4c:66:
e8:0a:65:eb:ff:70:d2:78:68:4c:bf:ff:cc:1f:a7:c8:c8:25:
bc:9e:a2:aa:e9:27:75:0b:8e:bc:d3:0c:00:7a:3e:51:9a:76:
6b:8c:e4:50:db:e1:25:d4:60:d3:84:28:8a:bd:97:d9:3f:fb:
43:e5:c8:1e:a4:cd:a8:0a:94:a0:3f:d7:b0:22:10:a5:43:9f:
16:cc:66:62:6a:4a:cd:38:89:9d:26:52:2c:ec:49:25:92:63:
2c:31:30:55:1f:6e:3d:e8:01:1f:da:8a:9f:3d:7e:7c:ff:0a:
5e:ca:37:f7:3b:b3:e6:cd:37:6e:22:19:6c:5d:39:35:7d:c4:
d2:f9:1a:dd
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDUx
RUY5MzU5QTk4NEY2QTRDRjkxRkU5MDA0RUFFQjA4OUE5ODRDMDAeFw0yMjA5MTUw
MjUwMjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJBMzk2Rjg4NTYyODYy
QkJFRDIzMkQ5MDgwRDU4NkE1QzdBMTBFMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4h/qdS2to/Kjf4OtZdYLoYbSyAjnuHUStsao5AVyJrdZLp7Su
D8ewRwgb8TDX0sYXsoJxSxVRs3H++gzstJxzY+Cj51vKzoxldLVyA5kYbWJ4Jot0
pOsYSip/biFfGFxkNpoa4ofOgfK3CzntMsj0/D0UPieuOj2iaeQFiKKGBf8XixXy
2VB4/hkCOY/aF1ljCII6zAaR7xo3ViPBCpv9Q7nh1r+S/dAJdhei8A2DsnHGarFf
au/qMf1eipx8XU4KzvtglJXIA5sgSCLNPEQpj3MBsseJOpkYaV2uo0v0v7Zeq4WF
HjIRgQJScJXi14DFXx8iVGCHHAdVyA2Ec4uRAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUujlviFYoYrvtIy2QgNWGpcehDh8wHwYDVR0jBBgwFoAURR75NZqYT2pM+R/p
AE6usImphMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkFSTC9S
Ujc1TlpxWVQycE0tUl9wQUU2dXNJbXBoTUEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1JSNzVOWnFZVDJwTS1SX3BBRTZ1c0ltcGhNQS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05BUkwvdWpsdmlGWW9ZcnZ0SXkyUWdOV0dw
Y2VoRGg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABRQAw
DQYJKoZIhvcNAQELBQADggEBAIYtXkGNx857/wmi6+PWKesZghu7lTTa9CAAIeHT
Mpo7MwxO8F9yrO4bVxKzZ5cm58zq+beSQsupTI4zF0B/YJPtgM58iFm9SK+5owtI
fwmC4aN+rfbqAdrWbAg9XJ3YfYef9KVi0gNdbhMVSJnVgTNhN2kLnkSih28f3LxM
ZugKZev/cNJ4aEy//8wfp8jIJbyeoqrpJ3ULjrzTDAB6PlGadmuM5FDb4SXUYNOE
KIq9l9k/+0PlyB6kzagKlKA/17AiEKVDnxbMZmJqSs04iZ0mUizsSSWSYywxMFUf
bj3oAR/aip89fnz/Cl7KN/c7s+bNN24iGWxdOTV9xNL5Gt0=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org