Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/16Z4PBmV9DMm8gKpBh3vG8BRQP8.roa
File: 16Z4PBmV9DMm8gKpBh3vG8BRQP8.roa (raw, json)
Hash identifier: ObYOtSboFzbCGdUiUWT7eEEl6IzPahTrS71OwfqZQD0=
Subject key identifier: D7:A6:78:3C:19:95:F4:33:26:F2:02:A9:06:1D:EF:1B:C0:51:40:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/16Z4PBmV9DMm8gKpBh3vG8BRQP8.roa
Signing time: Thu 15 Sep 2022 02:35:34 +0000
ROA not before: Thu 15 Sep 2022 02:35:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 123.0.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D7A6783C1995F43326F202A9061DEF1BC05140FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:25:ce:9d:b1:64:24:6e:90:a6:94:31:2c:
5e:e1:93:b9:d7:a8:27:33:5c:2f:0e:5c:95:ef:87:
e7:3d:1c:8f:e2:74:d9:1d:bc:ee:de:2e:4b:ff:c3:
6c:2a:79:39:39:a2:a4:3a:08:96:fb:60:a1:87:e3:
84:d0:c9:62:c0:ae:d3:0a:ae:92:55:40:10:53:9b:
c6:b0:3f:c9:78:97:36:b5:cf:a8:74:f5:0d:f9:24:
e0:54:46:36:c7:26:3b:e9:2f:a1:4e:91:e9:d7:cd:
ea:1d:a4:e0:0f:17:ed:57:05:d7:c2:15:f8:e2:bc:
0e:97:d0:32:9c:ff:7e:45:b6:77:10:8a:68:41:ae:
1e:f9:b0:bb:9c:8d:13:8f:61:84:46:a3:c7:d0:a6:
6e:0f:ea:c7:75:82:f7:d1:02:8a:e6:23:f1:1b:6f:
18:51:7d:b2:80:c5:88:19:bb:88:3f:2f:58:41:bd:
79:de:a8:2e:b5:4c:07:cd:37:08:2f:01:2e:e6:d3:
87:a3:6b:88:68:8d:7f:71:a0:0c:36:4a:af:11:65:
a9:7f:08:60:f3:44:dc:99:3b:ab:0b:4b:95:5d:0f:
f2:3f:85:59:b2:a9:c6:d6:a9:29:4e:9d:72:8b:dc:
58:74:f4:0e:17:a6:b6:3f:aa:db:6e:fb:43:5d:e7:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:78:3C:19:95:F4:33:26:F2:02:A9:06:1D:EF:1B:C0:51:40:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/16Z4PBmV9DMm8gKpBh3vG8BRQP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:7b:11:c9:f1:b7:85:db:59:26:03:bb:a6:ad:dc:3b:de:c0:
96:8b:1a:87:8d:5a:a6:98:15:97:2b:e5:f0:b5:21:e4:35:ec:
06:cb:26:04:a7:33:58:fc:10:e8:53:ac:fa:01:9f:91:61:49:
78:4f:30:75:ff:c9:77:9a:87:7b:6b:5f:9b:6d:6c:81:48:47:
29:0e:88:bd:2f:b3:31:c3:16:57:99:f3:6e:35:8b:76:41:ec:
5b:d5:73:47:c7:eb:56:6c:8f:90:23:66:e2:a3:77:36:bb:14:
05:0b:5e:b9:dd:98:b6:02:de:21:82:7d:05:1c:72:d5:c6:b4:
ab:15:8d:73:7a:8e:16:f9:41:49:67:0c:99:db:9f:bd:9f:47:
a0:da:1d:ee:7f:8d:05:d5:e3:a5:73:0b:70:14:ff:0c:67:c7:
ea:69:2a:c5:49:4e:60:ad:50:70:47:d4:d9:fc:fd:b3:99:5b:
7e:5c:53:5f:69:76:04:cc:a1:b1:93:5b:75:b1:55:46:e0:14:
b4:2a:6b:cb:18:0b:d4:f7:a9:5e:ea:8a:88:9f:4f:bd:88:da:
86:59:b3:7f:b8:1e:40:b3:a8:a4:bb:5d:9f:fc:44:58:ff:51:
ef:96:6d:ef:21:9f:70:bc:90:af:93:74:95:8d:46:16:53:8b:
50:1d:d3:d1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ3QTY3ODNDMTk5NUY0
MzMyNkYyMDJBOTA2MURFRjFCQzA1MTQwRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0dyXOnbFkJG6QppQxLF7hk7nXqCczXC8OXJXvh+c9HI/idNkd
vO7eLkv/w2wqeTk5oqQ6CJb7YKGH44TQyWLArtMKrpJVQBBTm8awP8l4lza1z6h0
9Q35JOBURjbHJjvpL6FOkenXzeodpOAPF+1XBdfCFfjivA6X0DKc/35FtncQimhB
rh75sLucjROPYYRGo8fQpm4P6sd1gvfRAormI/EbbxhRfbKAxYgZu4g/L1hBvXne
qC61TAfNNwgvAS7m04eja4hojX9xoAw2Sq8RZal/CGDzRNyZO6sLS5VdD/I/hVmy
qcbWqSlOnXKL3Fh09A4XprY/qttu+0Nd54DVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU16Z4PBmV9DMm8gKpBh3vG8BRQP8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzE2WjRQQm1WOURNbThnS3BC
aDN2RzhCUlFQOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
ACAwDQYJKoZIhvcNAQELBQADggEBACp7Ecnxt4XbWSYDu6at3DvewJaLGoeNWqaY
FZcr5fC1IeQ17AbLJgSnM1j8EOhTrPoBn5FhSXhPMHX/yXeah3trX5ttbIFIRykO
iL0vszHDFleZ8241i3ZB7FvVc0fH61Zsj5AjZuKjdza7FAULXrndmLYC3iGCfQUc
ctXGtKsVjXN6jhb5QUlnDJnbn72fR6DaHe5/jQXV46VzC3AU/wxnx+ppKsVJTmCt
UHBH1Nn8/bOZW35cU19pdgTMobGTW3WxVUbgFLQqa8sYC9T3qV7qioifT72I2oZZ
s3+4HkCzqKS7XZ/8RFj/Ue+Wbe8hn3C8kK+TdJWNRhZTi1Ad09E=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-fra.rpki-client.org