Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3tEGPwu_pmWAWlrRYHjj4YrI9X4.roa
File: 3tEGPwu_pmWAWlrRYHjj4YrI9X4.roa (raw, json)
Hash identifier: eH6fF2HR9+xpVnaDKd6/6C8yA5xwdUxy0x6FlMV+LZs=
Subject key identifier: DE:D1:06:3F:0B:BF:A6:65:80:5A:5A:D1:60:78:E3:E1:8A:C8:F5:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3tEGPwu_pmWAWlrRYHjj4YrI9X4.roa
Signing time: Thu 15 Sep 2022 02:36:44 +0000
ROA not before: Thu 15 Sep 2022 02:36:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DED1063F0BBFA665805A5AD16078E3E18AC8F57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:63:82:fe:9e:83:9c:af:16:29:ac:59:fa:
72:1c:1c:27:dc:16:98:bc:e5:6f:72:a7:6c:05:98:
0e:92:2a:23:2e:81:6d:45:3b:34:c2:6a:9f:50:aa:
02:02:a8:f4:c3:f6:eb:66:f4:31:0d:a2:be:82:b7:
e2:53:b4:08:e6:aa:53:e8:a1:9f:a6:d0:cd:29:46:
37:db:59:d4:46:d0:7f:4d:a6:cb:3a:99:13:22:38:
03:da:a8:ca:24:17:b4:84:f6:44:05:1c:bc:07:6f:
6d:08:83:ba:b4:d1:fb:42:2e:19:d0:2c:53:80:01:
e8:54:c5:bc:be:f3:af:51:b2:38:da:f7:a7:57:86:
c0:02:81:20:37:1e:e0:8d:da:ba:e4:b8:f5:91:8a:
7f:92:4c:46:c5:44:6b:22:3d:75:d2:0a:fa:9a:74:
6e:51:42:34:87:78:04:8e:c0:fd:4e:e8:47:0e:04:
4b:b8:3a:12:1e:da:47:44:53:1d:88:2f:4d:73:a3:
9b:6f:06:07:f7:87:8e:af:3d:cf:a2:6c:15:04:62:
e0:4d:c6:8a:29:dc:69:d9:7c:ff:62:45:5e:dd:94:
ec:19:49:f3:f2:bc:3a:30:b7:a5:14:1d:fd:a4:e8:
6a:eb:98:7f:3f:74:c5:44:2a:30:a7:1d:31:fc:2f:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D1:06:3F:0B:BF:A6:65:80:5A:5A:D1:60:78:E3:E1:8A:C8:F5:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3tEGPwu_pmWAWlrRYHjj4YrI9X4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
32:65:d2:8d:79:49:6b:9a:de:21:98:30:38:f8:d1:b2:02:2b:
50:5e:6a:f3:64:a0:86:b5:55:e7:fc:aa:9d:f5:a8:0a:8a:84:
b9:2a:58:50:cf:84:79:14:be:ff:ae:c6:d1:d0:2f:6f:1a:f3:
03:d4:c5:29:e8:13:b2:4c:a8:d6:56:8f:a3:12:6b:9c:d8:33:
29:cd:f8:7a:1a:80:23:e8:b7:52:97:d6:2c:cb:db:57:5f:84:
a4:5c:6e:53:4e:f1:8f:15:c4:d1:83:b1:0a:14:6f:0e:8d:b9:
18:d5:ff:2a:2e:e2:e6:e4:bb:dd:08:8c:b7:87:71:89:37:b1:
56:de:59:a0:24:a3:a4:a8:c9:7b:03:b4:ce:0c:9c:34:0e:61:
7c:60:31:bd:f9:a4:89:ca:bf:fc:9e:10:a9:e0:bb:15:cd:4e:
0b:19:d3:0e:56:82:81:3d:48:f8:a5:da:d9:a7:1b:f3:03:ed:
7c:da:24:45:b2:fd:a4:f8:50:e5:c3:08:e0:7e:0b:d4:51:19:
3d:c7:6d:db:94:a8:ed:62:e5:ae:ff:f1:80:81:99:7a:94:7e:
02:b5:13:69:05:e0:6b:e8:29:49:7b:a3:a0:ec:b6:32:1a:0e:
c0:e7:6e:e1:c9:4a:f1:f4:f5:eb:08:f1:e8:b4:96:bd:5e:a7:
48:c5:50:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERFRDEwNjNGMEJCRkE2
NjU4MDVBNUFEMTYwNzhFM0UxOEFDOEY1N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnO2OC/p6DnK8WKaxZ+nIcHCfcFpi85W9yp2wFmA6SKiMugW1F
OzTCap9QqgICqPTD9utm9DENor6Ct+JTtAjmqlPooZ+m0M0pRjfbWdRG0H9Npss6
mRMiOAPaqMokF7SE9kQFHLwHb20Ig7q00ftCLhnQLFOAAehUxby+869Rsjja96dX
hsACgSA3HuCN2rrkuPWRin+STEbFRGsiPXXSCvqadG5RQjSHeASOwP1O6EcOBEu4
OhIe2kdEUx2IL01zo5tvBgf3h46vPc+ibBUEYuBNxoop3GnZfP9iRV7dlOwZSfPy
vDowt6UUHf2k6GrrmH8/dMVEKjCnHTH8L6EbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3tEGPwu/pmWAWlrRYHjj4YrI9X4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzN0RUdQd3VfcG1XQVdsclJZ
SGpqNFlySTlYNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBADJl0o15SWua3iGYMDj40bICK1BeavNkoIa1
Vef8qp31qAqKhLkqWFDPhHkUvv+uxtHQL28a8wPUxSnoE7JMqNZWj6MSa5zYMynN
+HoagCPot1KX1izL21dfhKRcblNO8Y8VxNGDsQoUbw6NuRjV/you4ubku90IjLeH
cYk3sVbeWaAko6SoyXsDtM4MnDQOYXxgMb35pInKv/yeEKnguxXNTgsZ0w5WgoE9
SPil2tmnG/MD7XzaJEWy/aT4UOXDCOB+C9RRGT3HbduUqO1i5a7/8YCBmXqUfgK1
E2kF4GvoKUl7o6DstjIaDsDnbuHJSvH09esI8ei0lr1ep0jFUKg=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org