Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6JTHdhsGYof9u3ru3b9pl8x76aQ.roa
File: 6JTHdhsGYof9u3ru3b9pl8x76aQ.roa (raw, json)
Hash identifier: R5Irw7zt8cJvjcL8T0y07IKnGXTU2RX8OrefWrHTdmI=
Subject key identifier: E8:94:C7:76:1B:06:62:87:FD:BB:7A:EE:DD:BF:69:97:CC:7B:E9:A4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6JTHdhsGYof9u3ru3b9pl8x76aQ.roa
Signing time: Thu 15 Sep 2022 02:35:55 +0000
ROA not before: Thu 15 Sep 2022 02:35:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E894C7761B066287FDBB7AEEDDBF6997CC7BE9A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:da:2b:cf:a6:9f:28:fa:97:20:2d:7a:20:
7b:fd:12:c7:68:43:7c:ed:90:65:f8:32:84:99:e1:
de:af:97:af:1e:99:a8:0a:dd:b7:ec:a5:98:11:9a:
5a:8a:95:d9:87:4e:d5:4d:79:2a:b8:3a:d7:07:f4:
d0:57:a3:d7:ec:fe:0b:ab:6b:e4:d4:4f:88:ba:85:
ab:73:62:6a:b6:a2:2a:c3:b9:56:45:6e:1c:32:50:
4d:d7:90:ef:27:5b:d7:4d:29:8a:49:d8:c6:0e:d9:
97:f0:82:5a:47:c3:69:d0:65:da:47:c3:ff:1a:d7:
2a:a8:6c:5c:3a:a4:d4:db:1a:1e:4c:95:bc:65:04:
ee:5d:29:91:f7:46:57:7e:ab:17:5c:13:39:da:1b:
50:69:31:e1:a2:54:53:35:4c:9d:f8:08:64:70:22:
cb:70:5e:cc:ca:ad:b9:e1:af:bc:ec:aa:2d:df:bc:
ab:42:14:39:b1:e5:f2:14:9b:e3:e4:55:b3:29:8a:
d2:7f:29:c7:83:41:e7:cb:59:29:4a:c1:b8:b1:f6:
e7:39:d9:0b:10:b7:42:f4:97:90:b4:7e:fa:c0:64:
68:0f:7e:9c:ec:92:e6:e5:7d:61:71:07:03:5d:3e:
0c:74:cf:32:fe:e5:a6:6d:ba:8d:e5:84:54:dd:16:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:C7:76:1B:06:62:87:FD:BB:7A:EE:DD:BF:69:97:CC:7B:E9:A4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6JTHdhsGYof9u3ru3b9pl8x76aQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.120.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:3c:dc:d2:7f:06:97:88:6e:ae:42:35:7b:21:e7:82:f5:37:
48:c3:3f:d2:2b:28:7c:d4:92:05:48:79:8f:3b:b5:01:3b:ba:
22:8f:7b:15:a8:c2:d8:eb:28:a3:07:a0:10:a1:c1:7a:78:1b:
f3:d4:af:1e:f2:62:bf:ed:a0:b0:cd:bc:50:56:88:42:8c:1e:
94:a0:bb:b6:c8:bf:8e:36:c4:25:45:5b:83:e1:6a:da:15:fe:
44:a0:ba:b5:f7:63:34:fd:7d:a6:46:eb:2b:b1:bc:45:7e:bb:
4f:7b:59:a7:bf:c4:98:95:97:e8:81:83:d1:95:a9:8e:0f:72:
38:cd:b0:5c:0e:fb:65:cf:d6:f4:d4:7a:f2:34:f1:fa:13:11:
f4:bb:a1:c5:16:b9:00:c1:1d:71:e3:b1:af:6f:e1:9a:3a:2e:
61:a7:21:f0:0b:22:69:f5:18:d8:7d:f4:15:cc:35:a5:c4:e4:
0b:95:62:e8:03:3b:26:6d:40:f9:1c:f0:44:a9:ee:37:bb:9d:
df:86:85:bf:5f:00:72:fa:69:6f:09:e5:f2:65:cb:aa:f2:73:
95:c5:63:b5:fd:95:de:06:08:fe:44:6b:e0:36:c1:70:dc:0f:
ff:1b:ad:be:3d:df:be:34:9f:f1:6e:8e:7e:a7:82:1e:b9:e7:
19:0c:67:ce
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4OTRDNzc2MUIwNjYy
ODdGREJCN0FFRUREQkY2OTk3Q0M3QkU5QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIN9orz6afKPqXIC16IHv9EsdoQ3ztkGX4MoSZ4d6vl68emagK
3bfspZgRmlqKldmHTtVNeSq4OtcH9NBXo9fs/gura+TUT4i6hatzYmq2oirDuVZF
bhwyUE3XkO8nW9dNKYpJ2MYO2ZfwglpHw2nQZdpHw/8a1yqobFw6pNTbGh5Mlbxl
BO5dKZH3Rld+qxdcEznaG1BpMeGiVFM1TJ34CGRwIstwXszKrbnhr7zsqi3fvKtC
FDmx5fIUm+PkVbMpitJ/KceDQefLWSlKwbix9uc52QsQt0L0l5C0fvrAZGgPfpzs
kublfWFxBwNdPgx0zzL+5aZtuo3lhFTdFsPPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6JTHdhsGYof9u3ru3b9pl8x76aQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZKVEhkaHNHWW9mOXUzcnUz
YjlwbDh4NzZhUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n3gwDQYJKoZIhvcNAQELBQADggEBADw83NJ/BpeIbq5CNXsh54L1N0jDP9IrKHzU
kgVIeY87tQE7uiKPexWowtjrKKMHoBChwXp4G/PUrx7yYr/toLDNvFBWiEKMHpSg
u7bIv442xCVFW4PhatoV/kSgurX3YzT9faZG6yuxvEV+u097Wae/xJiVl+iBg9GV
qY4PcjjNsFwO+2XP1vTUevI08foTEfS7ocUWuQDBHXHjsa9v4Zo6LmGnIfALImn1
GNh99BXMNaXE5AuVYugDOyZtQPkc8ESp7je7nd+Ghb9fAHL6aW8J5fJly6ryc5XF
Y7X9ld4GCP5Ea+A2wXDcD/8brb493740n/Fujn6ngh655xkMZ84=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org