Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/788Hgw4F6wdyAlr75UdEZJ-6ZVo.roa
File: 788Hgw4F6wdyAlr75UdEZJ-6ZVo.roa (raw, json)
Hash identifier: m+PSQpYmzBiJOiGGHyv7JdTxZg8dINAA41o0YSlbt4M=
Subject key identifier: EF:CF:07:83:0E:05:EB:07:72:02:5A:FB:E5:47:44:64:9F:BA:65:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19D0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/788Hgw4F6wdyAlr75UdEZJ-6ZVo.roa
Signing time: Sat 22 Oct 2022 06:11:26 +0000
ROA not before: Sat 22 Oct 2022 06:11:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6608 (0x19d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EFCF07830E05EB0772025AFBE54744649FBA655A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:43:df:9f:00:5f:eb:e2:a5:8d:fd:9a:26:
a3:98:8f:34:8b:f9:64:2f:e7:04:68:14:4a:02:9c:
c7:4e:c3:62:48:c2:19:01:05:79:9d:5a:a1:f6:fd:
01:be:30:72:68:34:26:6a:60:e2:b8:6b:d4:7b:87:
78:8b:94:c4:f5:16:bf:ac:64:25:88:82:26:64:c5:
cd:ec:e0:a4:13:3d:c9:9e:ab:de:e1:31:c6:f9:ea:
9e:a4:53:03:9b:aa:18:4a:3a:b4:89:4c:dd:66:cb:
83:19:3a:f1:98:cb:33:b7:4d:35:18:5b:ce:3f:ed:
f3:2d:9d:67:6c:4f:b7:9f:f8:2d:0c:62:7f:85:64:
f5:4f:b3:69:6b:04:97:14:e1:4e:b1:25:99:2a:1b:
e6:a1:2c:38:33:1d:55:2e:e3:fd:9a:04:ef:34:d1:
0d:82:fa:b5:ac:07:f7:c9:73:81:47:de:cd:b2:81:
dd:4a:7b:e2:09:b8:48:24:c3:06:ee:e6:0e:72:7c:
67:40:6c:58:e9:29:7c:45:24:bc:bc:85:d7:74:63:
ce:c1:7d:58:ad:b5:5d:86:a9:81:f0:15:65:74:b9:
1f:a4:e0:e5:28:70:00:7f:21:db:47:e4:6b:60:15:
d7:b5:b4:d4:41:c5:b3:05:4f:eb:0d:da:9d:76:f3:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:07:83:0E:05:EB:07:72:02:5A:FB:E5:47:44:64:9F:BA:65:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/788Hgw4F6wdyAlr75UdEZJ-6ZVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.56.0/21
Signature Algorithm: sha256WithRSAEncryption
56:d6:69:8e:3e:18:06:55:c1:56:8a:24:92:9e:2a:d6:d5:22:
e0:e4:95:03:dc:82:f4:d9:66:17:75:a0:9b:1c:3f:d6:04:21:
96:30:95:6b:48:a8:5e:81:21:e8:a9:c4:53:41:dd:c6:c4:8c:
d1:5e:d3:ae:0c:a4:a8:b7:8b:c8:40:70:d0:a4:c4:d7:a8:6d:
2d:45:65:63:d8:3c:8b:c7:9c:08:f9:8a:3f:10:0e:16:bf:a1:
f0:33:76:35:a8:dc:58:e8:0f:b9:c7:e6:3b:45:6b:13:cf:54:
2b:4b:75:62:e1:e4:ac:69:89:c3:ad:fc:60:3f:b2:0d:12:b6:
40:62:50:50:5b:6a:fd:15:85:d3:05:85:b3:ba:95:5c:6d:1b:
07:a0:ed:9c:30:7c:97:fa:09:15:96:19:13:a2:5c:31:cf:b0:
0c:11:24:38:8e:5a:d8:d3:75:9d:ea:68:38:68:c8:d3:26:2c:
27:22:f7:ae:71:08:07:38:80:e6:c8:f9:21:2d:29:29:3e:8c:
6c:06:2a:90:01:bf:64:99:0c:d4:2c:76:35:e2:d8:a8:26:85:
5d:a3:af:27:a5:1d:28:ee:a4:00:f3:32:7a:20:57:67:9e:b7:
9c:8d:4f:e3:a9:ec:31:25:64:a0:f9:09:aa:3f:23:99:03:f5:
76:67:f5:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjExMjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVGQ0YwNzgzMEUwNUVC
MDc3MjAyNUFGQkU1NDc0NDY0OUZCQTY1NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzskPfnwBf6+Kljf2aJqOYjzSL+WQv5wRoFEoCnMdOw2JIwhkB
BXmdWqH2/QG+MHJoNCZqYOK4a9R7h3iLlMT1Fr+sZCWIgiZkxc3s4KQTPcmeq97h
Mcb56p6kUwObqhhKOrSJTN1my4MZOvGYyzO3TTUYW84/7fMtnWdsT7ef+C0MYn+F
ZPVPs2lrBJcU4U6xJZkqG+ahLDgzHVUu4/2aBO800Q2C+rWsB/fJc4FH3s2ygd1K
e+IJuEgkwwbu5g5yfGdAbFjpKXxFJLy8hdd0Y87BfVittV2GqYHwFWV0uR+k4OUo
cAB/IdtH5GtgFde1tNRBxbMFT+sN2p128xDFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU788Hgw4F6wdyAlr75UdEZJ+6ZVowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzc4OEhndzRGNndkeUFscjc1
VWRFWkotNlpWby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nzgwDQYJKoZIhvcNAQELBQADggEBAFbWaY4+GAZVwVaKJJKeKtbVIuDklQPcgvTZ
Zhd1oJscP9YEIZYwlWtIqF6BIeipxFNB3cbEjNFe064MpKi3i8hAcNCkxNeobS1F
ZWPYPIvHnAj5ij8QDha/ofAzdjWo3FjoD7nH5jtFaxPPVCtLdWLh5KxpicOt/GA/
sg0StkBiUFBbav0VhdMFhbO6lVxtGweg7ZwwfJf6CRWWGROiXDHPsAwRJDiOWtjT
dZ3qaDhoyNMmLCci965xCAc4gObI+SEtKSk+jGwGKpABv2SZDNQsdjXi2KgmhV2j
ryelHSjupADzMnogV2eet5yNT+Op7DElZKD5Cao/I5kD9XZn9W4=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org