Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ByJ8brIzuoxbMmMGqALpfVCkyjo.roa
File: ByJ8brIzuoxbMmMGqALpfVCkyjo.roa (raw, json)
Hash identifier: xv1b1xpKrlnDUDNDSVFCmwnvRxwvwbCABsn9QRpQI5g=
Subject key identifier: 07:22:7C:6E:B2:33:BA:8C:5B:32:63:06:A8:02:E9:7D:50:A4:CA:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19D2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ByJ8brIzuoxbMmMGqALpfVCkyjo.roa
Signing time: Sat 22 Oct 2022 06:11:32 +0000
ROA not before: Sat 22 Oct 2022 06:11:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6610 (0x19d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07227C6EB233BA8C5B326306A802E97D50A4CA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:a9:64:06:1f:49:e9:27:a3:7f:4d:4e:90:
d4:5a:f5:f3:e7:4e:de:a0:97:96:2a:47:ee:bb:a0:
12:69:be:3d:4d:e8:84:78:d2:25:2d:3d:de:f3:c1:
c5:69:6b:19:46:41:4a:1c:49:ea:c3:54:45:69:cc:
27:40:76:9b:b6:ce:67:04:a6:a6:7e:cf:5e:51:a6:
dc:2c:b6:42:fa:a2:07:27:93:81:07:84:3a:a2:12:
3d:1c:61:95:b0:81:63:76:8f:38:5e:59:af:40:6a:
de:ad:9a:13:58:e5:cf:82:5b:fb:59:1b:04:e9:f6:
db:51:9a:db:c9:e8:03:0d:c6:5a:9e:fa:3b:78:52:
2e:4a:12:da:31:2b:9a:74:ad:cf:e2:77:10:af:b2:
48:4d:24:ae:73:ce:33:a7:b9:1b:22:4c:6a:a3:81:
f3:88:40:92:93:94:c3:13:bc:30:ef:bd:f9:f2:08:
44:f4:b7:8d:8c:8d:fb:8b:08:b1:5c:13:48:28:3e:
df:90:27:07:c9:95:8f:5b:ac:5e:c1:f0:55:72:ae:
2f:18:d1:5f:7f:c4:a5:55:e1:2b:c4:c2:69:44:82:
12:2c:06:c8:69:28:36:d2:fe:1e:23:8c:72:7f:3e:
56:96:45:c4:85:fa:89:99:57:cc:a0:ab:92:6e:89:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:7C:6E:B2:33:BA:8C:5B:32:63:06:A8:02:E9:7D:50:A4:CA:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ByJ8brIzuoxbMmMGqALpfVCkyjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:a2:dc:ff:80:a3:e7:5f:98:a3:b6:a8:6a:d2:05:c8:89:47:
0a:d2:b9:59:44:aa:60:61:1e:19:6e:3f:62:91:c3:cf:18:29:
e9:2f:17:5d:50:6d:13:b7:e4:92:e2:7a:6b:9f:7e:4d:b0:c5:
06:cd:64:5c:75:4b:f2:ce:35:21:de:2d:7d:5f:46:4b:6a:94:
2d:9a:b9:5e:53:b8:ce:08:58:cc:a1:fa:8d:e3:3f:1d:6a:cd:
1f:21:47:67:5b:1a:22:3e:0a:01:9f:e3:b4:f7:0a:be:6b:6e:
b0:13:b4:f7:98:63:e9:24:37:db:f1:f9:3b:24:85:39:23:f5:
bd:d1:c1:c9:b8:ec:86:5f:f1:c1:f8:7d:4b:cd:8e:db:f0:d8:
38:82:30:9e:8a:1a:d3:96:b9:e3:f7:11:10:32:c5:0c:5c:dc:
f8:d6:a3:82:59:54:9d:cb:ea:f9:59:03:c0:e5:d7:46:73:54:
8f:4a:e0:3a:2f:70:b6:8c:0f:99:09:eb:99:0b:ca:8b:2c:1d:
95:48:35:c8:66:e4:1b:16:83:ef:b9:73:c9:ca:5a:91:79:07:
29:94:8c:23:8e:38:63:9c:1a:b0:49:8d:31:d9:c9:44:de:38:
29:43:ce:ca:4d:33:66:59:0d:db:4a:3c:5b:ac:1c:32:cd:65:
f5:71:ad:5b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjExMzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA3MjI3QzZFQjIzM0JB
OEM1QjMyNjMwNkE4MDJFOTdENTBBNENBM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDni6lkBh9J6Sejf01OkNRa9fPnTt6gl5YqR+67oBJpvj1N6IR4
0iUtPd7zwcVpaxlGQUocSerDVEVpzCdAdpu2zmcEpqZ+z15RptwstkL6ogcnk4EH
hDqiEj0cYZWwgWN2jzheWa9Aat6tmhNY5c+CW/tZGwTp9ttRmtvJ6AMNxlqe+jt4
Ui5KEtoxK5p0rc/idxCvskhNJK5zzjOnuRsiTGqjgfOIQJKTlMMTvDDvvfnyCET0
t42MjfuLCLFcE0goPt+QJwfJlY9brF7B8FVyri8Y0V9/xKVV4SvEwmlEghIsBshp
KDbS/h4jjHJ/PlaWRcSF+omZV8ygq5JuiTnnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUByJ8brIzuoxbMmMGqALpfVCkyjowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0J5Sjhickl6dW94Yk1tTUdx
QUxwZlZDa3lqby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBAA+i3P+Ao+dfmKO2qGrSBciJRwrSuVlEqmBh
HhluP2KRw88YKekvF11QbRO35JLiemuffk2wxQbNZFx1S/LONSHeLX1fRktqlC2a
uV5TuM4IWMyh+o3jPx1qzR8hR2dbGiI+CgGf47T3Cr5rbrATtPeYY+kkN9vx+Tsk
hTkj9b3Rwcm47IZf8cH4fUvNjtvw2DiCMJ6KGtOWueP3ERAyxQxc3PjWo4JZVJ3L
6vlZA8Dl10ZzVI9K4DovcLaMD5kJ65kLyossHZVINchm5BsWg++5c8nKWpF5BymU
jCOOOGOcGrBJjTHZyUTeOClDzspNM2ZZDdtKPFusHDLNZfVxrVs=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:38 2023 by rpki-client on console-ams.rpki-client.org