Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CLX_rnUcMUn79jAFWbsO-Vix7ig.roa
File: CLX_rnUcMUn79jAFWbsO-Vix7ig.roa (raw, json)
Hash identifier: 5UcE3dQip/FMqQ5SBCojuGyriE9L+7zEI4CXbuBvAKo=
Subject key identifier: 08:B5:FF:AE:75:1C:31:49:FB:F6:30:05:59:BB:0E:F9:58:B1:EE:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1568
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CLX_rnUcMUn79jAFWbsO-Vix7ig.roa
Signing time: Fri 21 Oct 2022 09:34:42 +0000
ROA not before: Fri 21 Oct 2022 09:34:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.192.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5480 (0x1568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 09:34:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=08B5FFAE751C3149FBF6300559BB0EF958B1EE28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:84:4c:9c:0f:03:54:83:83:ee:b0:44:ab:
64:33:e4:1f:82:2a:e6:1d:31:43:bb:4b:6e:06:40:
1d:7a:5d:ae:b3:16:f6:1a:ab:8d:5a:dd:d4:cf:0f:
18:41:c5:82:de:41:35:b5:fe:6a:53:d5:ac:6b:3e:
1d:0d:21:d0:72:62:e0:0e:25:47:50:38:45:3a:d5:
0a:e1:3c:66:2e:6d:08:95:22:c4:9e:a2:56:b0:a5:
35:99:45:22:73:63:33:e9:8a:50:15:f2:74:5e:53:
99:d5:c6:a4:ca:6d:3a:4e:b0:db:84:b1:e8:bd:9e:
69:e1:42:ae:3e:b8:97:c4:39:3b:40:41:f8:33:b8:
bc:b8:64:57:5b:e5:dd:e9:39:24:dc:2c:ed:6b:7f:
6a:90:ac:d7:66:3f:61:b0:e4:dc:40:d9:72:e6:a7:
96:32:be:c8:86:59:2c:e9:b6:0b:53:45:ee:71:ec:
38:ca:41:6e:04:ac:8d:d3:ae:f0:91:7d:66:53:7e:
f4:21:3f:bc:77:7a:a0:7a:77:b2:4d:10:b7:34:a1:
88:f7:43:92:11:5a:49:45:cc:dc:94:8e:5e:b0:2b:
ef:f0:26:58:8d:c5:db:ba:74:39:cd:e7:10:f1:58:
ff:7b:13:bc:e0:7c:b6:b2:2b:ed:0e:20:18:2b:a3:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:FF:AE:75:1C:31:49:FB:F6:30:05:59:BB:0E:F9:58:B1:EE:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CLX_rnUcMUn79jAFWbsO-Vix7ig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:40:0b:e5:a2:86:07:45:f2:f9:7d:f3:8f:c4:f5:a7:1b:8c:
34:20:ee:c7:49:e5:67:e5:f5:c7:d3:58:7f:71:64:f5:e1:33:
13:ec:24:b6:1d:d8:a3:ec:22:0e:ee:4d:72:22:c4:41:f2:9a:
b2:66:ce:b4:02:d8:64:e8:79:f5:91:ff:03:c7:b5:e6:19:a9:
29:99:d0:78:81:44:ce:e0:2f:87:10:4d:dc:73:6b:15:10:11:
0c:1a:7b:8d:59:00:8f:85:82:6b:69:28:cd:2e:a7:5e:bf:9e:
5b:6a:76:af:61:bb:1b:e9:45:ac:d3:99:e7:f3:74:26:6a:dd:
4e:47:89:2e:7c:21:21:42:87:74:87:25:77:08:87:4d:1c:9b:
44:bf:99:95:eb:90:a7:00:6d:22:68:b4:e9:42:86:ee:13:cc:
5b:e5:88:96:47:a3:e9:ae:2c:e7:e6:01:8d:56:cf:e9:1a:58:
f5:f0:3d:87:35:e3:19:c1:1c:da:79:14:6d:be:38:1d:b7:b0:
4a:63:1f:8d:47:48:b8:4f:92:87:53:6c:f6:bd:44:71:f6:c3:
32:bd:12:db:5c:ac:6f:73:0b:30:ad:a2:1f:0f:d5:2a:8b:b6:
6f:e8:4a:7e:6b:a7:2c:16:2a:6d:0f:bc:41:1c:16:77:30:ba:
c4:ab:96:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjEw
OTM0NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA4QjVGRkFFNzUxQzMx
NDlGQkY2MzAwNTU5QkIwRUY5NThCMUVFMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVkIRMnA8DVIOD7rBEq2Qz5B+CKuYdMUO7S24GQB16Xa6zFvYa
q41a3dTPDxhBxYLeQTW1/mpT1axrPh0NIdByYuAOJUdQOEU61QrhPGYubQiVIsSe
olawpTWZRSJzYzPpilAV8nReU5nVxqTKbTpOsNuEsei9nmnhQq4+uJfEOTtAQfgz
uLy4ZFdb5d3pOSTcLO1rf2qQrNdmP2Gw5NxA2XLmp5YyvsiGWSzptgtTRe5x7DjK
QW4ErI3TrvCRfWZTfvQhP7x3eqB6d7JNELc0oYj3Q5IRWklFzNyUjl6wK+/wJliN
xdu6dDnN5xDxWP97E7zgfLayK+0OIBgro4+/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCLX/rnUcMUn79jAFWbsO+Vix7igwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0NMWF9yblVjTVVuNzlqQUZX
YnNPLVZpeDdpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nsAwDQYJKoZIhvcNAQELBQADggEBAFxAC+WihgdF8vl984/E9acbjDQg7sdJ5Wfl
9cfTWH9xZPXhMxPsJLYd2KPsIg7uTXIixEHymrJmzrQC2GToefWR/wPHteYZqSmZ
0HiBRM7gL4cQTdxzaxUQEQwae41ZAI+FgmtpKM0up16/nltqdq9huxvpRazTmefz
dCZq3U5HiS58ISFCh3SHJXcIh00cm0S/mZXrkKcAbSJotOlChu4TzFvliJZHo+mu
LOfmAY1Wz+kaWPXwPYc14xnBHNp5FG2+OB23sEpjH41HSLhPkodTbPa9RHH2wzK9
EttcrG9zCzCtoh8P1SqLtm/oSn5rpywWKm0PvEEcFncwusSrlm4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org