Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HS_YH7P8h4O3LqYVlYPvip6sgPI.roa
File: HS_YH7P8h4O3LqYVlYPvip6sgPI.roa (raw, json)
Hash identifier: OH7xGeQM4o6kYAM0hFxUfEUTci6lt19xoSAbEgwny6k=
Subject key identifier: 1D:2F:D8:1F:B3:FC:87:83:B7:2E:A6:15:95:83:EF:8A:9E:AC:80:F2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 199A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HS_YH7P8h4O3LqYVlYPvip6sgPI.roa
Signing time: Sat 22 Oct 2022 06:06:44 +0000
ROA not before: Sat 22 Oct 2022 06:06:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 124.6.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6554 (0x199a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1D2FD81FB3FC8783B72EA6159583EF8A9EAC80F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:7e:3e:36:ca:b9:d6:33:37:ac:38:44:f7:
62:2e:36:d7:1f:c2:70:0e:9c:3b:31:41:b6:72:0f:
3c:81:53:8e:69:a7:d6:ae:7c:78:89:ff:0c:88:37:
89:d5:9b:8c:7d:f7:34:24:40:64:60:c4:9b:18:8d:
62:ed:84:05:e3:c4:b7:75:45:86:7a:05:4a:ae:3b:
57:26:62:f9:62:85:70:6c:68:ac:76:80:c0:d5:ad:
98:3f:08:3d:d4:99:7d:ba:60:9c:e5:f3:ce:0b:9f:
6b:9e:00:12:6a:5d:05:02:60:e0:43:26:9b:0f:72:
d4:31:8e:85:b1:ea:64:08:96:91:09:9e:49:5f:7e:
9d:36:47:57:19:e2:9e:ef:32:be:46:5a:11:d2:49:
85:cd:49:35:28:11:26:df:74:14:cd:1e:f9:39:bc:
91:18:dc:d3:ea:b5:06:bc:f8:0e:f7:6a:8c:60:e6:
58:75:e1:87:68:25:ab:47:04:f3:eb:5a:cb:65:b0:
ac:45:e0:76:e4:ad:be:ae:f0:d1:51:e7:74:51:8b:
71:21:72:70:27:e4:d4:73:d2:4a:0c:01:87:19:f3:
b6:3a:dc:3d:05:13:26:36:2c:1c:5d:38:48:d2:d9:
60:50:44:36:13:6f:0d:cd:91:00:77:23:c8:45:7a:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:D8:1F:B3:FC:87:83:B7:2E:A6:15:95:83:EF:8A:9E:AC:80:F2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HS_YH7P8h4O3LqYVlYPvip6sgPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:12:50:b7:7a:52:69:49:c5:8c:b7:34:68:06:69:08:b7:d7:
3f:e8:68:5b:d2:da:f5:54:64:68:aa:e5:1f:0d:5b:1f:91:0a:
ff:a9:67:32:49:21:01:d0:67:6a:67:5e:35:f0:ad:66:17:6d:
45:67:69:85:e7:38:01:1f:9b:b1:fe:94:8a:0a:b9:e6:ae:61:
82:7e:2d:8a:2d:20:5b:1f:39:d3:a4:a3:53:58:b4:2c:a1:54:
be:0d:a6:20:d8:cf:86:f7:80:d2:ba:06:5f:f2:c8:93:30:f9:
a2:9a:6e:d4:20:fc:ee:cc:f4:4c:94:9d:a3:3e:d5:1c:62:1c:
a4:02:ce:bb:54:90:3e:1e:ec:c6:45:d5:cb:83:54:7e:91:0a:
0d:88:65:21:aa:5b:6c:db:82:7a:de:ee:db:ed:a8:ee:f5:fa:
9c:a5:f8:cd:e8:39:0d:98:6d:ed:eb:c4:ca:68:d5:4d:ad:50:
ad:e7:bc:52:ea:2b:86:95:a9:b8:bd:96:df:cf:2f:57:66:a4:
dd:9b:7e:87:00:50:3e:7d:1c:b9:b9:e9:97:50:c2:a2:33:23:
08:f6:2f:11:49:4d:6f:35:f1:15:bf:02:4b:40:7b:8c:46:77:
9f:b4:cf:3e:02:d1:27:67:3a:a5:e8:b2:21:a4:3c:1c:2d:50:
f0:77:e7:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFEMkZEODFGQjNGQzg3
ODNCNzJFQTYxNTk1ODNFRjhBOUVBQzgwRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhHX4+Nsq51jM3rDhE92IuNtcfwnAOnDsxQbZyDzyBU45pp9au
fHiJ/wyIN4nVm4x99zQkQGRgxJsYjWLthAXjxLd1RYZ6BUquO1cmYvlihXBsaKx2
gMDVrZg/CD3UmX26YJzl884Ln2ueABJqXQUCYOBDJpsPctQxjoWx6mQIlpEJnklf
fp02R1cZ4p7vMr5GWhHSSYXNSTUoESbfdBTNHvk5vJEY3NPqtQa8+A73aoxg5lh1
4YdoJatHBPPrWstlsKxF4Hbkrb6u8NFR53RRi3EhcnAn5NRz0koMAYcZ87Y63D0F
EyY2LBxdOEjS2WBQRDYTbw3NkQB3I8hFegD7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHS/YH7P8h4O3LqYVlYPvip6sgPIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0hTX1lIN1A4aDRPM0xxWVZs
WVB2aXA2c2dQSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV8
BgAwDQYJKoZIhvcNAQELBQADggEBAAASULd6UmlJxYy3NGgGaQi31z/oaFvS2vVU
ZGiq5R8NWx+RCv+pZzJJIQHQZ2pnXjXwrWYXbUVnaYXnOAEfm7H+lIoKueauYYJ+
LYotIFsfOdOko1NYtCyhVL4NpiDYz4b3gNK6Bl/yyJMw+aKabtQg/O7M9EyUnaM+
1RxiHKQCzrtUkD4e7MZF1cuDVH6RCg2IZSGqW2zbgnre7tvtqO71+pyl+M3oOQ2Y
be3rxMpo1U2tUK3nvFLqK4aVqbi9lt/PL1dmpN2bfocAUD59HLm56ZdQwqIzIwj2
LxFJTW818RW/AktAe4xGd5+0zz4C0SdnOqXosiGkPBwtUPB35xw=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:39 2023 by rpki-client on console-ams.rpki-client.org