Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IeEeYjzJeVCiPQC_9mFDlexJWEk.roa
File: IeEeYjzJeVCiPQC_9mFDlexJWEk.roa (raw, json)
Hash identifier: LRd+l9yuqJliYJlrx7DRiWqdZx62iNy5VbFOS30Vqv0=
Subject key identifier: 21:E1:1E:62:3C:C9:79:50:A2:3D:00:BF:F6:61:43:95:EC:49:58:49
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B5F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IeEeYjzJeVCiPQC_9mFDlexJWEk.roa
Signing time: Fri 07 Apr 2023 07:17:25 +0000
ROA not before: Fri 07 Apr 2023 07:17:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.32.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7007 (0x1b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:17:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21E11E623CC97950A23D00BFF6614395EC495849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:56:52:b6:e1:e8:4c:34:e0:09:24:94:af:
16:8b:ae:cc:84:e9:46:fa:e9:91:cb:4c:b5:b3:3e:
ce:9e:3f:53:15:32:53:9a:5c:39:d1:18:1f:d0:d7:
5a:a5:b7:54:5b:2b:7c:70:61:8b:4e:92:18:b7:9b:
f7:64:7e:41:9e:39:81:c9:17:c9:67:b7:a0:b3:01:
3e:06:b9:c6:02:3f:0d:d8:a1:09:b0:b5:83:1d:d0:
6f:22:0c:ae:79:2c:e3:42:16:06:45:a8:96:dd:48:
73:8a:56:aa:5c:7c:92:47:a9:85:08:13:6f:b3:0c:
03:7d:56:dc:ed:d8:e2:26:e2:57:11:e3:25:d5:b7:
e6:4f:a7:46:9e:ec:5f:21:69:06:c2:1d:29:a5:d8:
81:d2:23:42:99:9c:2e:93:0c:a9:d9:dd:b5:c5:dc:
e2:5e:0e:7b:64:e6:49:38:79:9c:92:b0:27:4d:4e:
5c:fb:07:4a:81:90:16:3e:b5:db:fd:9d:91:40:4f:
e8:e6:98:0a:5b:ab:2e:28:44:02:60:8b:25:19:2d:
37:10:63:5b:be:5c:09:b4:05:a1:8c:e6:b6:d1:cd:
76:8a:1b:47:da:8d:c4:f9:ec:9d:e7:f0:06:e4:78:
61:7a:ee:be:a6:3c:31:12:91:e7:d6:e1:60:77:0b:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:1E:62:3C:C9:79:50:A2:3D:00:BF:F6:61:43:95:EC:49:58:49
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IeEeYjzJeVCiPQC_9mFDlexJWEk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
21:58:54:b9:8e:27:2f:fb:fb:fe:42:8e:84:7e:f8:d8:42:90:
3f:88:20:43:05:d2:6d:2e:e3:d3:b6:b4:37:9f:9b:c0:5e:22:
47:e3:76:44:71:0d:29:29:fc:58:93:eb:cf:51:fe:74:d8:3f:
86:be:1e:ec:53:09:5f:75:48:bb:bf:03:b8:cc:18:45:df:4c:
4f:c2:88:a3:4a:6a:05:98:8c:e7:fc:0f:ea:2c:c5:17:0a:55:
bd:22:8b:37:71:41:28:4c:dc:94:a4:58:e8:7f:26:b0:67:f1:
d5:03:10:06:ea:b8:59:e5:02:7f:57:32:e3:e9:58:42:b0:a9:
e1:bc:53:d2:d7:9c:8e:14:a8:0f:5a:aa:bd:be:51:8c:be:a8:
98:f8:c6:bf:08:53:d5:6f:88:fd:7c:2c:9b:47:8f:f3:8e:f0:
99:6d:c7:3d:6b:f8:c8:63:61:41:ed:c5:49:99:6a:88:8c:66:
57:ee:fe:77:0b:08:97:a7:a1:86:a7:f7:71:16:81:3b:c9:75:
28:24:7c:7c:b3:ef:4c:e7:1c:75:78:0d:fd:04:0e:40:5b:cc:
90:a6:ce:65:38:75:c5:1f:6a:11:90:d8:25:17:a2:d2:04:42:
7a:e0:ff:05:be:b4:91:be:1e:46:43:aa:92:7e:ae:b2:1d:65:
5e:cc:a4:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA0MDcw
NzE3MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIxRTExRTYyM0NDOTc5
NTBBMjNEMDBCRkY2NjE0Mzk1RUM0OTU4NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcNlZStuHoTDTgCSSUrxaLrsyE6Ub66ZHLTLWzPs6eP1MVMlOa
XDnRGB/Q11qlt1RbK3xwYYtOkhi3m/dkfkGeOYHJF8lnt6CzAT4GucYCPw3YoQmw
tYMd0G8iDK55LONCFgZFqJbdSHOKVqpcfJJHqYUIE2+zDAN9Vtzt2OIm4lcR4yXV
t+ZPp0ae7F8haQbCHSml2IHSI0KZnC6TDKnZ3bXF3OJeDntk5kk4eZySsCdNTlz7
B0qBkBY+tdv9nZFAT+jmmApbqy4oRAJgiyUZLTcQY1u+XAm0BaGM5rbRzXaKG0fa
jcT57J3n8AbkeGF67r6mPDESkefW4WB3Cy9lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIeEeYjzJeVCiPQC/9mFDlexJWEkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0llRWVZanpKZVZDaVBRQ185
bUZEbGV4SldFay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
ACAwDQYJKoZIhvcNAQELBQADggEBACFYVLmOJy/7+/5CjoR++NhCkD+IIEMF0m0u
49O2tDefm8BeIkfjdkRxDSkp/FiT689R/nTYP4a+HuxTCV91SLu/A7jMGEXfTE/C
iKNKagWYjOf8D+osxRcKVb0iizdxQShM3JSkWOh/JrBn8dUDEAbquFnlAn9XMuPp
WEKwqeG8U9LXnI4UqA9aqr2+UYy+qJj4xr8IU9VviP18LJtHj/OO8Jltxz1r+Mhj
YUHtxUmZaoiMZlfu/ncLCJenoYan93EWgTvJdSgkfHyz70znHHV4Df0EDkBbzJCm
zmU4dcUfahGQ2CUXotIEQnrg/wW+tJG+HkZDqpJ+rrIdZV7MpFc=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org