Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmOJHXBiquF_q-PhF-M5GCQw7oE.roa
File: KmOJHXBiquF_q-PhF-M5GCQw7oE.roa (raw, json)
Hash identifier: 5FzPs524ntE2VWrMqMFLw9hzNwHtljX6c0KCGzr5WyY=
Subject key identifier: 2A:63:89:1D:70:62:AA:E1:7F:AB:E3:E1:17:E3:39:18:24:30:EE:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1524
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmOJHXBiquF_q-PhF-M5GCQw7oE.roa
Signing time: Fri 21 Oct 2022 08:18:02 +0000
ROA not before: Fri 21 Oct 2022 08:18:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.80.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5412 (0x1524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:18:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A63891D7062AAE17FABE3E117E339182430EE81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:15:a0:dd:05:64:39:6b:b5:fb:a0:ea:a5:
15:cc:03:89:e1:f9:cf:d5:7c:30:59:74:23:bb:8a:
0b:fd:bb:f5:7e:33:d6:a1:ac:de:80:a7:ed:fd:cf:
0f:f7:ec:65:9b:70:2a:5f:0a:c0:73:0c:d1:63:6e:
eb:e0:bd:2f:8c:c3:b8:a8:e9:9f:ca:88:2c:2e:c4:
77:ed:15:54:56:37:f4:e3:a6:94:b8:fe:ec:06:86:
a9:e2:ec:e2:41:e8:8b:65:62:69:66:b3:87:bb:eb:
c0:de:35:f5:e8:6c:0c:6e:86:d1:53:2a:09:bd:67:
48:55:f8:68:82:4d:a6:69:f9:85:cd:8a:03:10:da:
b3:85:3c:86:99:e4:0e:12:91:e4:fb:c5:f0:66:0a:
08:53:dd:50:b4:5c:cf:f6:1a:a9:76:58:8c:57:da:
cb:23:a5:15:b0:1b:d3:59:fe:a2:e8:23:22:b4:d0:
11:aa:6d:79:ba:58:85:fa:d3:50:1c:d2:97:09:56:
12:02:3e:96:fc:99:c7:c9:d8:24:a3:97:36:a0:19:
8f:5d:12:eb:77:6a:8c:0c:74:8b:50:d9:29:b1:b5:
56:76:4b:56:fc:92:57:0e:3b:00:2f:ec:b0:62:3c:
e0:23:3c:9e:63:53:07:f9:13:b8:f1:e8:1d:68:fa:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:89:1D:70:62:AA:E1:7F:AB:E3:E1:17:E3:39:18:24:30:EE:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmOJHXBiquF_q-PhF-M5GCQw7oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:55:7c:04:9b:0a:87:2a:62:63:7f:67:6c:de:16:dd:86:b7:
32:22:e5:cf:0b:66:69:6c:fc:b0:40:25:30:ef:31:3e:c6:04:
68:48:cf:54:f9:6b:cf:f1:7b:f0:99:2b:94:ee:6d:10:51:58:
87:42:9d:ce:e1:07:bb:90:2c:37:7b:07:7b:48:52:32:03:92:
d2:eb:04:81:83:4e:56:21:95:7d:3d:e0:04:36:db:31:64:d3:
1b:db:13:a4:0b:78:2c:61:44:24:00:81:cf:50:c0:d5:98:f7:
26:8a:16:d3:ae:69:b3:7e:65:54:ed:7d:63:fd:bc:e8:d9:55:
0c:45:f4:57:e9:e8:aa:aa:6c:f4:28:15:18:88:85:4a:00:c7:
60:a3:bb:23:1d:6d:f7:1f:42:b6:84:43:df:a3:b9:2b:88:fc:
42:70:a7:01:61:f9:45:61:d6:b5:5a:2d:e2:f9:fe:19:29:76:
b9:73:44:0d:15:2d:9c:b5:92:f3:b1:b0:20:f7:d7:1d:9a:37:
b9:7a:9b:5d:53:85:da:a4:af:b4:4f:6c:11:b6:af:b3:b5:98:
ea:1d:3b:37:85:89:7c:fe:30:64:b1:33:91:18:42:2d:c5:a6:
88:87:b2:d9:04:06:91:16:31:80:25:b7:b9:71:4d:10:ee:32:
20:fa:1c:24
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFSQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjEw
ODE4MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBNjM4OTFENzA2MkFB
RTE3RkFCRTNFMTE3RTMzOTE4MjQzMEVFODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZsxWg3QVkOWu1+6DqpRXMA4nh+c/VfDBZdCO7igv9u/V+M9ah
rN6Ap+39zw/37GWbcCpfCsBzDNFjbuvgvS+Mw7io6Z/KiCwuxHftFVRWN/TjppS4
/uwGhqni7OJB6ItlYmlms4e768DeNfXobAxuhtFTKgm9Z0hV+GiCTaZp+YXNigMQ
2rOFPIaZ5A4SkeT7xfBmCghT3VC0XM/2Gql2WIxX2ssjpRWwG9NZ/qLoIyK00BGq
bXm6WIX601Ac0pcJVhICPpb8mcfJ2CSjlzagGY9dEut3aowMdItQ2SmxtVZ2S1b8
klcOOwAv7LBiPOAjPJ5jUwf5E7jx6B1o+r3HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKmOJHXBiquF/q+PhF+M5GCQw7oEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ttT0pIWEJpcXVGX3EtUGhG
LU01R0NRdzdvRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
ZFAwDQYJKoZIhvcNAQELBQADggEBAH5VfASbCocqYmN/Z2zeFt2GtzIi5c8LZmls
/LBAJTDvMT7GBGhIz1T5a8/xe/CZK5TubRBRWIdCnc7hB7uQLDd7B3tIUjIDktLr
BIGDTlYhlX094AQ22zFk0xvbE6QLeCxhRCQAgc9QwNWY9yaKFtOuabN+ZVTtfWP9
vOjZVQxF9Ffp6KqqbPQoFRiIhUoAx2CjuyMdbfcfQraEQ9+juSuI/EJwpwFh+UVh
1rVaLeL5/hkpdrlzRA0VLZy1kvOxsCD31x2aN7l6m11Thdqkr7RPbBG2r7O1mOod
OzeFiXz+MGSxM5EYQi3FpoiHstkEBpEWMYAlt7lxTRDuMiD6HCQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org