Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqcWjqApPYrn9pfFKegLsZ1QNvk.roa
File: LqcWjqApPYrn9pfFKegLsZ1QNvk.roa (raw, json)
Hash identifier: sqs8itvjUDKemWbukGfnh/r0ITtHPMy/XSqCollT9uk=
Subject key identifier: 2E:A7:16:8E:A0:29:3D:8A:E7:F6:97:C5:29:E8:0B:B1:9D:50:36:F9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1961
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqcWjqApPYrn9pfFKegLsZ1QNvk.roa
Signing time: Sat 22 Oct 2022 06:06:28 +0000
ROA not before: Sat 22 Oct 2022 06:06:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6497 (0x1961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2EA7168EA0293D8AE7F697C529E80BB19D5036F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:93:02:e2:9a:73:9d:04:f7:d9:d9:62:72:
7a:d3:51:d9:bb:df:e2:75:97:b3:0b:9f:10:fe:cf:
21:a6:6c:5f:3b:f9:a7:31:6e:8a:3e:c2:85:c2:fe:
66:05:b5:30:32:73:f1:b3:87:52:4a:31:d1:af:73:
64:bd:61:37:7c:98:40:47:75:17:fb:f3:de:d5:95:
ec:87:12:f1:0a:c1:80:55:cc:7a:9e:56:6e:8e:14:
eb:a8:89:58:ea:83:13:8c:1e:24:e5:93:d6:2c:bf:
4c:7b:db:9f:37:f3:5e:0e:6c:e2:ed:e4:8c:25:64:
05:72:41:a1:c3:31:74:bf:85:c4:28:3b:d8:46:1e:
09:ff:28:9b:45:32:9a:e4:24:dd:03:31:43:83:8b:
ab:b4:c6:ba:75:9c:69:eb:10:2d:d5:b8:b2:fd:7f:
09:86:31:b1:50:3f:89:47:cc:c9:a6:bf:3a:57:21:
34:37:cd:1f:ad:1b:21:ed:99:86:78:55:f5:30:e4:
b6:fd:88:60:aa:91:23:26:79:67:4b:fa:59:f5:05:
f7:74:ef:5e:e4:ba:f0:e1:f4:20:b5:ad:ab:29:92:
84:7f:03:40:2f:5f:36:b7:92:ae:26:fc:b2:7c:d4:
87:74:07:9c:a2:d9:06:23:55:05:7e:04:cd:66:9f:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:16:8E:A0:29:3D:8A:E7:F6:97:C5:29:E8:0B:B1:9D:50:36:F9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqcWjqApPYrn9pfFKegLsZ1QNvk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
30:5c:f7:95:8c:3a:6e:54:28:cc:56:8d:d1:17:b8:ac:83:b9:
ce:fb:51:a2:cd:39:06:16:0b:38:01:42:7f:39:42:78:66:b8:
b2:a7:10:7b:d4:49:db:db:f5:0d:3c:0a:e5:e7:ab:f2:c5:e8:
5e:0b:b6:68:5f:b0:c5:a0:d2:dd:af:1a:79:27:76:96:7c:86:
30:23:65:76:4b:70:17:6a:c7:f3:c6:e8:e3:c4:91:ef:db:cf:
c0:37:8d:5f:7d:f9:63:0a:35:29:b7:d9:83:dc:f5:cf:d0:50:
09:31:de:ba:4e:fa:46:9b:58:77:be:10:61:73:6e:5d:be:78:
3d:67:c9:a3:b5:7e:99:2a:09:3d:bf:a9:c2:2e:2f:90:9a:88:
48:e6:5b:ff:1d:0c:62:85:ea:79:96:05:80:ab:66:73:df:21:
d9:46:ca:24:26:c5:4d:22:e5:ae:4e:11:ad:3d:b0:39:89:b1:
e4:91:8e:c3:ef:63:96:a4:ee:1b:13:39:cc:c7:c0:43:c7:29:
bb:46:1d:fc:ef:cd:c9:fd:2f:e7:00:26:6d:a6:dc:02:dc:cf:
86:04:cb:47:58:36:d1:c2:14:ec:f3:7c:a2:f3:76:5e:1f:34:
3b:17:e2:bd:2c:75:84:2e:55:09:0b:6b:f8:45:16:52:1b:94:
b5:89:39:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJFQTcxNjhFQTAyOTNE
OEFFN0Y2OTdDNTI5RTgwQkIxOUQ1MDM2RjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAEpMC4ppznQT32dlicnrTUdm73+J1l7MLnxD+zyGmbF87+acx
boo+woXC/mYFtTAyc/Gzh1JKMdGvc2S9YTd8mEBHdRf7897VleyHEvEKwYBVzHqe
Vm6OFOuoiVjqgxOMHiTlk9Ysv0x72583814ObOLt5IwlZAVyQaHDMXS/hcQoO9hG
Hgn/KJtFMprkJN0DMUODi6u0xrp1nGnrEC3VuLL9fwmGMbFQP4lHzMmmvzpXITQ3
zR+tGyHtmYZ4VfUw5Lb9iGCqkSMmeWdL+ln1Bfd0717kuvDh9CC1raspkoR/A0Av
Xza3kq4m/LJ81Id0B5yi2QYjVQV+BM1mn9z/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULqcWjqApPYrn9pfFKegLsZ1QNvkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xxY1dqcUFwUFlybjlwZkZL
ZWdMc1oxUU52ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQx
niAwDQYJKoZIhvcNAQELBQADggEBADBc95WMOm5UKMxWjdEXuKyDuc77UaLNOQYW
CzgBQn85QnhmuLKnEHvUSdvb9Q08CuXnq/LF6F4LtmhfsMWg0t2vGnkndpZ8hjAj
ZXZLcBdqx/PG6OPEke/bz8A3jV99+WMKNSm32YPc9c/QUAkx3rpO+kabWHe+EGFz
bl2+eD1nyaO1fpkqCT2/qcIuL5CaiEjmW/8dDGKF6nmWBYCrZnPfIdlGyiQmxU0i
5a5OEa09sDmJseSRjsPvY5ak7hsTOczHwEPHKbtGHfzvzcn9L+cAJm2m3ALcz4YE
y0dYNtHCFOzzfKLzdl4fNDsX4r0sdYQuVQkLa/hFFlIblLWJOVQ=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:14 2023 by rpki-client on console-fra.rpki-client.org