Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ok6EAi10h0ot3gbOLcWHsb-BAeI.roa
File: Ok6EAi10h0ot3gbOLcWHsb-BAeI.roa (raw, json)
Hash identifier: iWMa9WKgPOVFNGQyV/lhvEu+1ZRrpg0o6BiLxm6ixwY=
Subject key identifier: 3A:4E:84:02:2D:74:87:4A:2D:DE:06:CE:2D:C5:87:B1:BF:81:01:E2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ok6EAi10h0ot3gbOLcWHsb-BAeI.roa
Signing time: Thu 15 Sep 2022 02:36:33 +0000
ROA not before: Thu 15 Sep 2022 02:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A4E84022D74874A2DDE06CE2DC587B1BF8101E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:73:e1:46:a9:50:31:b9:aa:59:6a:c4:6c:
ce:04:cb:bc:13:c0:98:4e:ef:05:a1:6b:91:c1:fe:
07:48:a6:7d:41:54:ea:ab:19:bf:e4:f2:e6:77:c6:
a9:57:41:76:64:09:22:dd:50:82:ec:bd:a0:96:b3:
ce:12:f9:76:23:b7:85:50:1e:ef:e9:96:5c:c3:ef:
d9:16:8f:33:d7:f8:c5:e1:7a:89:ab:57:c0:df:c4:
38:4f:39:6f:60:21:be:04:4e:25:1f:7f:c3:1f:76:
fe:40:23:dc:0b:74:34:13:24:e7:88:9b:c4:f7:3d:
96:63:60:24:fc:89:67:a5:e9:7a:38:1e:7d:04:f8:
4b:a5:4d:63:89:6b:2d:95:a0:81:5e:53:f1:ff:85:
ec:1d:7b:0d:5e:3a:94:93:e7:e1:4b:5f:cf:eb:21:
3d:41:9e:b3:68:63:d0:35:62:43:6a:48:01:8f:57:
ea:29:40:ff:d2:48:e9:a7:19:82:a4:cc:8c:6e:28:
72:b4:15:81:47:57:66:05:4a:14:63:85:c6:d2:b6:
9b:ff:28:10:a2:34:24:1c:09:f4:fc:75:8d:1b:4d:
8d:f3:38:f6:d4:df:c6:3e:9c:5f:55:a0:24:a0:55:
bf:89:e1:d3:99:1f:1f:80:93:df:3f:6e:f8:8f:6f:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:84:02:2D:74:87:4A:2D:DE:06:CE:2D:C5:87:B1:BF:81:01:E2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ok6EAi10h0ot3gbOLcWHsb-BAeI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.42.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9e:d6:63:b0:9d:92:cf:63:58:2b:91:88:1c:55:31:a9:9b:
94:b4:f9:32:69:3e:e8:89:59:3e:f7:83:97:ed:d3:2a:05:30:
9a:68:2d:f1:ce:e0:5c:73:bd:c2:1a:87:17:87:41:76:0b:92:
1a:a2:3d:b3:6a:ae:56:c5:7e:36:50:15:e2:ba:7e:80:6a:91:
b4:f9:32:5c:27:72:0d:98:d0:95:db:9b:e6:3c:4a:11:99:86:
ad:27:c0:41:0e:61:af:4e:95:a5:78:cd:37:32:6f:6e:67:0c:
81:6c:67:14:fa:04:67:6d:3b:00:6e:f3:76:86:50:f5:95:ee:
e8:50:10:2f:fc:a2:37:18:cd:f5:45:99:91:7d:a1:9e:cf:dd:
a9:e5:c6:16:f8:db:3f:db:1a:85:ac:d4:95:dd:da:e7:de:2e:
4f:99:da:2d:81:75:97:bf:68:4f:be:ee:ba:ba:7c:ff:67:40:
87:10:be:14:d4:ce:81:12:77:fc:66:1f:86:4f:43:28:e5:a7:
e3:63:6b:9e:aa:69:c3:92:01:cb:55:bd:b0:76:a5:30:75:8e:
e3:ab:73:c2:19:b8:b9:0e:e1:90:0e:4f:53:e4:31:e0:db:fb:
81:23:a7:96:da:8f:a0:b4:ef:18:eb:4a:ba:11:fe:ff:c2:28:
7f:98:66:f3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNBNEU4NDAyMkQ3NDg3
NEEyRERFMDZDRTJEQzU4N0IxQkY4MTAxRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL6nPhRqlQMbmqWWrEbM4Ey7wTwJhO7wWha5HB/gdIpn1BVOqr
Gb/k8uZ3xqlXQXZkCSLdUILsvaCWs84S+XYjt4VQHu/pllzD79kWjzPX+MXheomr
V8DfxDhPOW9gIb4ETiUff8Mfdv5AI9wLdDQTJOeIm8T3PZZjYCT8iWel6Xo4Hn0E
+EulTWOJay2VoIFeU/H/hewdew1eOpST5+FLX8/rIT1BnrNoY9A1YkNqSAGPV+op
QP/SSOmnGYKkzIxuKHK0FYFHV2YFShRjhcbStpv/KBCiNCQcCfT8dY0bTY3zOPbU
38Y+nF9VoCSgVb+J4dOZHx+Ak98/bviPbx5DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOk6EAi10h0ot3gbOLcWHsb+BAeIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL09rNkVBaTEwaDBvdDNnYk9M
Y1dIc2ItQkFlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
ACowDQYJKoZIhvcNAQELBQADggEBAEOe1mOwnZLPY1grkYgcVTGpm5S0+TJpPuiJ
WT73g5ft0yoFMJpoLfHO4FxzvcIahxeHQXYLkhqiPbNqrlbFfjZQFeK6foBqkbT5
Mlwncg2Y0JXbm+Y8ShGZhq0nwEEOYa9OlaV4zTcyb25nDIFsZxT6BGdtOwBu83aG
UPWV7uhQEC/8ojcYzfVFmZF9oZ7P3anlxhb42z/bGoWs1JXd2ufeLk+Z2i2BdZe/
aE++7rq6fP9nQIcQvhTUzoESd/xmH4ZPQyjlp+Nja56qacOSActVvbB2pTB1juOr
c8IZuLkO4ZAOT1PkMeDb+4Ejp5baj6C07xjrSroR/v/CKH+YZvM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org