Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PqbWRbPHYx7oMy5n4oroIsvEE1I.roa
File: PqbWRbPHYx7oMy5n4oroIsvEE1I.roa (raw, json)
Hash identifier: wHQdVrgb5xVGST7mfwm/QJqJpipApoGHclCOIiV+45M=
Subject key identifier: 3E:A6:D6:45:B3:C7:63:1E:E8:33:2E:67:E2:8A:E8:22:CB:C4:13:52
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1518
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PqbWRbPHYx7oMy5n4oroIsvEE1I.roa
Signing time: Fri 21 Oct 2022 08:10:35 +0000
ROA not before: Fri 21 Oct 2022 08:10:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5400 (0x1518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:10:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3EA6D645B3C7631EE8332E67E28AE822CBC41352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:c6:22:6a:15:1e:72:b7:cc:31:f3:af:74:
4c:3c:96:3c:e6:43:72:be:6e:b6:0a:e5:4d:b0:4e:
dc:8b:8e:74:e5:06:a0:64:05:86:86:77:48:3b:a0:
86:7e:75:d9:1a:fc:55:f0:25:24:97:0c:f9:49:b2:
e3:c3:98:4d:72:8f:6c:55:ae:6c:b1:4e:f0:29:ed:
5c:46:a4:4a:ed:06:1b:59:e4:a9:60:a5:2b:0a:21:
db:4e:3a:33:32:01:8e:8c:7d:9b:89:dd:d0:19:ce:
b2:70:39:3e:ec:1a:4e:cb:d4:9e:ba:3c:3f:ef:d7:
8e:2b:ae:fa:91:29:af:2b:be:ca:4d:00:87:bf:73:
0c:8c:e0:9e:bf:88:35:13:a0:0f:a2:ed:eb:e3:c6:
19:4d:0a:ff:11:a5:6e:93:e9:ea:40:5a:66:a4:66:
ac:25:56:3a:f9:3b:1c:6d:e3:b3:62:d7:62:92:ca:
c6:74:3f:a9:72:e7:c1:78:6b:6e:64:9f:65:5c:ae:
84:06:09:d1:a3:92:61:0c:f9:31:65:7d:f8:b7:b8:
f1:a1:7f:02:f0:0c:2c:76:79:77:c9:e6:20:be:8e:
6a:e9:f0:95:7e:12:d5:f4:3c:f7:24:96:27:6a:d0:
36:e5:f4:2f:1d:fa:f0:30:e9:e4:a4:dc:47:69:24:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:D6:45:B3:C7:63:1E:E8:33:2E:67:E2:8A:E8:22:CB:C4:13:52
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PqbWRbPHYx7oMy5n4oroIsvEE1I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a9:75:3e:66:0f:dd:d5:d7:de:d6:c7:c7:18:ad:0f:cd:e1:
6c:41:cf:1b:0f:de:63:be:c2:b9:ff:3e:cd:10:09:28:66:1c:
eb:7a:98:be:47:24:99:b3:c7:b2:e4:8c:dc:f9:f9:06:c7:0b:
5e:59:09:91:72:24:0b:3c:1f:8d:9e:14:16:50:9d:17:46:2c:
9a:a2:a1:e9:4f:f3:a0:2c:2b:92:91:73:be:5f:18:6e:49:b7:
bb:1b:2c:fc:8c:49:70:01:bf:43:ce:74:80:a4:f4:95:08:ab:
6d:47:7e:2b:94:2e:84:ca:ff:ad:e5:16:28:db:cf:4d:28:ec:
16:31:8c:7b:47:6c:9d:59:47:3b:a6:f5:17:64:4d:af:9b:b1:
c4:8e:32:61:4a:d0:40:ae:e7:7a:6c:80:2c:7b:b1:4a:d1:d3:
a3:32:70:96:da:d4:dd:03:1c:b2:c7:7a:72:4c:6b:29:b7:2b:
1f:4b:bd:48:12:35:51:18:6a:82:71:d7:28:77:84:e6:11:46:
13:fa:93:61:4f:e4:37:04:0a:04:43:0b:a2:0d:09:97:b4:0e:
ab:74:57:0f:d5:02:4a:89:bb:8a:a2:0e:28:9a:24:51:db:b8:
9f:7c:9b:14:b0:c5:e9:a3:ac:ca:34:f9:02:30:c9:5e:6e:4a:
91:8e:f6:e4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFRgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjEw
ODEwMzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNFQTZENjQ1QjNDNzYz
MUVFODMzMkU2N0UyOEFFODIyQ0JDNDEzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC73MYiahUecrfMMfOvdEw8ljzmQ3K+brYK5U2wTtyLjnTlBqBk
BYaGd0g7oIZ+ddka/FXwJSSXDPlJsuPDmE1yj2xVrmyxTvAp7VxGpErtBhtZ5Klg
pSsKIdtOOjMyAY6MfZuJ3dAZzrJwOT7sGk7L1J66PD/v144rrvqRKa8rvspNAIe/
cwyM4J6/iDUToA+i7evjxhlNCv8RpW6T6epAWmakZqwlVjr5Oxxt47Ni12KSysZ0
P6ly58F4a25kn2VcroQGCdGjkmEM+TFlffi3uPGhfwLwDCx2eXfJ5iC+jmrp8JV+
EtX0PPcklidq0Dbl9C8d+vAw6eSk3EdpJKlLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPqbWRbPHYx7oMy5n4oroIsvEE1IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BxYldSYlBIWXg3b015NW40
b3JvSXN2RUUxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ6
ZEAwDQYJKoZIhvcNAQELBQADggEBAAmpdT5mD93V197Wx8cYrQ/N4WxBzxsP3mO+
wrn/Ps0QCShmHOt6mL5HJJmzx7LkjNz5+QbHC15ZCZFyJAs8H42eFBZQnRdGLJqi
oelP86AsK5KRc75fGG5Jt7sbLPyMSXABv0POdICk9JUIq21HfiuULoTK/63lFijb
z00o7BYxjHtHbJ1ZRzum9RdkTa+bscSOMmFK0ECu53psgCx7sUrR06MycJba1N0D
HLLHenJMaym3Kx9LvUgSNVEYaoJx1yh3hOYRRhP6k2FP5DcECgRDC6INCZe0Dqt0
Vw/VAkqJu4qiDiiaJFHbuJ98mxSwxemjrMo0+QIwyV5uSpGO9uQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org