Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rse8-jLUzyKAxePxq8zV50nZio0.roa
File: Rse8-jLUzyKAxePxq8zV50nZio0.roa (raw, json)
Hash identifier: OilXeOoPF2G9CUbWoHbiXWnP4AjH45xyNftk0aJV7MU=
Subject key identifier: 46:C7:BC:FA:32:D4:CF:22:80:C5:E3:F1:AB:CC:D5:E7:49:D9:8A:8D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1920
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rse8-jLUzyKAxePxq8zV50nZio0.roa
Signing time: Sat 22 Oct 2022 06:06:08 +0000
ROA not before: Sat 22 Oct 2022 06:06:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6432 (0x1920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=46C7BCFA32D4CF2280C5E3F1ABCCD5E749D98A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:49:6e:60:42:d0:84:93:db:55:6d:bc:63:
4f:a7:df:03:1e:e5:a2:f5:d5:74:d1:fa:b0:c2:76:
d9:28:28:11:27:94:ca:f5:54:e2:64:6f:b3:35:2e:
87:cb:41:0f:1e:fa:ac:2c:20:55:ba:7f:59:40:1f:
1d:aa:71:56:e9:36:b8:21:af:28:a3:a6:8f:8c:37:
ad:8e:6b:44:9e:d8:d8:4d:c9:1c:4e:5c:29:8f:65:
22:44:54:eb:06:93:6f:4e:c6:38:a9:40:fb:c8:b5:
70:d6:4d:91:35:1b:c7:24:6e:0d:16:fc:d7:b3:28:
3e:5e:29:a5:5b:fb:b8:75:6e:e8:23:45:3c:a7:84:
2a:bd:a2:94:98:26:9c:d1:4d:cc:7a:e2:bb:b8:28:
40:f6:8e:99:fa:24:bb:97:c9:b7:0f:7b:97:f6:f6:
d5:c4:d8:d4:bb:fa:29:c5:68:e5:f0:a7:7a:a9:8d:
a6:00:b1:8b:a9:90:24:69:b6:51:4f:11:c6:56:23:
9c:2e:8a:cd:f0:42:c8:b9:99:b3:a4:d2:42:24:8e:
79:9e:8b:f6:ab:3b:ed:6e:ad:03:da:17:72:8a:cc:
60:0f:97:2f:d5:b7:bc:59:10:81:d8:0d:de:08:72:
bb:0c:97:83:61:c3:0c:fa:00:3b:36:64:ed:24:3e:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:BC:FA:32:D4:CF:22:80:C5:E3:F1:AB:CC:D5:E7:49:D9:8A:8D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rse8-jLUzyKAxePxq8zV50nZio0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:2a:42:3c:64:d1:c5:b3:ac:bb:7d:1c:9c:6a:47:90:6b:d1:
b1:37:01:8a:bd:61:aa:9d:db:5d:ca:d6:b0:c1:9d:31:2c:7e:
f2:40:f7:0d:6f:85:98:b3:23:a3:94:ed:fe:67:e9:95:ab:e1:
c9:14:7b:4a:77:17:63:c2:5c:c0:10:13:5f:c9:eb:ec:cc:23:
3b:3f:2b:ab:a4:11:6d:e6:3e:f9:41:3a:d3:bd:de:ab:23:7e:
cf:3f:69:00:1f:19:bd:ab:20:1c:26:6a:08:fc:a8:2b:d3:c4:
ed:7d:38:6c:60:ce:ca:84:ad:89:e6:91:04:d5:09:37:0c:1b:
d5:40:43:89:ba:42:23:42:21:96:ed:72:a1:6c:a2:fe:7d:b2:
57:87:f5:ee:88:8e:66:ba:1d:6c:8a:ad:7b:9a:4c:6c:f7:d5:
40:db:22:3f:71:a4:48:a7:6d:d6:02:f0:e9:17:2b:3e:77:f0:
4c:53:22:dc:97:22:b2:dd:0d:b9:bc:f7:2b:14:8a:28:17:64:
6e:f3:77:93:f3:99:f5:26:1f:5a:36:78:71:f7:b5:c6:d4:4d:
68:f7:59:93:f1:cd:43:9e:b1:58:27:d5:dc:d4:0a:10:e4:29:
6b:48:b0:f3:49:4e:0e:2e:f4:64:ea:b3:50:13:29:27:28:1b:
f8:0a:77:4c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ2QzdCQ0ZBMzJENENG
MjI4MEM1RTNGMUFCQ0NENUU3NDlEOThBOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5EEluYELQhJPbVW28Y0+n3wMe5aL11XTR+rDCdtkoKBEnlMr1
VOJkb7M1LofLQQ8e+qwsIFW6f1lAHx2qcVbpNrghryijpo+MN62Oa0Se2NhNyRxO
XCmPZSJEVOsGk29OxjipQPvItXDWTZE1G8ckbg0W/NezKD5eKaVb+7h1bugjRTyn
hCq9opSYJpzRTcx64ru4KED2jpn6JLuXybcPe5f29tXE2NS7+inFaOXwp3qpjaYA
sYupkCRptlFPEcZWI5wuis3wQsi5mbOk0kIkjnmei/arO+1urQPaF3KKzGAPly/V
t7xZEIHYDd4IcrsMl4Nhwwz6ADs2ZO0kPgerAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURse8+jLUzyKAxePxq8zV50nZio0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1JzZTgtakxVenlLQXhlUHhx
OHpWNTBuWmlvMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/ggwDQYJKoZIhvcNAQELBQADggEBAEwqQjxk0cWzrLt9HJxqR5Br0bE3AYq9Yaqd
213K1rDBnTEsfvJA9w1vhZizI6OU7f5n6ZWr4ckUe0p3F2PCXMAQE1/J6+zMIzs/
K6ukEW3mPvlBOtO93qsjfs8/aQAfGb2rIBwmagj8qCvTxO19OGxgzsqErYnmkQTV
CTcMG9VAQ4m6QiNCIZbtcqFsov59sleH9e6Ijma6HWyKrXuaTGz31UDbIj9xpEin
bdYC8OkXKz538ExTItyXIrLdDbm89ysUiigXZG7zd5PzmfUmH1o2eHH3tcbUTWj3
WZPxzUOesVgn1dzUChDkKWtIsPNJTg4u9GTqs1ATKScoG/gKd0w=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org