Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RwRsLM48_C48YOulga-XMikICVI.roa
File: RwRsLM48_C48YOulga-XMikICVI.roa (raw, json)
Hash identifier: Blca6akMxdfRPBGtSzWOD4PQ0U9C64NQFzHYbbbArxs=
Subject key identifier: 47:04:6C:2C:CE:3C:FC:2E:3C:60:EB:A5:81:AF:97:32:29:08:09:52
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B15
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RwRsLM48_C48YOulga-XMikICVI.roa
Signing time: Thu 02 Feb 2023 06:50:07 +0000
ROA not before: Thu 02 Feb 2023 06:50:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.158.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6933 (0x1b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:50:07 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=47046C2CCE3CFC2E3C60EBA581AF973229080952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:38:68:92:4f:9d:84:ef:bb:cd:9a:20:74:93:
8f:01:64:c3:77:68:a1:f3:4a:b5:24:df:e7:63:ad:
8f:72:0d:e6:ce:5c:8a:e8:92:d3:68:96:22:59:fa:
03:07:1f:15:cb:1d:36:82:04:24:9d:df:54:64:01:
24:88:8d:c6:dc:10:bc:c2:cf:35:16:45:78:87:38:
2c:0c:c0:bb:8c:71:23:9b:a6:f4:be:a3:c1:17:bf:
86:14:2b:9b:d3:e5:9e:64:2a:4a:41:e5:94:50:37:
0c:14:30:ea:b0:7f:2e:43:03:44:99:06:df:d8:86:
09:f7:3a:c4:30:16:57:a3:d4:a6:78:72:78:ff:fc:
76:04:39:f8:a1:e4:6e:2b:86:b9:87:e0:bd:9a:19:
67:c8:f7:e4:15:97:9f:a5:7c:8d:ea:6f:8c:ae:46:
b6:44:8f:19:ab:39:9b:2f:9b:b9:d5:63:ea:cb:23:
5e:cc:30:25:e9:61:9e:b3:cc:75:62:99:2f:0b:e0:
85:a0:1a:6c:60:93:a6:7b:1d:49:88:bf:fd:67:e5:
53:58:1e:af:15:e9:2e:5d:2f:dd:d4:32:6b:ad:1a:
e3:3e:3e:b5:db:e0:55:4e:49:94:33:00:2a:08:73:
63:08:d7:15:60:ed:b7:a6:6d:ee:7f:3e:24:43:83:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:04:6C:2C:CE:3C:FC:2E:3C:60:EB:A5:81:AF:97:32:29:08:09:52
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RwRsLM48_C48YOulga-XMikICVI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/15
Signature Algorithm: sha256WithRSAEncryption
89:67:c7:3f:64:8e:75:8b:a9:0a:28:cd:88:5e:d0:7b:f5:18:
52:1d:60:55:87:a3:bd:dc:c7:1e:d3:db:7a:b8:e7:a9:f9:f2:
34:95:fb:32:fd:27:20:df:da:47:e5:ea:85:a9:d0:cc:ad:7f:
fd:38:66:1c:c4:a3:ea:8a:92:aa:3f:c9:30:5a:bc:24:13:19:
18:b4:8a:c0:16:75:54:02:56:b0:17:5e:2a:7b:96:aa:90:e2:
90:78:c9:3a:a4:e7:9d:4e:2c:41:e6:30:d8:ec:09:e3:ea:2e:
2c:7d:67:6a:c1:6f:15:99:e7:d2:7b:4a:d4:93:22:d2:79:7a:
fd:9d:4f:c4:2b:65:e9:54:ab:40:19:de:67:ec:17:4d:7d:e8:
f3:aa:1b:4c:cd:5c:1a:8a:de:59:73:42:6f:01:75:b7:51:8a:
75:33:fe:e1:24:e3:54:cb:68:4f:90:7f:52:ff:e3:ab:66:16:
dc:00:da:ca:9f:c8:6b:4b:18:b6:e1:29:3d:d4:fd:6f:82:ae:
98:b6:fa:8c:b3:10:83:73:0c:6c:bc:3d:51:e7:6b:6f:6e:a7:
c2:5d:79:39:77:eb:69:a2:58:86:fc:1e:c5:cf:63:46:fc:31:
67:df:ee:c6:ac:63:42:50:a1:2e:5a:58:33:67:ce:65:e3:3f:
e1:90:20:4a
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICGxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzAyMDIw
NjUwMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ3MDQ2QzJDQ0UzQ0ZD
MkUzQzYwRUJBNTgxQUY5NzMyMjkwODA5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnOGiST52E77vNmiB0k48BZMN3aKHzSrUk3+djrY9yDebOXIro
ktNoliJZ+gMHHxXLHTaCBCSd31RkASSIjcbcELzCzzUWRXiHOCwMwLuMcSObpvS+
o8EXv4YUK5vT5Z5kKkpB5ZRQNwwUMOqwfy5DA0SZBt/Yhgn3OsQwFlej1KZ4cnj/
/HYEOfih5G4rhrmH4L2aGWfI9+QVl5+lfI3qb4yuRrZEjxmrOZsvm7nVY+rLI17M
MCXpYZ6zzHVimS8L4IWgGmxgk6Z7HUmIv/1n5VNYHq8V6S5dL93UMmutGuM+PrXb
4FVOSZQzACoIc2MI1xVg7bembe5/PiRDg+U1AgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQURwRsLM48/C48YOulga+XMikICVIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1J3UnNMTTQ4X0M0OFlPdWxn
YS1YTWlrSUNWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEx
njANBgkqhkiG9w0BAQsFAAOCAQEAiWfHP2SOdYupCijNiF7Qe/UYUh1gVYejvdzH
HtPberjnqfnyNJX7Mv0nIN/aR+XqhanQzK1//ThmHMSj6oqSqj/JMFq8JBMZGLSK
wBZ1VAJWsBdeKnuWqpDikHjJOqTnnU4sQeYw2OwJ4+ouLH1nasFvFZnn0ntK1JMi
0nl6/Z1PxCtl6VSrQBneZ+wXTX3o86obTM1cGoreWXNCbwF1t1GKdTP+4STjVMto
T5B/Uv/jq2YW3ADayp/Ia0sYtuEpPdT9b4KumLb6jLMQg3MMbLw9Uedrb26nwl15
OXfraaJYhvwexc9jRvwxZ9/uxqxjQlChLlpYM2fOZeM/4ZAgSg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:15 2023 by rpki-client on console-fra.rpki-client.org