Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avMvUPNkjvuUKtkGY-_d9jkC-0o.roa
File: avMvUPNkjvuUKtkGY-_d9jkC-0o.roa (raw, json)
Hash identifier: vwWDLkMRqqB0vFDGQVOTLIZn19zC8qD5Gpm8CYwoEkQ=
Subject key identifier: 6A:F3:2F:50:F3:64:8E:FB:94:2A:D9:06:63:EF:DD:F6:39:02:FB:4A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A52
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avMvUPNkjvuUKtkGY-_d9jkC-0o.roa
Signing time: Thu 27 Oct 2022 02:44:06 +0000
ROA not before: Thu 27 Oct 2022 02:44:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6738 (0x1a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 02:44:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AF32F50F3648EFB942AD90663EFDDF63902FB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:44:81:3c:f1:03:32:e3:30:d8:85:b2:2a:07:
d4:3a:bb:d8:3d:ab:6e:1d:2e:be:1c:76:3d:0a:1f:
4e:3f:26:03:41:c1:4e:cd:46:a6:91:f9:db:ab:c4:
eb:5b:50:aa:f0:30:bf:f9:aa:1a:1d:3d:ae:b8:e8:
a1:c6:96:bb:0b:99:33:a9:44:72:05:d8:eb:e6:e8:
3d:b1:bd:cf:24:98:b7:e9:bc:92:e1:fa:f9:2c:75:
13:39:33:81:ef:97:4e:fd:35:0d:eb:71:5f:60:28:
87:55:09:69:95:1f:61:78:cf:3e:0e:0f:77:5f:af:
90:45:2e:c9:b0:5b:1e:58:54:dd:06:40:0f:d6:db:
46:9c:da:e7:95:9d:0e:85:a2:71:20:b2:83:5a:49:
67:b0:d8:be:00:d3:36:db:16:61:01:27:c1:ae:3c:
4b:80:96:98:ea:68:d2:68:ce:9d:94:de:46:93:9d:
89:4f:2d:8d:01:cb:4e:56:2a:63:be:6f:72:90:6a:
43:a9:a9:f1:0d:45:ab:eb:df:e4:98:2e:17:f5:ba:
64:4f:be:a5:e8:0f:69:3b:b3:af:55:f6:96:07:d6:
49:b0:f8:53:d8:b0:84:88:d2:be:9a:67:75:cd:9d:
cf:2a:04:3c:a4:86:51:7d:7a:96:aa:35:20:7b:77:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:2F:50:F3:64:8E:FB:94:2A:D9:06:63:EF:DD:F6:39:02:FB:4A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/avMvUPNkjvuUKtkGY-_d9jkC-0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.168.0/21
Signature Algorithm: sha256WithRSAEncryption
14:2b:09:30:66:b5:18:61:d0:fa:df:47:5e:c0:27:a4:ad:ec:
ab:41:cd:c7:40:db:37:a5:62:85:f1:9f:2b:94:e1:b8:11:5c:
1e:b5:f3:87:ad:82:9f:b3:33:7c:4a:67:47:ca:4a:d4:f9:c2:
41:4f:45:03:63:5d:c0:bf:8e:82:a1:bc:f7:ba:75:59:7b:7c:
3d:d0:1d:4a:3e:51:96:78:8d:a3:18:63:ce:85:92:eb:75:db:
91:17:0e:96:23:59:4e:c6:c3:94:38:9d:76:a1:1a:6b:61:1c:
4d:dd:30:c9:4d:fc:8d:ec:10:c3:3a:5d:c0:03:6d:92:82:2b:
9f:66:1a:23:fd:0c:13:68:83:a7:d9:8a:98:bb:fa:f6:72:32:
ca:26:f5:04:ec:81:32:99:dc:5f:08:7a:64:c0:3a:d6:78:e8:
30:4b:ef:b3:2d:6a:2e:30:87:86:32:d3:e6:67:d2:08:f4:76:
0e:8e:b1:3e:5b:82:ee:c5:75:37:31:3f:4a:66:23:49:8b:0e:
cc:1c:54:32:89:9f:98:2d:61:e4:f1:f2:41:e0:db:4d:d5:8a:
8d:6d:e9:a7:e1:2b:92:fe:7e:59:98:48:30:b4:7f:9e:64:68:
0e:f9:8c:72:37:63:40:63:a9:28:19:6f:86:8f:80:e2:0d:26:
da:99:f2:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGlIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjcw
MjQ0MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZBRjMyRjUwRjM2NDhF
RkI5NDJBRDkwNjYzRUZEREY2MzkwMkZCNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuRIE88QMy4zDYhbIqB9Q6u9g9q24dLr4cdj0KH04/JgNBwU7N
RqaR+durxOtbUKrwML/5qhodPa646KHGlrsLmTOpRHIF2Ovm6D2xvc8kmLfpvJLh
+vksdRM5M4Hvl079NQ3rcV9gKIdVCWmVH2F4zz4OD3dfr5BFLsmwWx5YVN0GQA/W
20ac2ueVnQ6FonEgsoNaSWew2L4A0zbbFmEBJ8GuPEuAlpjqaNJozp2U3kaTnYlP
LY0By05WKmO+b3KQakOpqfENRavr3+SYLhf1umRPvqXoD2k7s69V9pYH1kmw+FPY
sISI0r6aZ3XNnc8qBDykhlF9epaqNSB7d+zRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUavMvUPNkjvuUKtkGY+/d9jkC+0owHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2F2TXZVUE5ranZ1VUt0a0dZ
LV9kOWprQy0wby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANy
xqgwDQYJKoZIhvcNAQELBQADggEBABQrCTBmtRhh0PrfR17AJ6St7KtBzcdA2zel
YoXxnyuU4bgRXB6184etgp+zM3xKZ0fKStT5wkFPRQNjXcC/joKhvPe6dVl7fD3Q
HUo+UZZ4jaMYY86Fkut125EXDpYjWU7Gw5Q4nXahGmthHE3dMMlN/I3sEMM6XcAD
bZKCK59mGiP9DBNog6fZipi7+vZyMsom9QTsgTKZ3F8IemTAOtZ46DBL77Mtai4w
h4Yy0+Zn0gj0dg6OsT5bgu7FdTcxP0pmI0mLDswcVDKJn5gtYeTx8kHg203Vio1t
6afhK5L+flmYSDC0f55kaA75jHI3Y0BjqSgZb4aPgOINJtqZ8q4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org