Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eQSMfOmlwiP4Kv0BDJA16u6P25A.roa
File: eQSMfOmlwiP4Kv0BDJA16u6P25A.roa (raw, json)
Hash identifier: RqPC+wMH0ZaiYMGZYaHILv5WrFXwRN5JuGbQqb0sMss=
Subject key identifier: 79:04:8C:7C:E9:A5:C2:23:F8:2A:FD:01:0C:90:35:EA:EE:8F:DB:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eQSMfOmlwiP4Kv0BDJA16u6P25A.roa
Signing time: Thu 15 Sep 2022 02:36:34 +0000
ROA not before: Thu 15 Sep 2022 02:36:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=79048C7CE9A5C223F82AFD010C9035EAEE8FDB90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:f2:29:6a:11:2a:e6:75:d8:7d:54:7f:bd:
5e:4f:e5:e9:79:00:ba:a4:a3:a5:58:20:3a:ee:1f:
12:5c:f8:84:9f:c4:1f:38:98:a6:55:32:8b:02:46:
16:1b:c2:a2:dd:b7:8e:58:3f:5a:c7:ba:0f:34:b4:
d0:fa:0c:49:7d:b3:7f:1d:35:f2:81:f6:74:eb:e3:
61:15:d2:cc:01:2c:38:0a:27:0a:71:3e:0d:c9:93:
0e:d5:a8:08:46:dc:bf:50:4f:a8:c3:41:61:53:46:
4e:2d:b0:fd:ba:96:35:05:6d:c2:35:e6:e5:d9:09:
71:e0:dd:a0:d8:20:95:df:3a:3b:b2:cc:37:51:fd:
df:38:64:80:25:c6:8a:c0:8a:f8:ac:2a:56:55:39:
40:a6:73:1d:b8:43:4d:bf:0d:d7:50:25:bf:86:71:
84:de:2c:64:44:53:c9:78:87:3d:e4:ff:3a:f5:98:
11:e6:89:23:70:4d:ac:16:78:aa:1e:7e:d2:06:ef:
bf:ab:1f:34:ea:ec:34:4c:19:f8:88:b6:2b:8b:ea:
4a:9e:4c:a3:e8:9b:5b:6e:62:93:06:94:42:5a:a7:
f1:10:33:49:b5:d9:1a:48:05:33:3a:e5:8a:cc:ae:
af:52:e4:97:32:bd:7c:a4:34:2d:1c:da:79:11:98:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:8C:7C:E9:A5:C2:23:F8:2A:FD:01:0C:90:35:EA:EE:8F:DB:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eQSMfOmlwiP4Kv0BDJA16u6P25A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.44.0/24
Signature Algorithm: sha256WithRSAEncryption
66:73:a0:96:23:c5:28:f2:5f:f4:d4:76:a3:5d:53:4a:00:cc:
4c:f9:64:63:7f:dd:e5:6e:a5:c1:13:c3:4d:be:d8:5b:be:81:
c6:3f:c3:8a:39:9d:f4:e1:73:ef:5d:f5:15:52:29:98:af:d2:
b6:ad:c4:bc:c9:99:5d:53:75:e4:ac:e4:d6:a0:c0:df:3c:be:
18:fe:68:2f:82:69:6b:35:27:46:5f:e0:70:7f:f7:0a:c8:59:
bd:54:e4:f9:fd:97:f0:cd:fc:bc:93:f6:15:ef:99:9a:73:bd:
64:7d:bc:c0:58:76:85:e2:10:de:c5:2b:3d:fc:db:62:2a:98:
37:45:0a:18:8a:dd:d6:71:5f:a5:35:e1:40:8c:e1:3f:5c:9a:
0a:b0:b5:2b:87:f6:88:be:19:b9:0d:93:fc:59:df:ca:f6:cd:
88:cb:07:11:b0:01:b3:f1:7a:e8:45:4b:1c:45:57:e8:0a:76:
3c:6d:16:28:70:8a:46:65:dd:a1:54:2c:ae:c4:8e:eb:21:ac:
a0:83:43:e6:54:b4:81:89:a8:4a:e7:22:76:fb:97:2a:11:5a:
d7:a5:9c:c2:13:dd:28:f8:81:00:dc:a5:57:0f:75:c1:8c:f2:
2a:2d:c8:e7:24:1c:12:eb:a1:e2:c6:11:67:be:3c:a9:a0:2a:
01:f5:cf:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc5MDQ4QzdDRTlBNUMy
MjNGODJBRkQwMTBDOTAzNUVBRUU4RkRCOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi//IpahEq5nXYfVR/vV5P5el5ALqko6VYIDruHxJc+ISfxB84
mKZVMosCRhYbwqLdt45YP1rHug80tND6DEl9s38dNfKB9nTr42EV0swBLDgKJwpx
Pg3Jkw7VqAhG3L9QT6jDQWFTRk4tsP26ljUFbcI15uXZCXHg3aDYIJXfOjuyzDdR
/d84ZIAlxorAivisKlZVOUCmcx24Q02/DddQJb+GcYTeLGREU8l4hz3k/zr1mBHm
iSNwTawWeKoeftIG77+rHzTq7DRMGfiItiuL6kqeTKPom1tuYpMGlEJap/EQM0m1
2RpIBTM65YrMrq9S5JcyvXykNC0c2nkRmA2VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeQSMfOmlwiP4Kv0BDJA16u6P25AwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2VRU01mT21sd2lQNEt2MEJE
SkExNnU2UDI1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
TCwwDQYJKoZIhvcNAQELBQADggEBAGZzoJYjxSjyX/TUdqNdU0oAzEz5ZGN/3eVu
pcETw02+2Fu+gcY/w4o5nfThc+9d9RVSKZiv0ratxLzJmV1TdeSs5NagwN88vhj+
aC+CaWs1J0Zf4HB/9wrIWb1U5Pn9l/DN/LyT9hXvmZpzvWR9vMBYdoXiEN7FKz38
22IqmDdFChiK3dZxX6U14UCM4T9cmgqwtSuH9oi+GbkNk/xZ38r2zYjLBxGwAbPx
euhFSxxFV+gKdjxtFihwikZl3aFULK7EjushrKCDQ+ZUtIGJqErnInb7lyoRWtel
nMIT3Sj4gQDcpVcPdcGM8iotyOckHBLroeLGEWe+PKmgKgH1z58=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org