Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fW34V2euiymAE114xrahJTThHTs.roa
File: fW34V2euiymAE114xrahJTThHTs.roa (raw, json)
Hash identifier: H8A81OdMBc5KXROjbCRirV/xk7kzRrCVajeCD555O+s=
Subject key identifier: 7D:6D:F8:57:67:AE:8B:29:80:13:5D:78:C6:B6:A1:25:34:E1:1D:3B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fW34V2euiymAE114xrahJTThHTs.roa
Signing time: Thu 15 Sep 2022 02:35:19 +0000
ROA not before: Thu 15 Sep 2022 02:35:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7D6DF85767AE8B2980135D78C6B6A12534E11D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:74:8d:b4:be:8d:76:a6:9d:84:6a:e6:e2:
39:56:b4:ac:11:4e:9a:3e:3a:b2:d2:e7:31:8e:e5:
c2:02:5a:e8:ed:be:f3:43:31:70:d2:c8:17:59:5b:
c5:04:11:3f:e3:c4:34:a3:32:8a:a9:52:ad:5a:0f:
95:03:58:f8:e9:3d:aa:03:55:d6:76:cc:c1:06:cf:
56:3b:95:b9:f5:cd:1a:19:bf:85:25:0c:4b:06:36:
01:8d:e6:bd:a2:91:05:9e:47:74:20:d8:64:5a:ac:
4a:cd:37:ae:2b:0f:3b:b1:84:f7:c6:42:38:79:ae:
0a:59:f0:f7:15:b5:7f:f9:94:5b:8b:b3:4d:d7:40:
31:b8:df:e6:f1:63:b5:60:29:4b:97:91:f9:fe:ee:
97:70:f7:25:c7:e4:8b:0e:20:cd:44:fc:2b:48:81:
54:22:00:71:36:85:fd:c9:aa:37:0c:ce:1a:78:e6:
0d:c5:ff:da:57:44:38:ee:33:74:70:5d:5e:a9:84:
2f:02:09:16:a5:16:c9:b5:af:ca:43:60:0f:87:8f:
a8:0d:58:67:2f:0b:45:4a:41:cf:11:cc:b0:c0:25:
08:ef:6d:f7:5f:76:fa:e6:5a:15:6b:56:d7:5f:85:
07:16:34:eb:4e:e8:f0:fd:ff:d8:f9:1c:44:c8:71:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:F8:57:67:AE:8B:29:80:13:5D:78:C6:B6:A1:25:34:E1:1D:3B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fW34V2euiymAE114xrahJTThHTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
44:76:8a:1f:b1:b3:dc:cc:74:b4:f5:cf:41:fc:2a:9a:2d:fb:
a4:bd:7e:38:db:d8:b8:2e:33:07:5b:84:20:3e:3b:b1:17:bd:
30:3e:8c:50:64:4b:3b:c6:87:57:67:7b:7f:1c:fc:44:95:32:
87:ed:83:04:5a:b8:36:28:f3:57:cf:34:30:d5:41:76:55:d6:
61:bf:38:bf:04:07:c2:16:68:ec:10:f4:54:41:f1:19:2e:74:
2f:96:f7:fb:84:94:15:7f:16:dd:7a:3f:64:c7:e0:6d:0e:18:
c2:fe:ec:c9:b5:8f:13:28:67:21:f6:62:cf:91:a7:5d:9e:5d:
8f:39:17:0d:47:e1:b7:3d:ad:de:76:52:ee:2e:73:96:09:d0:
ab:8f:48:25:f4:ee:8b:37:b2:55:47:5f:7c:0e:46:6a:2a:9b:
95:18:87:dc:7b:26:20:64:ac:1d:89:79:1d:8f:ba:2d:77:ac:
a2:53:33:11:87:87:58:73:00:5d:96:20:08:97:e0:25:4c:c5:
c9:ea:f8:52:97:40:f9:75:d0:dc:c5:78:ef:71:0a:75:8d:ca:
38:5d:67:cf:00:16:3a:c3:af:e8:45:7f:e9:5c:f4:09:67:08:
c5:55:b9:16:52:38:60:c6:67:68:8e:bf:43:c0:b8:9b:ab:61:
24:bf:44:d4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdENkRGODU3NjdBRThC
Mjk4MDEzNUQ3OEM2QjZBMTI1MzRFMTFEM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLknSNtL6NdqadhGrm4jlWtKwRTpo+OrLS5zGO5cICWujtvvND
MXDSyBdZW8UEET/jxDSjMoqpUq1aD5UDWPjpPaoDVdZ2zMEGz1Y7lbn1zRoZv4Ul
DEsGNgGN5r2ikQWeR3Qg2GRarErNN64rDzuxhPfGQjh5rgpZ8PcVtX/5lFuLs03X
QDG43+bxY7VgKUuXkfn+7pdw9yXH5IsOIM1E/CtIgVQiAHE2hf3JqjcMzhp45g3F
/9pXRDjuM3RwXV6phC8CCRalFsm1r8pDYA+Hj6gNWGcvC0VKQc8RzLDAJQjvbfdf
dvrmWhVrVtdfhQcWNOtO6PD9/9j5HETIcXTlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfW34V2euiymAE114xrahJTThHTswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZXMzRWMmV1aXltQUUxMTR4
cmFoSlRUaEhUcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n0AwDQYJKoZIhvcNAQELBQADggEBAER2ih+xs9zMdLT1z0H8Kpot+6S9fjjb2Lgu
MwdbhCA+O7EXvTA+jFBkSzvGh1dne38c/ESVMoftgwRauDYo81fPNDDVQXZV1mG/
OL8EB8IWaOwQ9FRB8RkudC+W9/uElBV/Ft16P2TH4G0OGML+7Mm1jxMoZyH2Ys+R
p12eXY85Fw1H4bc9rd52Uu4uc5YJ0KuPSCX07os3slVHX3wORmoqm5UYh9x7JiBk
rB2JeR2Pui13rKJTMxGHh1hzAF2WIAiX4CVMxcnq+FKXQPl10NzFeO9xCnWNyjhd
Z88AFjrDr+hFf+lc9AlnCMVVuRZSOGDGZ2iOv0PAuJurYSS/RNQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org