Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kk7IAGH3PTlGfPuYyZ-lX0PCZSo.roa
File: kk7IAGH3PTlGfPuYyZ-lX0PCZSo.roa (raw, json)
Hash identifier: w2HkHGuHmDmW0+KSLhpCfTSaRpaFukkERrLaOIUHARY=
Subject key identifier: 92:4E:C8:00:61:F7:3D:39:46:7C:FB:98:C9:9F:A5:5F:43:C2:65:2A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kk7IAGH3PTlGfPuYyZ-lX0PCZSo.roa
Signing time: Thu 15 Sep 2022 02:36:11 +0000
ROA not before: Thu 15 Sep 2022 02:36:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=924EC80061F73D39467CFB98C99FA55F43C2652A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:c4:78:a3:38:34:6e:59:db:80:02:f9:7f:
48:02:8c:11:73:ca:15:8e:7d:1d:27:93:b8:f6:bd:
a5:33:ea:05:cc:8c:9d:ff:7f:5c:14:00:d0:52:a5:
2e:6c:06:55:48:86:81:12:a5:e3:fa:9f:5d:34:bd:
a8:8b:88:94:54:70:d4:21:32:66:11:33:0e:b5:80:
5a:df:a1:fe:8d:d2:de:f2:fd:a2:42:80:5e:75:d1:
79:46:5d:01:29:c1:f8:d7:53:c7:48:8e:6f:21:e1:
2e:d0:29:08:1e:cf:06:74:e9:91:bf:51:89:83:15:
da:7b:0d:bc:4b:14:bb:aa:02:4b:c9:03:87:f7:4a:
c9:bd:3d:39:d4:02:d9:95:55:53:03:91:98:1f:68:
18:49:a5:b3:6f:a1:2c:ce:74:02:b5:86:fe:98:d1:
4c:ee:8e:63:07:67:6e:e1:7b:6c:bd:b3:ac:62:d0:
b8:d4:d5:0e:b9:73:47:04:6b:9a:7a:53:f2:2e:89:
49:a2:92:7a:ab:dc:f5:11:47:2f:55:0a:e9:6c:04:
7d:ae:25:47:e2:0a:2f:f7:dc:4f:4b:de:d0:bb:16:
42:fb:ea:dc:28:8b:ee:e4:2c:3d:86:4a:97:eb:c3:
e0:8f:23:44:12:82:97:83:36:33:32:1a:c6:20:4e:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:C8:00:61:F7:3D:39:46:7C:FB:98:C9:9F:A5:5F:43:C2:65:2A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kk7IAGH3PTlGfPuYyZ-lX0PCZSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:cc:ee:86:de:e4:90:16:f6:49:5f:1c:ec:66:a3:b6:39:9e:
d2:8b:7d:7a:61:2a:af:91:68:b7:aa:a4:59:ee:29:42:1c:09:
13:7d:b7:99:f1:6d:f8:5a:df:91:95:be:fb:e4:9b:03:01:f0:
64:26:fd:eb:9a:2f:ff:43:66:0b:6b:1a:9a:5e:cc:c0:6f:43:
2a:38:d3:95:9b:db:57:ae:f3:5b:ca:a7:bc:bc:3f:9b:51:10:
4d:b1:4b:6b:f6:cb:c7:63:79:20:f4:ac:aa:b8:76:09:80:a9:
c5:7a:d5:0e:45:e1:2f:e4:f5:1e:d2:17:89:35:44:ad:3d:c4:
6b:05:ea:73:ec:79:40:f8:bb:bc:d5:34:fe:de:ef:e2:b6:d0:
e9:d4:12:cf:c5:26:bc:94:92:be:9b:df:7e:22:f6:38:d1:ce:
94:84:b5:79:cb:dc:82:9e:03:9b:76:df:f3:a1:a1:40:a4:14:
32:a7:e7:23:4f:c4:0d:11:7f:db:bf:26:34:db:de:15:79:8f:
a9:ae:41:e9:dd:f3:a5:25:94:9f:d8:b0:c9:d8:08:cd:37:90:
be:ee:9c:8f:6e:a7:6c:b8:66:5f:b4:91:fe:02:0f:2f:cf:39:
7a:8c:90:c6:47:14:ce:84:78:3b:78:e3:d5:0e:41:a3:35:64:
49:6a:b7:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkyNEVDODAwNjFGNzNE
Mzk0NjdDRkI5OEM5OUZBNTVGNDNDMjY1MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOw8R4ozg0blnbgAL5f0gCjBFzyhWOfR0nk7j2vaUz6gXMjJ3/
f1wUANBSpS5sBlVIhoESpeP6n100vaiLiJRUcNQhMmYRMw61gFrfof6N0t7y/aJC
gF510XlGXQEpwfjXU8dIjm8h4S7QKQgezwZ06ZG/UYmDFdp7DbxLFLuqAkvJA4f3
Ssm9PTnUAtmVVVMDkZgfaBhJpbNvoSzOdAK1hv6Y0UzujmMHZ27he2y9s6xi0LjU
1Q65c0cEa5p6U/IuiUmiknqr3PURRy9VCulsBH2uJUfiCi/33E9L3tC7FkL76two
i+7kLD2GSpfrw+CPI0QSgpeDNjMyGsYgTi2DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkk7IAGH3PTlGfPuYyZ+lX0PCZSowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2trN0lBR0gzUFRsR2ZQdVl5
Wi1sWDBQQ1pTby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUx
nyAwDQYJKoZIhvcNAQELBQADggEBAIrM7obe5JAW9klfHOxmo7Y5ntKLfXphKq+R
aLeqpFnuKUIcCRN9t5nxbfha35GVvvvkmwMB8GQm/euaL/9DZgtrGppezMBvQyo4
05Wb21eu81vKp7y8P5tREE2xS2v2y8djeSD0rKq4dgmAqcV61Q5F4S/k9R7SF4k1
RK09xGsF6nPseUD4u7zVNP7e7+K20OnUEs/FJryUkr6b334i9jjRzpSEtXnL3IKe
A5t23/OhoUCkFDKn5yNPxA0Rf9u/JjTb3hV5j6muQend86UllJ/YsMnYCM03kL7u
nI9up2y4Zl+0kf4CDy/POXqMkMZHFM6EeDt449UOQaM1ZElqt6c=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org