Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9GTuOJOv5UUadRxa_YueL23EaY.roa
File: l9GTuOJOv5UUadRxa_YueL23EaY.roa (raw, json)
Hash identifier: jsBxy+oETJYnJ0OBtAk8mXPmxPXnRaLV22DUDJwGsrI=
Subject key identifier: 97:D1:93:B8:E2:4E:BF:95:14:69:D4:71:6B:F6:2E:78:BD:B7:11:A6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1955
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9GTuOJOv5UUadRxa_YueL23EaY.roa
Signing time: Sat 22 Oct 2022 06:06:24 +0000
ROA not before: Sat 22 Oct 2022 06:06:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.254.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6485 (0x1955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=97D193B8E24EBF951469D4716BF62E78BDB711A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:78:e3:f7:ae:ab:a6:10:32:0a:d8:b5:ea:
b8:9c:65:94:27:4c:bd:8c:5c:de:04:f2:3a:ea:8d:
22:15:a2:7a:08:0c:36:85:35:20:ed:de:8f:8e:77:
8a:6b:29:1c:8d:50:91:77:6b:f9:b1:a6:58:88:d5:
db:15:a5:b1:2c:71:c9:ef:67:1d:f5:81:a4:d0:bb:
b7:82:bb:25:7b:17:68:84:b9:2a:c3:05:5a:69:9e:
3b:91:30:b0:eb:35:3f:ef:a8:71:89:98:17:60:2d:
11:a8:0d:92:57:25:61:54:6a:a9:e7:c8:50:d3:60:
fd:9e:07:af:ce:a9:3b:8d:e4:4d:a6:04:48:10:5b:
05:72:ff:33:20:bd:01:75:d1:43:3a:ed:46:8a:9a:
41:8a:54:60:9b:d3:42:b0:68:d9:f8:bd:d4:bd:62:
35:e0:27:9a:56:8f:a6:d4:6c:e6:5c:fd:57:32:0c:
02:bc:f5:dc:b0:dc:d4:f1:2f:9d:1b:fe:dd:6f:67:
83:72:cf:50:20:9c:82:17:14:84:3a:50:65:49:e8:
a5:9b:35:01:57:18:29:57:e4:8a:35:6e:86:b2:ae:
59:e1:8e:14:16:ed:23:ec:e5:29:d4:a0:96:0c:b3:
da:13:a4:c1:4e:50:51:6f:13:2f:81:24:d8:5d:d6:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:93:B8:E2:4E:BF:95:14:69:D4:71:6B:F6:2E:78:BD:B7:11:A6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9GTuOJOv5UUadRxa_YueL23EaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.56.0/21
Signature Algorithm: sha256WithRSAEncryption
61:cd:ea:f4:3c:44:f6:2c:ee:d8:80:4e:cf:54:e4:12:0d:b5:
d3:8e:b3:b7:72:6e:72:52:98:46:c9:8b:94:1d:7e:d3:b5:3c:
83:1d:17:ef:b1:85:a0:78:b1:dc:a6:bc:62:3c:53:69:d9:51:
fd:91:1c:12:9d:ed:f8:ed:c2:1c:6a:ff:49:c1:8e:0e:ad:3f:
01:94:65:7e:5c:1a:50:a2:33:e1:c5:00:84:12:83:5b:a4:cc:
9d:84:b8:14:1f:5e:9a:ea:34:59:65:3f:f6:ec:ff:3b:f4:25:
ae:b1:2a:87:0d:06:88:90:e2:43:83:55:9b:ed:fb:8a:63:4c:
d9:22:38:c6:34:cd:23:9e:33:31:d2:8d:dc:f8:1e:de:e2:f8:
b1:3c:2c:7d:a4:df:83:1a:52:52:00:b3:d0:a1:79:d7:40:d0:
c1:4d:96:b5:f6:d8:d5:8e:90:41:c2:f3:14:95:14:11:0e:45:
0f:94:17:ff:46:9e:96:c6:2b:88:b1:28:96:8b:91:a1:ac:b7:
3d:c4:46:5e:48:b0:15:cf:d5:40:03:db:1d:01:af:91:1e:f3:
a4:0d:91:ec:27:18:4c:82:1e:d5:e6:4e:88:b2:9b:28:b6:50:
9d:60:26:2c:b5:7c:9b:f3:c5:0e:cb:d2:5d:97:3b:24:09:a6:
9a:d7:52:99
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MjRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk3RDE5M0I4RTI0RUJG
OTUxNDY5RDQ3MTZCRjYyRTc4QkRCNzExQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeanjj966rphAyCti16ricZZQnTL2MXN4E8jrqjSIVonoIDDaF
NSDt3o+Od4prKRyNUJF3a/mxpliI1dsVpbEsccnvZx31gaTQu7eCuyV7F2iEuSrD
BVppnjuRMLDrNT/vqHGJmBdgLRGoDZJXJWFUaqnnyFDTYP2eB6/OqTuN5E2mBEgQ
WwVy/zMgvQF10UM67UaKmkGKVGCb00KwaNn4vdS9YjXgJ5pWj6bUbOZc/VcyDAK8
9dyw3NTxL50b/t1vZ4Nyz1AgnIIXFIQ6UGVJ6KWbNQFXGClX5Io1boayrlnhjhQW
7SPs5SnUoJYMs9oTpMFOUFFvEy+BJNhd1qrFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl9GTuOJOv5UUadRxa/YueL23EaYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2w5R1R1T0pPdjVVVWFkUnhh
X1l1ZUwyM0VhWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN6
/jgwDQYJKoZIhvcNAQELBQADggEBAGHN6vQ8RPYs7tiATs9U5BINtdOOs7dybnJS
mEbJi5QdftO1PIMdF++xhaB4sdymvGI8U2nZUf2RHBKd7fjtwhxq/0nBjg6tPwGU
ZX5cGlCiM+HFAIQSg1ukzJ2EuBQfXprqNFllP/bs/zv0Ja6xKocNBoiQ4kODVZvt
+4pjTNkiOMY0zSOeMzHSjdz4Ht7i+LE8LH2k34MaUlIAs9CheddA0MFNlrX22NWO
kEHC8xSVFBEORQ+UF/9GnpbGK4ixKJaLkaGstz3ERl5IsBXP1UAD2x0Br5Ee86QN
kewnGEyCHtXmToiymyi2UJ1gJiy1fJvzxQ7L0l2XOyQJpprXUpk=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org