Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nInbbXgSZdUhn6_zwff8q04b6SU.roa
File: nInbbXgSZdUhn6_zwff8q04b6SU.roa (raw, json)
Hash identifier: X+V6Bo3LwYsZgRQQiYXQlTrPyj8TXLzXBZhMu0FCsP4=
Subject key identifier: 9C:89:DB:6D:78:12:65:D5:21:9F:AF:F3:C1:F7:FC:AB:4E:1B:E9:25
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nInbbXgSZdUhn6_zwff8q04b6SU.roa
Signing time: Thu 15 Sep 2022 02:36:45 +0000
ROA not before: Thu 15 Sep 2022 02:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 119.77.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C89DB6D781265D5219FAFF3C1F7FCAB4E1BE925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:31:a2:12:84:1f:80:f1:99:29:e4:b8:cc:
98:f2:dd:86:47:76:d4:56:82:19:45:64:85:99:66:
9d:37:89:b8:0c:5e:5b:44:b3:14:04:0f:c5:10:7d:
61:bc:00:32:94:40:28:79:9f:ed:19:7f:8d:82:f7:
54:ad:78:cb:27:8a:0e:87:25:4b:0c:d2:4e:3a:3f:
69:ee:94:2a:92:51:2d:45:88:41:16:43:4c:21:f0:
60:c6:95:43:7c:56:6f:91:fd:64:6b:eb:6f:87:9f:
93:d2:d1:bf:38:66:bb:02:d4:72:c3:19:8e:9b:7a:
cc:94:5a:62:dd:c9:95:17:5c:ac:59:4d:c2:2b:73:
f1:94:11:6a:f2:44:a2:05:2c:2d:fa:2f:49:0b:b7:
2e:4d:bb:9e:19:a5:f6:0b:ad:ab:45:1e:ca:89:68:
51:b6:2e:c5:d7:4b:9a:c9:20:e5:25:e8:06:8a:7d:
2f:0f:cf:2c:11:24:a2:dd:45:aa:48:7c:fd:bb:04:
48:e4:29:15:9f:f5:af:4d:78:ca:d5:2d:8a:a6:14:
cd:61:8c:56:c3:ff:c5:2a:d3:e1:9f:88:fc:28:97:
ad:93:d8:7b:35:a2:ee:28:a3:a7:f6:85:26:12:83:
1e:23:96:d8:2f:fd:96:b6:44:ab:83:da:a1:1d:4f:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:DB:6D:78:12:65:D5:21:9F:AF:F3:C1:F7:FC:AB:4E:1B:E9:25
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nInbbXgSZdUhn6_zwff8q04b6SU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:fe:c8:f2:37:87:46:40:60:32:26:0a:ad:8f:92:7b:28:d8:
42:bc:78:92:08:0b:29:a2:4b:50:2d:d7:2b:5b:c7:dc:b6:13:
94:01:44:9b:9c:56:eb:91:cf:c1:f6:64:ff:8f:e6:cc:1e:a7:
98:64:92:44:a5:f1:0c:5d:0e:a4:6e:3f:20:31:d8:fa:8e:7f:
7c:01:0f:2a:ec:42:bc:05:80:00:99:f3:8c:15:36:8b:9d:e6:
aa:66:92:5d:4d:f7:d0:be:0d:1d:b8:3a:18:2e:ac:a4:4b:22:
a7:9d:75:74:c9:5d:7a:99:c7:e4:cb:f3:3b:25:a3:e5:cf:9b:
79:32:a6:4f:ce:4f:53:92:4a:8f:f0:c8:91:ea:68:09:83:35:
25:9c:5a:43:ed:4c:04:e1:c3:69:76:59:28:c5:31:d1:bb:1b:
f2:da:65:a3:51:2a:5d:03:70:44:e9:e7:7f:10:86:37:59:c1:
7e:ab:fc:5d:0b:3d:07:f3:88:a4:fd:8d:72:e1:f8:f2:be:77:
a8:29:9d:3c:e7:ba:35:46:a4:2b:ad:fa:81:fa:19:74:1d:61:
c8:d1:23:f6:ed:fa:09:5e:cc:b8:74:d9:00:33:f7:b0:b3:7a:
d6:97:76:a2:a8:50:0a:e2:bc:27:b4:13:1d:5a:ce:cb:f6:8e:
c9:e1:64:62
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlDODlEQjZENzgxMjY1
RDUyMTlGQUZGM0MxRjdGQ0FCNEUxQkU5MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNEzGiEoQfgPGZKeS4zJjy3YZHdtRWghlFZIWZZp03ibgMXltE
sxQED8UQfWG8ADKUQCh5n+0Zf42C91SteMsnig6HJUsM0k46P2nulCqSUS1FiEEW
Q0wh8GDGlUN8Vm+R/WRr62+Hn5PS0b84ZrsC1HLDGY6besyUWmLdyZUXXKxZTcIr
c/GUEWryRKIFLC36L0kLty5Nu54ZpfYLratFHsqJaFG2LsXXS5rJIOUl6AaKfS8P
zywRJKLdRapIfP27BEjkKRWf9a9NeMrVLYqmFM1hjFbD/8Uq0+GfiPwol62T2Hs1
ou4oo6f2hSYSgx4jltgv/Za2RKuD2qEdT5nzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnInbbXgSZdUhn6/zwff8q04b6SUwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL25JbmJiWGdTWmRVaG42X3p3
ZmY4cTA0YjZTVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYwwDQYJKoZIhvcNAQELBQADggEBAFT+yPI3h0ZAYDImCq2Pknso2EK8eJIICymi
S1At1ytbx9y2E5QBRJucVuuRz8H2ZP+P5swep5hkkkSl8QxdDqRuPyAx2PqOf3wB
DyrsQrwFgACZ84wVNoud5qpmkl1N99C+DR24OhgurKRLIqeddXTJXXqZx+TL8zsl
o+XPm3kypk/OT1OSSo/wyJHqaAmDNSWcWkPtTAThw2l2WSjFMdG7G/LaZaNRKl0D
cETp538QhjdZwX6r/F0LPQfziKT9jXLh+PK+d6gpnTznujVGpCut+oH6GXQdYcjR
I/bt+glezLh02QAz97CzetaXdqKoUArivCe0Ex1azsv2jsnhZGI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org