Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pAyM8_Ta9eg9a0HoEhnCpA8Sy1k.roa
File: pAyM8_Ta9eg9a0HoEhnCpA8Sy1k.roa (raw, json)
Hash identifier: Qz7yS9L4vRSUI3xhZfElrumAO49VqZQklhAUTvgaYVI=
Subject key identifier: A4:0C:8C:F3:F4:DA:F5:E8:3D:6B:41:E8:12:19:C2:A4:0F:12:CB:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19A2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pAyM8_Ta9eg9a0HoEhnCpA8Sy1k.roa
Signing time: Sat 22 Oct 2022 06:06:45 +0000
ROA not before: Sat 22 Oct 2022 06:06:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6562 (0x19a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A40C8CF3F4DAF5E83D6B41E81219C2A40F12CB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:b9:7e:a8:aa:e0:e3:57:e7:7f:bc:8d:5c:
f1:b2:61:5a:97:b9:0e:79:3a:20:77:94:8a:d9:12:
59:61:78:2e:11:67:e3:2a:b0:8d:0b:b7:0d:e1:a8:
70:fe:27:3b:27:97:ba:9c:f3:bd:4a:76:ad:dd:e0:
d7:ed:ff:f8:27:5f:ed:7f:cd:5d:7f:4d:58:e2:46:
bf:63:d7:0e:f9:fd:40:a9:b2:8b:80:b7:c3:a1:e7:
55:4a:b8:68:b1:bf:92:95:e6:f0:b1:8a:2e:69:9f:
29:a9:22:e6:c9:ab:1d:36:77:c9:be:ea:8e:89:5e:
cd:9b:fb:4f:ff:02:e8:1a:61:fb:ba:65:3b:b2:ee:
38:cf:18:01:0f:f0:58:84:77:3b:39:03:bf:78:f3:
f4:34:9b:6e:fa:c5:65:68:06:d5:b4:d6:35:aa:6c:
4e:9f:72:81:85:7e:ba:79:65:4c:29:cd:6d:69:c1:
81:46:73:7a:fc:81:d8:1b:13:42:4e:d0:29:0f:c4:
2a:62:a4:3d:78:e1:0b:07:3a:bd:e9:23:bd:09:2c:
21:e8:c9:ce:0b:de:b6:af:4d:3d:3a:bd:52:25:43:
3f:fe:f4:89:c2:bb:43:21:b3:8b:43:8c:87:df:c6:
f5:78:f4:d2:93:37:3a:aa:3c:11:43:8b:8f:8e:8c:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:8C:F3:F4:DA:F5:E8:3D:6B:41:E8:12:19:C2:A4:0F:12:CB:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pAyM8_Ta9eg9a0HoEhnCpA8Sy1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:5d:09:70:7a:73:2d:38:0d:51:0f:e1:d8:8f:5e:2f:42:8a:
be:ac:29:2b:71:6c:46:54:eb:09:0c:4a:cf:08:74:67:33:e1:
f5:b2:6d:f8:51:d0:25:99:58:e5:f1:32:07:da:ca:93:0c:5a:
07:91:92:77:90:53:cf:f2:89:cc:19:9f:02:fc:92:1c:67:c3:
f2:8e:a8:f2:63:95:a2:fe:71:78:7e:3d:7a:8b:71:d3:25:e9:
2f:15:66:83:ce:9c:a4:3b:8c:0a:89:e5:f7:9a:5b:6d:67:e0:
03:12:74:40:bb:8c:e5:9d:74:59:04:d1:ea:78:f4:15:ce:a9:
d0:31:9a:8a:cf:fe:27:e3:04:4e:d6:84:90:96:52:74:31:f4:
0f:2a:ec:85:2f:ab:8f:8d:d0:0d:fe:75:35:a5:e2:ce:1e:28:
60:65:0a:ae:b3:39:c3:af:cd:17:db:5c:5d:82:ac:d1:d9:99:
03:d6:95:cc:83:af:ee:da:cb:35:12:8b:97:b0:21:cb:67:49:
2f:7f:36:9f:cf:ae:b1:a2:70:73:7f:84:c2:7a:21:fd:b8:aa:
aa:48:20:7c:3d:ec:2f:aa:1a:8e:b2:36:99:49:4d:02:16:23:
a7:d3:83:00:8d:26:39:48:3a:b2:0f:71:ea:d4:bc:b7:cc:cf:
fc:a4:e8:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE0MEM4Q0YzRjREQUY1
RTgzRDZCNDFFODEyMTlDMkE0MEYxMkNCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8zLl+qKrg41fnf7yNXPGyYVqXuQ55OiB3lIrZEllheC4RZ+Mq
sI0Ltw3hqHD+Jzsnl7qc871Kdq3d4Nft//gnX+1/zV1/TVjiRr9j1w75/UCpsouA
t8Oh51VKuGixv5KV5vCxii5pnympIubJqx02d8m+6o6JXs2b+0//AugaYfu6ZTuy
7jjPGAEP8FiEdzs5A7948/Q0m276xWVoBtW01jWqbE6fcoGFfrp5ZUwpzW1pwYFG
c3r8gdgbE0JO0CkPxCpipD144QsHOr3pI70JLCHoyc4L3ravTT06vVIlQz/+9InC
u0Mhs4tDjIffxvV49NKTNzqqPBFDi4+OjLOTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpAyM8/Ta9eg9a0HoEhnCpA8Sy1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BBeU04X1RhOWVnOWEwSG9F
aG5DcEE4U3kxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nrgwDQYJKoZIhvcNAQELBQADggEBADxdCXB6cy04DVEP4diPXi9Cir6sKStxbEZU
6wkMSs8IdGcz4fWybfhR0CWZWOXxMgfaypMMWgeRkneQU8/yicwZnwL8khxnw/KO
qPJjlaL+cXh+PXqLcdMl6S8VZoPOnKQ7jAqJ5feaW21n4AMSdEC7jOWddFkE0ep4
9BXOqdAxmorP/ifjBE7WhJCWUnQx9A8q7IUvq4+N0A3+dTWl4s4eKGBlCq6zOcOv
zRfbXF2CrNHZmQPWlcyDr+7ayzUSi5ewIctnSS9/Np/PrrGicHN/hMJ6If24qqpI
IHw97C+qGo6yNplJTQIWI6fTgwCNJjlIOrIPcerUvLfMz/yk6OI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org