Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBTQIGtZzenUNbXMCjdoiQRbm2M.roa
File: pBTQIGtZzenUNbXMCjdoiQRbm2M.roa (raw, json)
Hash identifier: qq593RNiQ0i2p+ygsCM0bwd4iGHbBrifWGsruJmrOJo=
Subject key identifier: A4:14:D0:20:6B:59:CD:E9:D4:35:B5:CC:0A:37:68:89:04:5B:9B:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19CC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBTQIGtZzenUNbXMCjdoiQRbm2M.roa
Signing time: Sat 22 Oct 2022 06:11:13 +0000
ROA not before: Sat 22 Oct 2022 06:11:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.40.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6604 (0x19cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A414D0206B59CDE9D435B5CC0A376889045B9B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:d5:96:2c:dc:f9:a6:81:a1:52:53:92:84:
ed:86:47:65:60:a1:ac:6e:11:d2:8a:a6:eb:e6:bc:
e7:70:fa:fa:a8:08:ec:5e:4f:8c:ed:5d:00:aa:8f:
8a:49:84:3c:e6:af:3c:71:38:df:34:4c:98:7d:3c:
17:95:e1:ec:3c:48:3c:b1:ee:bc:6a:f0:00:f2:6a:
21:9e:82:d3:c6:9c:63:43:6b:a7:70:f7:d4:e9:61:
ba:9a:b8:fa:33:46:e9:da:c8:57:ad:01:4d:75:c0:
24:23:fe:9c:e4:cf:a9:19:f5:85:af:f2:25:44:1e:
f8:96:4e:1f:96:ce:64:bb:0e:c0:36:9b:34:08:0d:
13:70:87:7f:68:de:fa:96:84:77:c1:44:fd:19:4e:
b4:1c:09:69:ec:a5:44:d5:42:4a:96:86:97:04:e9:
69:c0:56:fa:8b:23:66:5c:74:8c:d8:16:1c:43:85:
f8:ef:d8:00:d9:72:69:0a:23:a6:03:73:5f:01:5f:
8d:4a:6b:d2:35:51:54:cb:17:c7:40:94:2c:6c:87:
21:c5:db:cc:6e:6c:1c:29:c7:3f:d8:ce:37:83:0e:
ec:88:03:c0:5e:9e:50:d8:be:e1:97:e1:f0:9c:eb:
6f:1f:a0:ae:05:b7:78:19:a7:c9:d3:b9:1e:e4:09:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:D0:20:6B:59:CD:E9:D4:35:B5:CC:0A:37:68:89:04:5B:9B:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBTQIGtZzenUNbXMCjdoiQRbm2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.40.0/21
Signature Algorithm: sha256WithRSAEncryption
47:4c:f2:cd:53:f2:3a:5f:42:0a:6f:78:b9:e3:66:e8:66:67:
32:fd:f4:5a:9d:44:ad:ee:e4:b7:9c:6b:e4:c8:b4:91:03:6c:
be:e1:b3:a1:7e:08:ae:72:07:5c:93:3d:9d:f1:f9:ef:c0:43:
a7:f6:41:55:9c:64:51:7a:4d:cf:1f:f5:48:dd:b1:44:bb:98:
a1:e4:da:09:25:bc:20:1e:58:d4:00:8b:c5:64:71:ff:15:fc:
79:54:f8:5a:81:c0:ff:b6:44:e1:ac:e5:3b:ca:04:05:f9:93:
38:1c:c1:12:a9:f0:62:24:42:7b:1a:2e:9e:a6:06:92:6c:d4:
44:16:0a:35:d2:74:50:f9:4f:d6:d6:3b:b3:f6:e7:9a:59:93:
18:80:a0:d3:78:8e:88:ca:78:b7:25:5f:d8:c6:c7:97:5c:6a:
aa:bd:f9:e9:04:61:1a:df:3e:f2:c6:ae:29:f2:20:76:ce:76:
ea:a0:4e:8b:91:9c:f9:7e:a1:50:f3:9f:71:dc:aa:b7:ce:c3:
f2:13:c2:bc:11:5b:74:6c:79:dd:55:be:f9:88:9c:fb:bd:d2:
87:a4:7d:96:82:11:f4:fa:ef:58:9d:ab:ee:87:13:25:ea:f3:
4a:2a:18:90:25:8b:cb:8c:8a:d0:3d:cf:74:1a:fc:5b:6c:43:
a9:fb:ad:cf
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjExMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE0MTREMDIwNkI1OUNE
RTlENDM1QjVDQzBBMzc2ODg5MDQ1QjlCNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1wdWWLNz5poGhUlOShO2GR2VgoaxuEdKKpuvmvOdw+vqoCOxe
T4ztXQCqj4pJhDzmrzxxON80TJh9PBeV4ew8SDyx7rxq8ADyaiGegtPGnGNDa6dw
99TpYbqauPozRunayFetAU11wCQj/pzkz6kZ9YWv8iVEHviWTh+WzmS7DsA2mzQI
DRNwh39o3vqWhHfBRP0ZTrQcCWnspUTVQkqWhpcE6WnAVvqLI2ZcdIzYFhxDhfjv
2ADZcmkKI6YDc18BX41Ka9I1UVTLF8dAlCxshyHF28xubBwpxz/YzjeDDuyIA8Be
nlDYvuGX4fCc628foK4Ft3gZp8nTuR7kCZtzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpBTQIGtZzenUNbXMCjdoiQRbm2MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BCVFFJR3RaemVuVU5iWE1D
amRvaVFSYm0yTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nygwDQYJKoZIhvcNAQELBQADggEBAEdM8s1T8jpfQgpveLnjZuhmZzL99FqdRK3u
5Leca+TItJEDbL7hs6F+CK5yB1yTPZ3x+e/AQ6f2QVWcZFF6Tc8f9UjdsUS7mKHk
2gklvCAeWNQAi8Vkcf8V/HlU+FqBwP+2ROGs5TvKBAX5kzgcwRKp8GIkQnsaLp6m
BpJs1EQWCjXSdFD5T9bWO7P255pZkxiAoNN4jojKeLclX9jGx5dcaqq9+ekEYRrf
PvLGrinyIHbOduqgTouRnPl+oVDzn3HcqrfOw/ITwrwRW3Rsed1VvvmInPu90oek
fZaCEfT671idq+6HEyXq80oqGJAli8uMitA9z3Qa/FtsQ6n7rc8=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org