Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s-u17jpjCU58vXDqE0oFru4kDC0.roa
File: s-u17jpjCU58vXDqE0oFru4kDC0.roa (raw, json)
Hash identifier: Mj9dbCi4ONt6GSY6XbO6LAz1JWJAO9WtARm2SP+UryE=
Subject key identifier: B3:EB:B5:EE:3A:63:09:4E:7C:BD:70:EA:13:4A:05:AE:EE:24:0C:2D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18DB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s-u17jpjCU58vXDqE0oFru4kDC0.roa
Signing time: Sat 22 Oct 2022 06:05:48 +0000
ROA not before: Sat 22 Oct 2022 06:05:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6363 (0x18db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3EBB5EE3A63094E7CBD70EA134A05AEEE240C2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:1d:f3:69:46:61:4f:37:ce:74:d6:c6:53:
85:61:59:79:eb:0b:c4:f2:83:34:41:21:11:4b:21:
12:65:a7:3f:e5:4d:c9:f0:ca:68:2f:78:89:f5:3f:
1b:91:bc:0a:61:bb:38:78:f5:06:e3:36:22:c0:b3:
e0:de:6f:c7:3b:d9:58:de:d4:b5:3d:fa:b7:a9:b4:
b8:f3:65:ca:82:db:85:d7:c4:4c:99:fb:ca:53:bc:
49:17:ea:89:d5:93:8d:e7:5f:cb:ef:3a:2f:1b:4c:
1e:ba:9a:b8:b5:c9:c6:ed:84:ac:f3:c0:7f:94:3b:
70:e1:0e:78:01:16:8e:db:00:af:a9:20:34:f3:47:
90:02:15:7a:56:0d:2a:fe:53:a7:ca:c0:15:d5:a1:
7e:4e:59:e3:6c:34:43:d2:ae:aa:67:3e:1b:24:52:
c3:4f:9c:70:03:9a:18:95:fc:ae:75:8f:40:55:4d:
af:fa:bf:3d:89:2b:e6:37:6c:75:95:55:fa:9b:bb:
e3:c6:86:aa:3f:5d:3d:6e:80:0a:95:14:d2:da:3b:
7e:f4:fd:8e:ae:17:1e:06:d6:2b:25:a1:34:a0:05:
6e:81:c9:33:ce:99:80:62:13:f6:f0:43:50:85:d8:
63:b1:a7:48:08:0c:86:17:c4:a4:07:c1:a2:8b:b7:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:B5:EE:3A:63:09:4E:7C:BD:70:EA:13:4A:05:AE:EE:24:0C:2D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s-u17jpjCU58vXDqE0oFru4kDC0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.44.0/22
Signature Algorithm: sha256WithRSAEncryption
14:89:6e:14:1b:98:2f:30:cd:8e:5b:5d:fc:81:e0:69:80:23:
bb:ad:27:da:b6:17:2d:95:69:db:25:f2:b3:74:7b:48:2d:ed:
9e:a4:51:25:4f:61:5e:10:4b:a4:f2:af:dd:c0:b6:2d:0d:6c:
46:05:d4:e2:c7:df:98:6f:5b:44:27:53:86:02:18:51:4d:99:
2e:52:a5:1e:96:59:0a:1d:a8:6c:d3:ba:fe:b0:16:29:bd:e9:
b3:af:d9:2e:e5:09:bb:7c:4d:54:0a:d0:87:1a:4c:e7:46:55:
18:a0:4d:6a:52:3e:0d:a8:b0:e8:00:55:aa:6c:0f:1e:e6:41:
2a:cb:b5:ee:d1:90:3e:73:91:41:5d:be:23:d6:d9:fd:d1:98:
d5:6e:43:1f:ce:10:96:2c:51:ba:19:d9:27:d4:5b:71:5d:0e:
18:e2:4a:73:32:9c:b4:a1:a6:25:59:7a:d2:89:ca:af:33:56:
cd:10:ec:87:04:ff:de:17:e5:6a:8c:c0:b0:4c:30:2b:f7:50:
d8:2f:d2:5d:70:58:47:b0:a1:86:01:8d:11:33:0b:de:1b:f1:
81:f4:6c:6c:3a:90:13:82:c5:6f:bc:f0:83:d4:82:ba:ef:fe:
5a:aa:50:0c:26:ef:72:91:92:e9:54:3f:ab:86:ef:39:d9:e6:
d3:41:d4:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEIzRUJCNUVFM0E2MzA5
NEU3Q0JENzBFQTEzNEEwNUFFRUUyNDBDMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Ix3zaUZhTzfOdNbGU4VhWXnrC8TygzRBIRFLIRJlpz/lTcnw
ymgveIn1PxuRvAphuzh49QbjNiLAs+Deb8c72Vje1LU9+reptLjzZcqC24XXxEyZ
+8pTvEkX6onVk43nX8vvOi8bTB66mri1ycbthKzzwH+UO3DhDngBFo7bAK+pIDTz
R5ACFXpWDSr+U6fKwBXVoX5OWeNsNEPSrqpnPhskUsNPnHADmhiV/K51j0BVTa/6
vz2JK+Y3bHWVVfqbu+PGhqo/XT1ugAqVFNLaO370/Y6uFx4G1isloTSgBW6ByTPO
mYBiE/bwQ1CF2GOxp0gIDIYXxKQHwaKLt81tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUs+u17jpjCU58vXDqE0oFru4kDC0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3MtdTE3anBqQ1U1OHZYRHFF
MG9GcnU0a0RDMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
niwwDQYJKoZIhvcNAQELBQADggEBABSJbhQbmC8wzY5bXfyB4GmAI7utJ9q2Fy2V
adsl8rN0e0gt7Z6kUSVPYV4QS6Tyr93Ati0NbEYF1OLH35hvW0QnU4YCGFFNmS5S
pR6WWQodqGzTuv6wFim96bOv2S7lCbt8TVQK0IcaTOdGVRigTWpSPg2osOgAVaps
Dx7mQSrLte7RkD5zkUFdviPW2f3RmNVuQx/OEJYsUboZ2SfUW3FdDhjiSnMynLSh
piVZetKJyq8zVs0Q7IcE/94X5WqMwLBMMCv3UNgv0l1wWEewoYYBjREzC94b8YH0
bGw6kBOCxW+88IPUgrrv/lqqUAwm73KRkulUP6uG7znZ5tNB1NA=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org