Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tO3KkjxdPjdoxS5obfrMMegzeRY.roa
File: tO3KkjxdPjdoxS5obfrMMegzeRY.roa (raw, json)
Hash identifier: CzMVGDw+dYverNoiAQu/HDbXBG87yWkCbjTIkuMkSA0=
Subject key identifier: B4:ED:CA:92:3C:5D:3E:37:68:C5:2E:68:6D:FA:CC:31:E8:33:79:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1910
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tO3KkjxdPjdoxS5obfrMMegzeRY.roa
Signing time: Sat 22 Oct 2022 06:06:04 +0000
ROA not before: Sat 22 Oct 2022 06:06:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6416 (0x1910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B4EDCA923C5D3E3768C52E686DFACC31E8337916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:4e:e0:d8:42:df:64:09:12:cb:01:62:0a:
ca:08:10:d8:ef:96:71:32:74:f9:82:4c:8d:a5:a1:
44:48:92:a9:75:96:ff:e1:03:12:d3:ff:da:55:a3:
df:ae:41:8a:85:85:70:c9:b3:a3:d4:d9:13:99:f5:
d0:1e:f4:c1:7d:0d:9c:6c:36:dc:f2:ed:42:74:3a:
5e:3f:e4:aa:b0:c1:51:53:b0:48:0e:49:cf:8b:30:
20:a1:57:39:b8:33:7a:42:82:40:bc:1b:b3:39:8f:
db:28:41:ec:f6:d9:b4:c3:d2:7d:48:99:33:76:49:
55:7c:06:7c:39:28:56:b1:8c:41:2a:68:94:c7:0c:
d1:a5:76:46:e6:75:48:72:5e:4d:e7:8b:4f:bf:08:
a2:c6:71:43:8c:a8:8e:4a:93:e2:82:6b:42:26:b0:
05:80:06:9a:f6:aa:5b:d5:71:ff:5f:6e:23:50:75:
b7:2d:cf:e9:70:f8:50:ed:d5:72:4c:9a:73:af:e0:
52:0d:ca:ef:4e:04:59:92:c8:ba:d3:98:99:30:95:
23:d3:24:c7:65:df:87:5b:b3:29:9d:45:38:f5:66:
f1:8e:5c:fb:31:36:6b:2c:7a:8c:b6:df:80:b9:3a:
61:a4:4a:8d:95:af:6c:db:58:8e:0d:a1:f8:db:82:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:ED:CA:92:3C:5D:3E:37:68:C5:2E:68:6D:FA:CC:31:E8:33:79:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tO3KkjxdPjdoxS5obfrMMegzeRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.188.0/22
Signature Algorithm: sha256WithRSAEncryption
90:31:be:78:d7:a8:dd:1b:ce:ff:7f:85:03:5e:e5:59:91:6c:
25:0e:c9:68:7c:dc:bb:b8:cd:c5:96:92:58:8f:3c:92:10:ff:
d7:4a:70:e3:4d:44:97:33:50:28:0a:fa:e6:ba:e8:d9:f5:1c:
c3:3e:67:c1:69:69:3d:51:c5:89:c0:64:50:e5:57:ed:53:aa:
fe:3a:46:c2:db:cb:22:ca:42:25:4c:bc:cd:8f:eb:08:10:db:
1c:03:77:8f:ed:71:c1:54:d4:ca:e0:49:d7:39:ec:26:d6:ff:
8b:f5:1c:85:85:d1:20:dc:f3:a8:ad:5a:f9:bb:eb:2a:28:47:
94:b6:2b:eb:6a:91:69:e6:23:65:eb:4c:36:8d:ec:5f:c1:34:
68:e4:86:a2:e6:64:ff:f4:db:5a:92:a5:06:e7:0c:5c:ba:51:
cf:4f:22:3e:c3:bc:8f:58:d7:87:79:c7:a1:08:47:1c:91:27:
eb:eb:17:8d:59:c6:32:70:05:d8:c6:60:94:21:62:66:d1:aa:
dd:53:d4:13:52:70:64:dd:4a:89:e7:89:f5:9b:0c:40:72:f1:
5b:ce:13:64:8c:b7:e9:26:61:74:82:0c:4b:d4:08:11:a6:1a:
14:53:4f:d7:b7:39:86:5b:98:d5:45:3d:54:6c:73:ac:e0:23:
49:0e:00:87
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGRAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI0RURDQTkyM0M1RDNF
Mzc2OEM1MkU2ODZERkFDQzMxRTgzMzc5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVsU7g2ELfZAkSywFiCsoIENjvlnEydPmCTI2loURIkql1lv/h
AxLT/9pVo9+uQYqFhXDJs6PU2ROZ9dAe9MF9DZxsNtzy7UJ0Ol4/5KqwwVFTsEgO
Sc+LMCChVzm4M3pCgkC8G7M5j9soQez22bTD0n1ImTN2SVV8Bnw5KFaxjEEqaJTH
DNGldkbmdUhyXk3ni0+/CKLGcUOMqI5Kk+KCa0ImsAWABpr2qlvVcf9fbiNQdbct
z+lw+FDt1XJMmnOv4FINyu9OBFmSyLrTmJkwlSPTJMdl34dbsymdRTj1ZvGOXPsx
Nmsseoy234C5OmGkSo2Vr2zbWI4NofjbgpUZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtO3KkjxdPjdoxS5obfrMMegzeRYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3RPM0tranhkUGpkb3hTNW9i
ZnJNTWVnemVSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJy
xrwwDQYJKoZIhvcNAQELBQADggEBAJAxvnjXqN0bzv9/hQNe5VmRbCUOyWh83Lu4
zcWWkliPPJIQ/9dKcONNRJczUCgK+ua66Nn1HMM+Z8FpaT1RxYnAZFDlV+1Tqv46
RsLbyyLKQiVMvM2P6wgQ2xwDd4/tccFU1MrgSdc57CbW/4v1HIWF0SDc86itWvm7
6yooR5S2K+tqkWnmI2XrTDaN7F/BNGjkhqLmZP/021qSpQbnDFy6Uc9PIj7DvI9Y
14d5x6EIRxyRJ+vrF41ZxjJwBdjGYJQhYmbRqt1T1BNScGTdSonnifWbDEBy8VvO
E2SMt+kmYXSCDEvUCBGmGhRTT9e3OYZbmNVFPVRsc6zgI0kOAIc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org