Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uNRD_3CvEr-fM-k6edmoKaG7T-I.roa
File: uNRD_3CvEr-fM-k6edmoKaG7T-I.roa (raw, json)
Hash identifier: fUKPRoM3DyyH6sxde/l8Ca6uT8N62PBI7SYAexZJIHo=
Subject key identifier: B8:D4:43:FF:70:AF:12:BF:9F:33:E9:3A:79:D9:A8:29:A1:BB:4F:E2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19C4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uNRD_3CvEr-fM-k6edmoKaG7T-I.roa
Signing time: Sat 22 Oct 2022 06:09:07 +0000
ROA not before: Sat 22 Oct 2022 06:09:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6596 (0x19c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:09:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8D443FF70AF12BF9F33E93A79D9A829A1BB4FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:82:ee:80:ee:3b:fb:f8:40:97:e3:62:75:
b1:36:9d:30:16:e3:40:21:c3:a7:b4:30:4f:db:cd:
e5:39:b3:cc:04:69:97:f7:ec:4f:ef:1d:79:09:bf:
3b:53:8b:d6:ca:84:e3:7e:0a:77:76:32:9d:35:9b:
d2:fa:26:a6:5b:d8:5a:0e:b1:f9:87:d2:1d:98:1d:
92:ab:a4:ea:05:61:a1:d3:6f:ef:77:cb:ab:e8:75:
da:10:70:96:bd:17:d5:1f:13:d1:cd:86:e4:6f:3f:
a5:ec:73:91:22:32:4b:fb:72:f9:f2:46:69:2a:45:
1a:f9:1c:56:db:a9:fa:03:41:14:60:fc:3f:b7:c5:
12:6b:24:c2:aa:16:dc:12:69:23:7e:40:63:7a:9f:
ad:9e:5e:e7:23:0a:37:9e:68:4a:36:29:79:38:ea:
34:97:3b:9b:b1:64:44:2a:f3:12:c8:44:35:8b:fc:
c1:f5:24:0f:8c:fa:1d:8e:61:03:19:b7:f9:38:95:
d4:77:c5:75:87:ed:8a:d0:a4:7c:d6:72:92:76:8f:
2d:05:46:49:a5:81:9d:fd:0c:88:35:a8:5e:db:27:
a6:ad:f2:84:f5:08:0c:40:e3:cd:31:f1:c2:ee:5a:
46:0a:b4:e7:72:a1:93:c8:28:ab:d0:a6:42:46:50:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:43:FF:70:AF:12:BF:9F:33:E9:3A:79:D9:A8:29:A1:BB:4F:E2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uNRD_3CvEr-fM-k6edmoKaG7T-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
47:f8:b9:f4:0c:cb:67:8a:b5:d6:c1:2c:83:f1:93:37:8f:d3:
f2:18:5b:12:1f:0d:40:e4:92:37:1f:ce:7f:fe:e3:f3:f3:1f:
bb:0e:b4:7a:15:ba:47:8e:86:ae:e4:9f:53:bd:71:ae:ff:55:
f6:b4:fa:36:f3:ec:fc:9b:bf:ac:de:5f:24:d6:01:c5:14:cb:
2f:09:98:da:2d:b6:5b:3f:c8:39:cc:ca:13:2e:49:3c:30:d7:
22:7b:56:55:c6:3b:13:e5:53:f3:10:9c:56:04:4b:e2:6d:1c:
26:cf:6d:c1:14:b3:2a:6f:07:87:a1:47:e9:dd:e5:ff:67:83:
26:69:42:cc:1e:d4:e2:98:02:1e:e5:0a:bb:d8:36:04:f9:a8:
b8:33:cb:7f:95:73:54:f2:e2:4f:dd:3f:79:5f:e9:e4:d5:a3:
d3:0a:a0:be:cd:db:af:98:08:ba:89:8f:27:93:c7:45:b4:38:
48:b4:4e:f7:af:55:90:15:63:ea:ab:c5:4d:97:4e:2a:9a:8f:
a5:a2:b4:5b:0f:7d:9b:7f:67:bf:37:96:39:7b:b6:2e:ca:9c:
ad:99:0b:34:5c:93:2c:7b:a9:ba:82:95:27:92:29:11:6c:3e:
73:02:d9:3d:63:d7:eb:ba:ec:fb:47:a9:b2:f9:05:4b:b3:59:
62:80:38:de
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA5MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI4RDQ0M0ZGNzBBRjEy
QkY5RjMzRTkzQTc5RDlBODI5QTFCQjRGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSG4LugO47+/hAl+NidbE2nTAW40Ahw6e0ME/bzeU5s8wEaZf3
7E/vHXkJvztTi9bKhON+Cnd2Mp01m9L6JqZb2FoOsfmH0h2YHZKrpOoFYaHTb+93
y6voddoQcJa9F9UfE9HNhuRvP6Xsc5EiMkv7cvnyRmkqRRr5HFbbqfoDQRRg/D+3
xRJrJMKqFtwSaSN+QGN6n62eXucjCjeeaEo2KXk46jSXO5uxZEQq8xLIRDWL/MH1
JA+M+h2OYQMZt/k4ldR3xXWH7YrQpHzWcpJ2jy0FRkmlgZ39DIg1qF7bJ6at8oT1
CAxA480x8cLuWkYKtOdyoZPIKKvQpkJGUPq5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuNRD/3CvEr+fM+k6edmoKaG7T+IwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VOUkRfM0N2RXItZk0tazZl
ZG1vS2FHN1QtSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
n/wwDQYJKoZIhvcNAQELBQADggEBAEf4ufQMy2eKtdbBLIPxkzeP0/IYWxIfDUDk
kjcfzn/+4/PzH7sOtHoVukeOhq7kn1O9ca7/Vfa0+jbz7Pybv6zeXyTWAcUUyy8J
mNottls/yDnMyhMuSTww1yJ7VlXGOxPlU/MQnFYES+JtHCbPbcEUsypvB4ehR+nd
5f9ngyZpQswe1OKYAh7lCrvYNgT5qLgzy3+Vc1Ty4k/dP3lf6eTVo9MKoL7N26+Y
CLqJjyeTx0W0OEi0TvevVZAVY+qrxU2XTiqaj6WitFsPfZt/Z783ljl7ti7KnK2Z
CzRckyx7qbqClSeSKRFsPnMC2T1j1+u67PtHqbL5BUuzWWKAON4=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:40 2023 by rpki-client on console-ams.rpki-client.org