Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uhesKGa8pZ8Sxj5QtwkgAX-wPgg.roa
File: uhesKGa8pZ8Sxj5QtwkgAX-wPgg.roa (raw, json)
Hash identifier: uTiIMsh8tVtiInGjaEzZagkeA+LhDBLewlYoSNp6ZXk=
Subject key identifier: BA:17:AC:28:66:BC:A5:9F:12:C6:3E:50:B7:09:20:01:7F:B0:3E:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uhesKGa8pZ8Sxj5QtwkgAX-wPgg.roa
Signing time: Thu 15 Sep 2022 02:35:58 +0000
ROA not before: Thu 15 Sep 2022 02:35:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.128.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BA17AC2866BCA59F12C63E50B70920017FB03E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:27:d6:ae:d0:70:64:0a:95:fb:98:e9:de:
57:f6:8f:5b:c7:4e:0c:1b:42:40:77:91:04:ea:7c:
f7:01:ab:31:8d:b3:42:53:87:41:e6:bf:47:ab:5e:
b5:71:87:76:75:0e:20:14:ed:4b:4e:02:69:e8:b0:
75:87:d6:bf:15:19:48:7c:f8:89:71:9a:16:67:19:
69:36:49:8f:af:46:02:0e:90:0e:07:b9:69:ff:ea:
90:85:ea:f9:14:fd:2f:1a:df:80:fc:5e:ab:cb:6b:
4c:8a:4c:12:b5:68:7f:d5:d1:a7:1e:a5:62:45:a0:
08:8f:29:56:07:1f:2c:3b:7b:4e:de:8c:91:7b:54:
a0:87:42:0d:53:37:e5:43:b7:65:51:58:62:5c:cd:
d3:42:47:7e:6f:12:83:87:14:4f:7c:2b:8a:3c:0d:
cc:46:69:b5:66:0c:ea:ba:8d:32:3b:4b:cd:88:0c:
1f:24:f5:56:dd:fe:84:bb:9b:82:bf:9d:87:de:be:
98:ad:e9:b6:7c:b5:57:e6:fe:11:1c:3e:4c:3c:54:
79:e4:a4:b3:50:de:01:b7:31:b7:33:17:0e:d9:bc:
9f:ab:55:f1:4c:7d:d5:63:e4:0e:56:6e:a4:e7:4e:
7e:c5:c1:df:db:cd:7c:45:89:11:e1:15:f3:33:99:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:AC:28:66:BC:A5:9F:12:C6:3E:50:B7:09:20:01:7F:B0:3E:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uhesKGa8pZ8Sxj5QtwkgAX-wPgg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.128.0/21
Signature Algorithm: sha256WithRSAEncryption
65:59:17:11:22:c4:86:87:22:61:53:60:c2:9e:4f:fa:3f:76:
ea:1a:7a:69:0c:a9:de:a5:0f:6c:8e:97:a4:6d:0d:22:ec:79:
d0:ef:95:fe:e4:a1:a1:87:a1:48:7f:48:4b:3c:13:f3:50:fa:
42:00:9e:a3:29:ce:7a:53:ac:33:61:17:b5:ab:71:9e:fd:bc:
f3:bc:e7:e0:91:79:9b:bc:bd:b4:c7:9e:6e:a2:90:ee:2d:cc:
ba:4c:c8:0a:f8:ab:9e:ed:8d:57:e7:fe:0a:60:a9:88:2f:86:
06:ec:fd:48:f8:33:2c:f4:3f:38:eb:f0:dd:d8:c0:e6:1e:c5:
37:60:b2:9f:99:2e:66:c3:01:63:8c:55:58:35:a1:c2:12:8a:
a5:11:9f:97:d2:6a:ce:1c:36:07:54:4e:db:e8:b5:81:3a:fc:
95:cf:35:ef:38:6c:0b:3e:a8:54:9e:13:3d:0a:15:08:be:9d:
a7:7a:64:d4:fa:85:10:99:a8:3e:19:d9:a2:3b:11:52:5a:fc:
d3:d3:cf:65:88:cf:ff:23:e3:5f:72:ca:68:48:de:84:37:6f:
0e:d7:ef:86:25:d7:d2:a6:4e:6b:35:3c:7e:24:1e:7e:39:00:
6e:da:65:00:5a:dc:61:fe:ef:5f:68:5b:82:e8:87:27:7b:7c:
91:1c:4f:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJBMTdBQzI4NjZCQ0E1
OUYxMkM2M0U1MEI3MDkyMDAxN0ZCMDNFMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF1SfWrtBwZAqV+5jp3lf2j1vHTgwbQkB3kQTqfPcBqzGNs0JT
h0Hmv0erXrVxh3Z1DiAU7UtOAmnosHWH1r8VGUh8+IlxmhZnGWk2SY+vRgIOkA4H
uWn/6pCF6vkU/S8a34D8XqvLa0yKTBK1aH/V0acepWJFoAiPKVYHHyw7e07ejJF7
VKCHQg1TN+VDt2VRWGJczdNCR35vEoOHFE98K4o8DcxGabVmDOq6jTI7S82IDB8k
9Vbd/oS7m4K/nYfevpit6bZ8tVfm/hEcPkw8VHnkpLNQ3gG3MbczFw7ZvJ+rVfFM
fdVj5A5WbqTnTn7Fwd/bzXxFiRHhFfMzmZGhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuhesKGa8pZ8Sxj5QtwkgAX+wPggwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VoZXNLR2E4cFo4U3hqNVF0
d2tnQVgtd1BnZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n4AwDQYJKoZIhvcNAQELBQADggEBAGVZFxEixIaHImFTYMKeT/o/duoaemkMqd6l
D2yOl6RtDSLsedDvlf7koaGHoUh/SEs8E/NQ+kIAnqMpznpTrDNhF7WrcZ79vPO8
5+CReZu8vbTHnm6ikO4tzLpMyAr4q57tjVfn/gpgqYgvhgbs/Uj4Myz0Pzjr8N3Y
wOYexTdgsp+ZLmbDAWOMVVg1ocISiqURn5fSas4cNgdUTtvotYE6/JXPNe84bAs+
qFSeEz0KFQi+nad6ZNT6hRCZqD4Z2aI7EVJa/NPTz2WIz/8j419yymhI3oQ3bw7X
74Yl19KmTms1PH4kHn45AG7aZQBa3GH+719oW4Lohyd7fJEcT5g=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org