Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/UO8OGUVlsfJCTS454G-BN4XhV48.roa
File: UO8OGUVlsfJCTS454G-BN4XhV48.roa (raw, json)
Hash identifier: e0k4q5ctY2aD1W/V7FK4XAL+pTU6l0SkR7hEH7Uh0x0=
Subject key identifier: 50:EF:0E:19:45:65:B1:F2:42:4D:2E:39:E0:6F:81:37:85:E1:57:8F
Certificate issuer: /CN=23E0C44033B500F78931D123EBD9F35E9AE17DC4
Certificate serial: 0F2B
Authority key identifier: 23:E0:C4:40:33:B5:00:F7:89:31:D1:23:EB:D9:F3:5E:9A:E1:7D:C4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/I-DEQDO1APeJMdEj69nzXprhfcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/UO8OGUVlsfJCTS454G-BN4XhV48.roa
Signing time: Thu 15 Sep 2022 02:49:03 +0000
ROA not before: Thu 15 Sep 2022 02:49:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131635
IP address blocks: 103.127.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23E0C44033B500F78931D123EBD9F35E9AE17DC4
Validity
Not Before: Sep 15 02:49:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=50EF0E194565B1F2424D2E39E06F813785E1578F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:a9:46:b2:21:8a:ce:f4:42:e7:c9:09:19:
79:f0:42:8b:57:69:84:be:78:7a:ce:32:3b:46:98:
54:75:f0:2f:06:24:4d:62:62:67:7b:1a:64:bc:09:
2e:f1:50:11:82:43:8c:52:39:fc:b8:e3:54:12:7b:
dd:aa:33:e9:2d:ca:5b:40:cf:0a:f3:f1:41:bf:d0:
96:a6:52:bc:35:67:f5:49:9f:88:13:d1:cf:10:ee:
a1:03:b7:ea:f2:31:dd:09:8d:45:b9:b4:e5:ae:ff:
50:5b:b3:8b:41:3f:90:e1:fe:bb:04:cd:80:76:ea:
ae:d2:aa:a5:1f:9f:52:f6:10:1d:16:99:fc:f9:5d:
8c:a4:51:7d:f0:d5:42:8a:20:70:36:6c:79:75:45:
e3:d7:f7:1d:07:e0:b2:d0:ce:bc:fb:c5:1c:0c:a4:
98:98:71:34:d3:2d:04:5a:48:e8:59:b1:97:4d:a7:
91:27:b4:8f:06:e5:aa:ff:92:b6:61:6f:9e:c5:f3:
9d:72:5c:2f:6e:43:77:26:57:50:1b:33:30:f8:8a:
c6:1d:17:03:e5:3f:b9:b7:f2:6b:4d:8e:ae:ac:06:
74:09:e6:8c:e8:55:d2:19:13:88:2e:2e:ad:66:db:
bb:50:b4:1a:bb:3f:71:9a:b5:7e:65:73:7e:fe:b7:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:0E:19:45:65:B1:F2:42:4D:2E:39:E0:6F:81:37:85:E1:57:8F
X509v3 Authority Key Identifier:
keyid:23:E0:C4:40:33:B5:00:F7:89:31:D1:23:EB:D9:F3:5E:9A:E1:7D:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/I-DEQDO1APeJMdEj69nzXprhfcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I-DEQDO1APeJMdEj69nzXprhfcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/UO8OGUVlsfJCTS454G-BN4XhV48.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c2:0e:a0:f2:ff:07:32:7a:ee:94:05:79:63:54:2c:e4:c6:
dd:66:ae:16:80:d2:6c:71:00:87:0b:0e:ed:a4:45:47:6c:84:
f6:e1:67:fd:c3:6f:f7:ae:16:18:0e:48:21:96:3a:e3:b1:49:
87:27:45:28:4e:4c:7b:42:10:d2:9c:d4:7a:08:a6:d6:32:65:
17:0a:f6:d7:39:ce:71:98:9a:b1:fd:09:c5:a8:ba:3e:64:65:
7b:1e:8c:33:2f:df:4f:45:5a:76:c1:ce:cf:6f:f7:43:89:69:
16:3c:05:42:8b:42:76:11:4e:f1:d1:a5:78:9e:2a:4b:10:33:
c0:4f:63:74:47:86:8e:c9:1e:b2:d2:cf:26:a1:74:2c:f3:5f:
df:25:0e:61:64:4b:e6:32:22:5e:23:68:da:3e:7e:64:5b:bf:
c4:d7:75:96:8a:f2:cd:33:63:8a:a1:c1:09:c9:26:18:44:35:
44:86:8f:fe:8b:76:10:31:49:1f:af:06:4e:f6:7f:25:56:43:
ce:36:f8:98:76:37:da:09:e6:6e:01:44:78:5e:e0:5b:71:ca:
be:7c:e7:fe:45:13:5b:d7:9e:bc:43:00:b1:50:c2:87:7a:58:
78:b2:70:5d:f1:03:36:29:f3:cc:ab:53:f3:56:89:56:e9:12:
c1:31:3e:37
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 1 08:11:08 2023 by rpki-client on console-fra.rpki-client.org