Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/8ctBc-xWA3KE1Hff7s92L9dwPgE.roa
File: 8ctBc-xWA3KE1Hff7s92L9dwPgE.roa (raw, json)
Hash identifier: VhXYeYp0aEazPCgYgr+Pd/6l2d0rgSTnoGF7z8XtBzc=
Subject key identifier: F1:CB:41:73:EC:56:03:72:84:D4:77:DF:EE:CF:76:2F:D7:70:3E:01
Certificate issuer: /CN=455CD50D82958499FDAFCB0ADF10251F4CAB3E2D
Certificate serial: 0FE8
Authority key identifier: 45:5C:D5:0D:82:95:84:99:FD:AF:CB:0A:DF:10:25:1F:4C:AB:3E:2D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RVzVDYKVhJn9r8sK3xAlH0yrPi0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/8ctBc-xWA3KE1Hff7s92L9dwPgE.roa
Signing time: Fri 01 Sep 2023 08:24:42 +0000
ROA not before: Fri 01 Sep 2023 08:24:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131675
IP address blocks: 103.132.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455CD50D82958499FDAFCB0ADF10251F4CAB3E2D
Validity
Not Before: Sep 1 08:24:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1CB4173EC56037284D477DFEECF762FD7703E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:0b:e2:bb:a7:ae:17:96:d6:87:1b:96:d2:
71:81:95:aa:e5:df:27:0c:69:b7:dd:fb:a7:05:3f:
9e:b7:5a:68:5b:12:a2:ff:b2:ce:a4:34:eb:1c:10:
eb:41:ab:a0:f1:5d:c7:ea:7a:6f:11:df:70:b5:d4:
81:9c:4b:01:20:40:20:25:6b:17:ad:09:73:11:a4:
a5:12:5e:71:5f:8d:83:28:9b:48:f0:bf:af:35:2d:
00:99:8a:f1:7f:c3:54:86:22:70:df:79:96:81:68:
b5:fc:8f:29:0a:86:5b:1a:e4:32:97:fb:59:f0:a7:
72:43:bb:e0:4e:6f:33:a8:82:c9:1c:be:2a:4a:ac:
50:f4:3b:6c:d9:b1:6f:cf:24:c8:be:95:39:86:7b:
1e:0c:2e:75:39:8a:df:93:1e:9c:57:05:1b:1f:ee:
16:74:21:ac:fa:49:08:57:4c:ad:d2:23:7e:cc:41:
3f:a0:57:23:4b:02:c6:d1:d1:f8:9c:d5:03:6c:55:
32:66:4f:b3:26:76:84:85:f5:39:d2:36:e9:1c:3a:
1f:0b:c7:5c:ea:91:c3:c6:ea:60:39:a7:89:78:d9:
79:37:77:27:22:6f:23:b6:01:6b:22:3c:43:98:94:
1a:62:c7:39:8f:a2:77:45:76:b3:dc:9a:e6:82:65:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:41:73:EC:56:03:72:84:D4:77:DF:EE:CF:76:2F:D7:70:3E:01
X509v3 Authority Key Identifier:
keyid:45:5C:D5:0D:82:95:84:99:FD:AF:CB:0A:DF:10:25:1F:4C:AB:3E:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/RVzVDYKVhJn9r8sK3xAlH0yrPi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVzVDYKVhJn9r8sK3xAlH0yrPi0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEYONDORBIT/8ctBc-xWA3KE1Hff7s92L9dwPgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:57:1d:b0:e3:5b:82:04:79:ff:dd:57:71:44:26:38:aa:e7:
4d:92:69:b0:36:33:7d:de:7b:f1:77:58:17:3d:db:3a:7e:f2:
ba:71:5c:07:1d:69:eb:a5:56:17:ad:83:12:05:1f:c0:27:4c:
8b:84:ae:cd:59:83:f8:e1:50:6a:47:38:74:1e:fd:80:b1:5b:
a8:e9:b5:42:df:db:7b:b1:43:b2:5e:9e:a3:34:61:da:06:81:
b6:da:da:84:f7:f3:81:43:ba:89:ae:a2:82:3b:ca:ff:8e:73:
fd:bf:6a:1e:8e:bd:3d:31:fd:37:ee:36:0c:9d:8c:2c:8b:98:
35:cd:7d:1c:b2:de:e4:cf:79:51:f8:dc:ff:9e:20:48:e5:ff:
ed:7f:53:f1:68:19:55:52:c6:35:53:f9:d8:17:26:44:c0:0e:
5e:53:ca:4d:2e:66:bc:11:48:68:bc:28:19:3e:a1:72:65:6a:
0f:29:ad:2a:e4:2c:ca:89:5e:99:50:03:b5:2a:db:38:c2:b7:
dd:c4:8f:94:e8:d1:c0:53:3b:1f:6b:2e:b4:5d:b6:fd:17:9c:
e1:23:2a:09:97:39:00:f7:92:f6:8f:15:2d:09:f4:62:11:7f:
e4:8a:0d:a8:8d:53:bb:d7:d0:b7:f1:05:4d:25:dc:b5:9b:db:
bf:38:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:52 2024 by rpki-client on console-fra.rpki-client.org