Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa
File: 8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa (raw, json)
Hash identifier: e09XpjgNUWGOkkimKdpp3KsEVNuTlEq7I0pzcCg92jI=
Subject key identifier: F2:35:26:AD:C1:86:CF:7F:A6:E6:2E:CC:A4:CE:AA:F1:97:50:D9:85
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1029
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa
Signing time: Mon 26 Aug 2024 05:13:26 +0000
ROA not before: Mon 26 Aug 2024 05:13:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 27.96.224.0/19 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4137 (0x1029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F23526ADC186CF7FA6E62ECCA4CEAAF19750D985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:b7:c8:41:42:d0:84:8f:e4:c2:f7:4c:08:
52:df:b5:91:28:3c:ea:f2:dd:10:51:99:a7:cc:ff:
9d:67:06:c2:a6:17:6c:23:c2:e4:19:07:ed:fd:48:
80:cf:9e:6e:b7:a9:57:9b:67:48:1b:c2:8c:db:8f:
03:e3:f3:22:da:7e:2c:c5:bc:e5:ba:5f:b6:fb:a2:
f0:af:16:07:f2:7b:a9:d0:a9:64:c6:19:2d:ee:a2:
0f:7f:e8:d0:33:85:30:97:0a:03:f9:8b:64:45:ce:
79:8b:0d:56:d2:d4:0d:e3:be:30:02:4b:e3:24:a7:
cd:b7:41:ae:6d:e6:c5:26:92:cb:f5:c4:93:87:4b:
6f:67:8c:f2:63:ab:d0:b9:0c:7c:08:f6:e0:de:04:
b4:a3:d2:28:da:c6:7b:2c:3d:b4:f0:3d:b4:5d:c5:
ff:ec:a9:64:c9:6b:35:7b:54:ba:c0:58:2c:9b:78:
7b:56:6f:48:5a:30:bf:95:b5:d4:24:aa:4c:24:c3:
69:71:1e:db:04:3c:ba:a2:d4:81:b8:02:a3:a0:1b:
4e:3d:d3:7d:52:bf:7d:f7:9b:33:5d:87:67:3f:95:
2d:10:cf:e1:79:ab:d0:17:ce:3a:c4:9f:49:f7:24:
ab:1a:86:0e:e1:21:99:8c:7f:b3:ed:a7:3e:be:f6:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:26:AD:C1:86:CF:7F:A6:E6:2E:CC:A4:CE:AA:F1:97:50:D9:85
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8jUmrcGGz3-m5i7MpM6q8ZdQ2YU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:5a:29:bd:1d:8a:26:44:f8:3b:34:a5:9a:4d:4a:04:6a:b2:
49:31:11:88:ec:07:05:0a:f6:bc:77:b9:c0:cb:eb:67:12:5b:
bf:11:e4:01:a9:da:b7:c8:94:5e:c9:2a:4e:94:50:06:05:50:
4e:5a:20:50:f4:65:9a:50:2d:cf:b7:bd:b3:d2:5c:db:0c:09:
18:59:21:19:a6:16:4b:90:a7:be:6d:16:9c:cc:1b:02:8a:dd:
c1:10:bd:c5:c6:ef:d9:e3:78:a1:94:bb:d1:67:c8:ce:47:93:
9a:0f:6e:3d:d7:64:d7:ce:1a:6c:fe:d7:f9:bd:a2:d2:17:2f:
af:ee:36:bd:e2:39:4e:ef:49:c4:b7:83:a6:0c:75:87:99:ec:
cc:9e:c1:c6:96:20:15:53:c7:d8:e8:4c:a5:cb:ae:c7:36:a0:
d8:de:fb:06:33:c3:78:c3:5a:2e:a2:d6:2e:a1:f7:90:a6:17:
01:39:06:2b:6c:df:f3:37:e1:55:96:c9:f7:fd:bd:7b:05:e5:
f3:ec:ec:8d:44:c8:66:ce:4b:7c:0b:a9:c4:39:1f:99:4d:c3:
d9:9e:c7:a7:80:ed:1b:36:6e:99:84:45:24:ad:76:09:b6:b2:
6e:07:b7:fc:88:ab:19:a1:63:5e:7a:59:4d:d6:28:71:6b:10:
be:a7:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:20:53 2025 by rpki-client