Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa
File: gtKPIbgE6v06hCYAlB43SQBsi7A.roa (raw, json)
Hash identifier: Z6FqqOENAhkeK6JCcV9DwLHQxC69Sz41d+8AacyUomU=
Subject key identifier: 82:D2:8F:21:B8:04:EA:FD:3A:84:26:00:94:1E:37:49:00:6C:8B:B0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 100F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa
Signing time: Mon 26 Aug 2024 05:13:20 +0000
ROA not before: Mon 26 Aug 2024 05:13:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 203.222.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4111 (0x100f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=82D28F21B804EAFD3A842600941E3749006C8BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:62:00:46:17:fa:e1:dd:85:5f:14:f8:b5:
b3:af:74:9a:96:2b:fd:e5:5c:74:42:bf:fd:b5:41:
dc:d0:a3:e4:9a:c4:8c:e7:4b:64:ac:46:d3:3c:60:
89:aa:13:aa:ae:32:43:81:95:bc:f9:9a:78:dc:97:
f6:fd:18:26:d9:aa:73:53:eb:23:77:bc:f9:bb:d3:
97:ed:76:24:3a:06:b5:24:05:3a:d5:c2:85:57:d1:
3d:9d:2d:4e:03:94:f8:ab:29:d2:01:5c:38:78:79:
a1:96:8c:24:b0:85:2e:02:20:a1:d0:ad:d0:0c:1c:
fc:a0:8e:35:cb:a0:d8:2a:0e:3a:cd:63:50:f8:42:
40:ae:d1:04:8f:81:eb:b2:64:f6:f2:8b:f4:35:26:
5c:96:61:50:03:a3:86:06:75:c7:9b:1b:97:b9:ae:
64:ac:a6:e5:4a:1a:08:85:bb:af:0c:9d:47:98:5c:
08:18:7f:a6:9e:9b:6d:66:34:59:f7:d1:5a:68:fe:
b7:60:b5:16:88:41:2e:d3:cb:8a:c6:38:57:71:a1:
a0:4c:10:82:25:73:99:bf:4b:1d:49:ca:b0:b9:35:
8a:9f:c3:66:0f:a1:66:2c:24:0a:56:72:dd:41:35:
06:54:e7:fc:69:c9:41:8f:0a:fc:e7:ec:f7:1d:96:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:8F:21:B8:04:EA:FD:3A:84:26:00:94:1E:37:49:00:6C:8B:B0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gtKPIbgE6v06hCYAlB43SQBsi7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ef:f1:60:58:e6:08:7c:e3:7f:6a:64:b4:6b:fd:95:9a:25:
ae:92:d4:4a:86:20:ca:34:0c:50:ff:cb:b0:a5:29:ad:b8:e4:
95:fb:1c:70:e5:91:e4:e9:40:f2:ea:34:9f:f8:a6:b9:b4:82:
2d:88:1d:ae:0d:2e:7f:49:ad:d0:63:9e:30:04:0e:7c:61:d9:
42:fd:ff:59:d4:73:56:af:d0:ea:5a:f3:44:1c:56:f8:c9:83:
eb:46:6b:88:2e:21:c7:02:d4:85:9e:41:34:eb:03:65:34:b9:
34:e4:80:65:4e:ea:81:e5:5e:89:b8:c3:98:01:5f:fe:ae:4a:
73:fd:cd:f7:78:c6:ec:c5:96:cc:fc:f3:4f:8b:fa:b5:39:7c:
79:a3:2f:64:ad:71:37:d5:02:8e:5f:b2:b0:33:33:4f:7f:ba:
a5:54:19:4d:9e:c1:f2:ea:64:aa:96:b2:e0:23:ef:e9:09:cd:
57:a3:d4:38:54:8f:4a:32:67:5f:88:b3:f9:90:d0:5a:9e:32:
58:4c:90:46:e6:a6:41:bd:2f:c4:95:d8:f8:c1:73:b2:c6:b6:
9a:fc:d5:a0:e5:f1:d9:96:09:a7:56:66:6e:51:22:59:f4:41:
bb:14:be:1b:59:93:01:c3:5b:17:3d:d9:0d:75:52:da:eb:53:
0b:99:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:46 2025 by rpki-client