Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/hldJuTEjl8unCKNXMQUaqfYms7A.roa
File: hldJuTEjl8unCKNXMQUaqfYms7A.roa (raw, json)
Hash identifier: d6mrUYAG4iaBkYVKAkjAsZqj4yNvwnKRBZDHFVn9hug=
Subject key identifier: 86:57:49:B9:31:23:97:CB:A7:08:A3:57:31:05:1A:A9:F6:26:B3:B0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0FE8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hldJuTEjl8unCKNXMQUaqfYms7A.roa
Signing time: Mon 26 Aug 2024 05:13:12 +0000
ROA not before: Mon 26 Aug 2024 05:13:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 203.222.0.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4072 (0xfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=865749B9312397CBA708A35731051AA9F626B3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:d9:d7:19:38:29:4a:b5:7f:69:c4:1d:ce:
08:87:34:46:1d:6a:a5:65:6d:97:ed:a1:82:a3:42:
55:3b:d9:ca:c4:c9:ab:ea:c1:80:eb:4b:1e:18:53:
fa:1e:3f:8c:0b:fa:23:99:94:13:51:fd:cb:2c:0b:
bb:e2:0a:6e:96:ef:56:25:a4:30:b8:a0:b7:4d:7d:
f3:0e:0f:46:a6:39:ca:e3:17:e6:e5:d8:39:73:ff:
b3:e1:b5:dc:ee:51:3e:6d:20:19:68:f9:a3:c9:22:
56:6f:28:34:06:5e:d2:6d:d7:3d:04:ee:e8:48:9a:
fa:cc:3f:0f:23:f9:0b:5b:aa:0c:27:81:e4:49:5f:
b1:37:ce:6c:d9:dc:d7:96:fb:25:d5:ee:3b:fb:c0:
ba:04:4a:97:15:25:6e:67:49:a6:ac:2f:45:ed:cc:
b0:78:1e:37:61:57:33:74:b5:b4:89:72:fb:79:54:
31:6a:19:07:58:d7:7a:a7:97:f6:1f:f4:14:61:df:
25:7e:ef:cd:34:99:bd:6f:5e:78:e4:e1:d5:95:de:
ad:32:fe:04:b8:dd:ee:4a:db:24:65:96:0b:62:2f:
42:2d:4b:e3:c4:ff:a2:fc:7f:94:6f:2b:28:21:27:
02:e9:63:16:62:19:b4:ae:32:c3:d8:ef:f7:18:62:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:57:49:B9:31:23:97:CB:A7:08:A3:57:31:05:1A:A9:F6:26:B3:B0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hldJuTEjl8unCKNXMQUaqfYms7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:95:ec:64:94:4d:15:f4:63:54:bc:a1:2f:3b:4b:2f:e9:0d:
e2:9d:32:10:04:cd:5d:fb:86:5c:3e:f0:e8:71:dd:09:78:50:
b2:1e:ad:2a:05:b5:90:19:3a:d6:3d:09:96:7b:47:a0:9f:55:
37:52:c1:09:13:55:15:27:e4:01:37:5e:11:d5:bd:ec:22:61:
04:44:63:ac:f3:91:38:ed:d9:04:07:51:77:7c:af:e5:c6:f4:
2e:28:81:73:5d:02:2e:f1:72:09:d7:70:ae:d9:73:76:ea:7b:
71:89:50:5a:87:b3:ae:bf:c8:40:c2:46:92:6d:e5:52:c6:f6:
c7:45:8b:02:53:72:ef:92:ae:10:cc:6b:44:39:21:f6:b1:ef:
32:92:bd:69:14:27:4c:d0:94:18:b3:27:5d:b3:d4:0a:eb:fc:
1e:2f:ac:d1:85:86:3e:00:fe:70:aa:c9:49:42:7e:96:aa:73:
29:89:fb:35:65:4e:39:de:41:e9:9e:f9:b5:56:60:bd:1f:83:
60:63:7f:7f:0f:3b:2e:c8:2e:99:12:e9:a2:eb:07:df:79:53:
42:45:7c:28:b0:58:9b:55:f9:d0:45:e2:2f:00:5b:5f:33:53:
71:d3:20:ee:f6:24:25:d4:3d:b5:7c:21:62:e2:08:16:77:0f:
9f:28:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:20:36 2025 by rpki-client