Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa
File: xAEVoThVelJhj5cmUwDDmrTFKPY.roa (raw, json)
Hash identifier: DjmMO0OHkNRdJ0+8/E6xPVSHnLghDOl3dUwO1ZIegpk=
Subject key identifier: C4:01:15:A1:38:55:7A:52:61:8F:97:26:53:00:C3:9A:B4:C5:28:F6
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1027
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa
Signing time: Mon 26 Aug 2024 05:13:26 +0000
ROA not before: Mon 26 Aug 2024 05:13:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 27.96.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4135 (0x1027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C40115A138557A52618F97265300C39AB4C528F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:fd:9a:ee:d7:48:ab:1d:bf:26:14:8c:60:
41:4e:19:52:8b:90:00:84:0a:a1:2c:b0:7f:bf:53:
69:c9:0b:60:ed:e1:46:24:65:84:5e:49:7a:e1:9e:
55:e6:ad:1d:8d:2a:b0:f7:37:e9:d2:f9:c8:13:cb:
91:2f:50:58:83:72:28:b7:2a:d6:b1:bd:f4:4a:b8:
f2:43:dd:be:64:a6:6b:5c:e3:30:2c:59:ec:2e:d1:
58:39:09:40:78:93:fe:2f:c0:8f:b0:0f:96:32:96:
78:73:a0:67:78:d7:16:39:a7:11:5d:7e:11:19:a9:
db:d3:6f:ac:72:f8:75:a5:47:9d:bf:3b:a6:3b:fa:
40:05:48:89:bf:e9:49:76:39:45:da:a5:8f:17:79:
e1:54:d2:06:b7:1e:65:14:37:f0:21:c5:6e:30:9e:
93:7f:08:3e:df:c6:56:1c:c3:2c:e0:58:53:05:82:
03:9d:90:a8:7e:68:0d:67:c0:44:73:5f:e2:f5:d9:
01:ff:00:dd:d8:50:3a:df:db:bc:63:b5:25:16:d5:
bd:df:7b:72:52:16:7a:e5:c2:04:eb:d8:d8:2e:08:
d0:44:d8:d1:cc:d1:cd:3d:8d:e8:77:dc:75:95:ee:
fb:e0:ee:db:19:71:cd:72:5b:bb:9d:4f:82:ee:4b:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:15:A1:38:55:7A:52:61:8F:97:26:53:00:C3:9A:B4:C5:28:F6
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xAEVoThVelJhj5cmUwDDmrTFKPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:86:ad:7a:92:14:35:95:5e:2f:04:af:76:9c:0a:b3:ea:4f:
ae:5a:eb:9a:ff:5a:f2:ba:0b:1c:4d:6a:2c:12:95:85:fe:cb:
6b:b7:8a:88:22:de:87:e4:b3:67:44:13:49:c9:53:ef:73:be:
0e:37:d8:ff:a0:4c:67:83:a1:05:c6:95:d1:15:09:c2:4c:e1:
7a:4f:17:0b:75:d8:6d:d0:af:46:57:1e:56:9e:34:fb:70:b7:
5b:bc:50:1c:00:91:1b:c0:cb:3c:4f:25:ea:70:03:eb:e4:3b:
ce:c7:19:c7:15:eb:f1:ba:20:58:ec:b8:61:fa:05:3f:1e:0e:
4e:c3:93:e4:d6:49:29:91:cb:41:2b:5c:55:0f:96:d7:35:21:
e9:33:24:9e:49:ff:74:9d:67:53:24:90:89:95:46:8b:c4:07:
73:0a:66:fc:ce:dc:0d:43:8a:69:5b:de:67:c2:ad:38:27:34:
5f:f6:13:e1:cd:91:12:96:dc:ec:ce:5a:b6:fb:3b:3d:ce:95:
17:35:e7:cc:d7:a3:d3:35:69:42:24:25:95:49:ef:27:8c:0c:
29:36:ff:06:b5:af:87:d8:c2:88:2d:22:17:12:6f:c5:1b:44:
48:2e:98:4c:d0:87:c9:85:f2:ef:dc:d1:6e:de:2c:31:fa:35:
69:7a:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:22:28 2025 by rpki-client