Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3UL0X2AJgiLA6XE9zp-agnivHKg.roa
File: 3UL0X2AJgiLA6XE9zp-agnivHKg.roa (raw, json)
Hash identifier: gbi6dfugTk5mFNBglj1yG6pipDancqLI254ZoFQ4c0o=
Subject key identifier: DD:42:F4:5F:60:09:82:22:C0:E9:71:3D:CE:9F:9A:82:78:AF:1C:A8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3UL0X2AJgiLA6XE9zp-agnivHKg.roa
Signing time: Thu 15 Sep 2022 02:37:25 +0000
ROA not before: Thu 15 Sep 2022 02:37:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD42F45F60098222C0E9713DCE9F9A8278AF1CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:fa:3a:05:0b:53:e5:47:dd:1b:e2:9b:14:
d7:96:63:5a:a7:22:b6:ed:2f:7c:c2:78:a5:4a:a0:
17:85:ac:d2:5c:c5:da:01:14:1e:1a:60:8d:85:82:
d1:45:ec:bc:2f:40:6b:55:40:cc:1b:a9:e4:63:8d:
80:4a:0c:1e:b0:84:98:71:a8:bd:6f:11:f4:ab:92:
11:f8:9d:c8:8a:02:e2:b5:a4:c4:52:84:6a:41:90:
c3:0e:60:20:c4:c9:7a:9e:49:08:78:4f:cf:c7:98:
de:7a:12:00:b6:da:a2:23:26:4f:04:62:7b:46:43:
3e:02:f4:01:8b:33:3b:e0:1e:d3:43:df:83:df:62:
17:16:25:e6:b7:ad:29:1f:c6:89:ee:36:09:c7:0a:
d2:fb:e5:94:22:96:ee:c2:29:da:c1:79:de:2e:29:
e8:18:1c:91:90:ab:fc:b5:1f:fa:45:e2:0e:9a:8d:
e4:49:03:9d:f7:c0:b4:2f:61:62:eb:71:d5:6e:29:
8f:71:eb:01:5c:5f:88:60:5a:53:e5:e1:e6:ca:26:
fc:7d:49:d6:f4:de:6e:71:b8:81:07:af:5a:b0:c7:
4c:df:22:74:fc:08:b5:2f:b1:61:31:40:d1:e8:cc:
b4:f4:1b:12:17:f1:9e:71:72:17:1c:17:b3:4d:bc:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:F4:5F:60:09:82:22:C0:E9:71:3D:CE:9F:9A:82:78:AF:1C:A8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3UL0X2AJgiLA6XE9zp-agnivHKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:f0:a2:9a:81:5c:72:2d:3c:32:41:d3:ee:6c:c8:56:e9:cc:
77:ad:83:77:28:62:20:88:31:3f:01:fa:22:a0:60:fa:a9:ea:
7b:54:fb:de:d0:a7:ad:14:b6:b4:3b:a4:a4:8a:b3:88:42:04:
69:ee:3c:d1:62:50:25:be:6b:2c:f5:92:87:2b:ae:33:38:0a:
28:41:e3:ad:2a:7c:bf:8c:de:d6:a2:96:e2:3f:7d:6e:11:8c:
cc:81:13:42:9b:0c:b5:45:aa:f5:84:d6:60:7f:2b:f4:87:db:
88:c3:0e:aa:2e:4d:b3:02:8c:83:d0:f7:e9:96:9e:a0:c3:c4:
12:20:4a:08:a2:08:6e:a2:95:93:e3:4f:02:10:78:4d:1b:54:
1f:46:cc:a0:12:82:7e:a6:e7:14:7d:6d:79:01:64:cc:9c:4d:
0b:eb:5d:d9:e5:c0:e8:a6:02:d0:43:9a:38:54:e0:91:1a:c3:
c0:53:6a:bb:c4:8e:da:ce:1d:35:5a:0b:f9:9f:b5:06:3f:f1:
19:b4:76:3d:58:ac:50:08:d9:f3:92:ce:45:77:9a:92:74:39:
96:9c:07:58:19:28:49:c6:2a:29:57:b4:5d:5b:0e:74:c3:31:
35:9a:42:ea:8e:75:3e:ec:91:1c:09:87:73:52:47:7c:2c:2e:
b2:74:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org