Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/40_AlIPGl2ffmFLPZZpi8TtvaGo.roa
File: 40_AlIPGl2ffmFLPZZpi8TtvaGo.roa (raw, json)
Hash identifier: Ehh3Ftrxx6VTY1Pd/j37Yf6MDNyYzAbtUjyqIbXC+mE=
Subject key identifier: E3:4F:C0:94:83:C6:97:67:DF:98:52:CF:65:9A:62:F1:3B:6F:68:6A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D1F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/40_AlIPGl2ffmFLPZZpi8TtvaGo.roa
Signing time: Wed 26 Apr 2023 10:31:34 +0000
ROA not before: Wed 26 Apr 2023 10:31:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 119.15.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3359 (0xd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:34 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E34FC09483C69767DF9852CF659A62F13B6F686A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1d:8f:8b:1c:69:47:1e:a2:47:78:1e:c5:81:
be:ad:ca:b9:ec:f6:70:84:bf:93:fa:29:4a:6b:d9:
e3:34:c0:df:ec:6e:15:64:5a:6a:ab:3a:bf:4c:5f:
75:45:5a:e5:68:6e:7b:ce:9e:a7:35:76:8c:23:6f:
5c:07:52:51:7f:86:8f:84:11:86:73:e0:24:8b:4d:
79:e6:dc:e5:df:62:cc:85:9e:d2:1d:f5:1f:5d:94:
2e:83:8e:e3:7b:0b:e4:13:25:6a:2c:3e:24:e0:1b:
47:23:0b:bb:52:be:49:fb:66:9c:67:e1:9b:51:94:
5d:1b:90:92:a8:c2:6b:ca:cf:be:46:d8:2c:c4:71:
df:34:d9:b2:b8:1c:3c:d9:c3:17:58:b5:7b:bd:20:
c9:56:f0:e3:f7:99:50:51:43:77:4b:e9:1f:5c:01:
8a:fa:27:10:c1:f5:64:20:74:d5:d9:14:07:ff:9c:
59:6e:82:51:3b:83:ee:2f:0c:aa:5e:1b:b6:44:cb:
ff:0f:92:c9:c3:e8:f4:d8:7b:40:6c:a6:ed:9a:01:
ea:4e:45:dd:4a:b3:d9:b2:05:eb:aa:74:c1:c3:05:
05:d0:01:40:f5:86:7b:34:f0:5b:47:e4:1d:c8:4e:
57:fd:57:f7:5a:ab:97:85:9d:68:4e:a7:25:24:c1:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:C0:94:83:C6:97:67:DF:98:52:CF:65:9A:62:F1:3B:6F:68:6A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/40_AlIPGl2ffmFLPZZpi8TtvaGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.224.0/19
Signature Algorithm: sha256WithRSAEncryption
01:7e:56:99:8d:e5:cc:dc:8d:90:84:02:46:2b:c9:c9:7c:67:
6e:82:28:68:76:4f:f7:72:66:ae:c1:7a:51:07:92:e1:cb:da:
60:6e:cc:ca:19:e5:31:3e:99:b5:b1:0e:f2:1e:e1:5d:f8:d1:
b9:b7:4d:d2:99:0a:f9:21:99:cc:78:4f:7a:35:67:02:c0:c7:
95:0d:06:b8:db:6a:29:d5:96:35:54:4b:41:f0:7d:41:73:ea:
0d:2f:3b:6c:30:1a:9f:c3:03:3a:a6:3a:11:a0:a6:f0:69:94:
c6:e2:7f:11:37:11:35:b7:f0:43:a5:41:bd:2f:84:39:8b:6f:
55:da:b1:3a:cc:ef:40:4d:e9:e4:b1:3e:c6:5d:1b:da:25:e0:
2a:94:08:21:20:ab:f3:02:db:44:ab:6d:0a:6f:af:66:56:21:
cb:4b:3c:20:5e:98:11:76:db:cd:85:ca:bc:ae:37:67:06:5a:
5e:63:55:47:57:63:c2:f3:d7:cd:64:94:e9:de:c7:cf:4b:b1:
be:89:82:f7:05:b3:3f:1f:ab:7a:fb:83:ac:93:a2:01:8c:8e:
56:ac:5d:c3:86:a9:5f:65:12:7e:05:ef:58:8f:70:5b:7a:eb:
e7:21:ea:02:18:bb:b4:cd:04:3f:a1:ad:2c:66:81:f9:21:50:
0d:fa:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org