Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/4TmFkGf9j7HixXFPb9dmPZz9vz4.roa
File: 4TmFkGf9j7HixXFPb9dmPZz9vz4.roa (raw, json)
Hash identifier: PCffKHLtkqnnNF8J3Q0VRjDTsF3cv9PRF4Nd6zwUtSM=
Subject key identifier: E1:39:85:90:67:FD:8F:B1:E2:C5:71:4F:6F:D7:66:3D:9C:FD:BF:3E
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4TmFkGf9j7HixXFPb9dmPZz9vz4.roa
Signing time: Thu 15 Sep 2022 02:37:26 +0000
ROA not before: Thu 15 Sep 2022 02:37:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.192.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E139859067FD8FB1E2C5714F6FD7663D9CFDBF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:33:c1:64:05:f3:61:47:d1:70:ae:d2:c9:
9a:f7:42:c2:45:f8:29:d9:e2:25:69:bb:a8:c9:0a:
17:46:ea:16:a7:4d:b4:75:23:3f:d3:37:ca:34:be:
fd:89:34:01:a4:2c:f0:79:90:ef:f7:65:93:cb:be:
7e:9b:19:ee:ad:70:1e:02:bb:72:93:a0:a1:16:f2:
11:cc:ed:63:9d:03:b2:91:d5:18:1c:78:06:8b:f3:
c5:35:c7:35:f6:5e:bf:42:21:87:15:f7:6a:71:a7:
d3:6b:be:50:b6:58:43:8d:4d:f0:9b:18:f2:f0:36:
c3:70:d5:e3:13:a1:b6:c0:e4:f4:ec:d7:bb:70:9b:
a3:06:9b:3e:a6:86:97:1d:46:45:02:f5:7a:8e:f7:
30:19:b2:3e:14:a4:3e:19:35:83:3a:70:2d:0a:43:
92:b8:57:27:11:1a:ef:fe:0a:44:65:81:a9:da:28:
78:37:06:16:2c:32:07:40:17:c8:92:77:22:d2:14:
95:57:8c:90:b6:2d:45:f1:8c:2f:b6:c7:e5:3e:4e:
8e:9c:3b:19:4c:85:91:60:06:81:64:27:71:22:ff:
98:e9:79:de:c7:be:3e:0b:dc:56:bf:14:08:ef:e8:
8b:4b:83:7a:ce:dc:b9:9c:03:e1:92:35:0b:61:29:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:39:85:90:67:FD:8F:B1:E2:C5:71:4F:6F:D7:66:3D:9C:FD:BF:3E
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4TmFkGf9j7HixXFPb9dmPZz9vz4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:c7:91:97:8f:27:9c:4a:1d:af:7c:8b:ee:e9:52:d9:4f:56:
64:14:7a:8d:d0:9a:7a:8a:cc:d2:3b:35:a2:9a:3f:76:55:fc:
73:21:5a:21:e1:82:af:73:5c:f3:48:91:07:75:a4:46:d3:86:
53:83:d3:8d:5e:4b:67:34:a6:6a:ee:d1:ee:de:1e:46:5b:1e:
64:77:03:ee:fd:89:61:d7:f7:45:f0:af:63:82:e8:b5:e8:aa:
9a:e6:a4:cf:42:a9:e2:2d:db:a9:b7:72:2e:36:48:1f:73:ce:
f3:97:ae:bd:f3:da:b7:13:76:b7:f6:84:5e:60:b3:0e:ca:bb:
fa:e0:49:a5:94:6b:15:87:ca:b1:8c:71:73:e3:80:f4:eb:52:
48:76:9d:76:14:03:c8:dc:72:1c:b3:b6:ef:20:3d:8f:34:4f:
3e:aa:ca:0b:b2:f1:e4:8e:e3:04:74:09:cd:55:49:d3:f8:db:
ed:b6:85:14:c1:0c:82:cf:b2:4a:27:35:5a:b7:21:eb:46:d0:
d1:43:f7:df:46:e0:64:7e:a8:11:d5:1c:93:3d:be:42:80:03:
06:42:d6:f1:9d:a6:8e:80:42:2f:70:36:c1:66:87:cd:06:5b:
02:22:b9:c6:37:bc:b3:4f:7f:2e:52:15:99:04:66:36:0f:e4:
cb:43:9e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org