Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/4dtJ_S23Ld7vFR4EL7ZmOUWJCLA.roa
File: 4dtJ_S23Ld7vFR4EL7ZmOUWJCLA.roa (raw, json)
Hash identifier: ukWDTx59+krk2mimYjgGPaRZZsEGGTbXORvzcBOBxAc=
Subject key identifier: E1:DB:49:FD:2D:B7:2D:DE:EF:15:1E:04:2F:B6:66:39:45:89:08:B0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4dtJ_S23Ld7vFR4EL7ZmOUWJCLA.roa
Signing time: Thu 15 Sep 2022 02:37:22 +0000
ROA not before: Thu 15 Sep 2022 02:37:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.217.96.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E1DB49FD2DB72DDEEF151E042FB66639458908B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:7a:0d:a8:af:b4:6d:2d:85:7d:9e:33:e8:
5d:ad:6f:d0:29:9d:03:e1:86:51:b8:c9:2e:e9:d4:
2a:23:69:f5:12:3e:7b:6c:dd:f5:f6:67:cc:2a:e2:
74:82:ca:b6:dd:83:de:ce:57:d0:cd:06:a6:77:a9:
33:e5:d9:41:90:cd:bd:9d:a3:0f:5b:56:1c:9c:a6:
d7:a3:62:2e:a9:78:60:f3:09:5c:69:5a:ab:b3:e5:
19:90:76:02:7e:5c:52:78:28:e0:fb:a2:c2:2c:1f:
32:7e:4a:86:4f:23:2e:cc:56:1a:29:53:a2:6f:df:
9a:98:bd:2e:af:b0:48:27:e3:b7:64:9a:d4:af:8b:
38:61:c5:4b:f3:40:cd:f8:6b:10:42:31:6d:20:4a:
6e:2b:8d:e7:14:a2:21:de:21:31:0a:ef:57:f9:a1:
72:e5:b2:a8:12:a7:27:a8:b6:4e:ee:ec:44:3c:69:
a5:fb:f5:2e:7c:b6:be:46:5a:61:5e:71:52:92:ab:
23:5a:9d:73:41:69:58:88:f9:52:cd:d8:4b:5e:bc:
28:65:d8:33:c5:31:68:cc:cc:5b:f6:77:92:1c:14:
3f:63:a8:37:25:18:9a:9f:52:cd:4d:51:fd:20:3b:
2b:f4:e1:e7:c5:3e:91:09:19:ab:11:24:91:b5:34:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:49:FD:2D:B7:2D:DE:EF:15:1E:04:2F:B6:66:39:45:89:08:B0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/4dtJ_S23Ld7vFR4EL7ZmOUWJCLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/21
Signature Algorithm: sha256WithRSAEncryption
19:6a:94:7c:7c:51:dc:fc:35:ef:2f:3b:9e:d9:6b:19:1c:62:
fa:1e:75:70:16:40:87:f0:05:94:49:ba:26:1c:13:c2:43:37:
50:5c:f9:f2:bd:77:5b:b3:c9:63:96:75:f0:16:b6:a9:70:a4:
6c:c7:ed:0b:f1:61:a2:bd:bf:05:53:8e:e7:b1:72:04:13:41:
d7:3e:21:2b:9a:b5:ec:dc:85:6f:d9:0e:15:05:03:05:c0:91:
52:36:67:ef:f1:de:15:e6:dd:7d:cc:10:30:b4:65:36:b5:23:
51:e8:ff:f8:d4:58:5c:0e:db:45:1b:be:0e:1f:7b:3a:49:25:
8b:f2:15:e4:6c:bd:d7:bd:d4:36:9e:af:c5:af:70:72:9b:25:
33:1a:ab:c5:01:15:49:d4:ec:21:64:8f:7b:e9:e4:41:75:8e:
87:31:75:63:5c:99:db:1a:d6:7d:5b:f3:d5:94:a1:f8:29:d5:
7e:fe:ae:dd:39:c0:73:db:4a:74:d4:2a:d6:3d:0f:1a:2b:27:
40:45:84:fe:4b:2f:c7:b0:eb:64:5e:03:41:79:26:49:a6:e8:
44:af:6a:4f:d2:b4:0d:21:f5:05:46:74:77:5f:76:a4:98:de:
c5:7c:7b:e7:88:87:7c:6c:b7:1f:75:b3:ed:44:da:8c:ef:c0:
55:a0:b3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-fra.rpki-client.org