Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/C6zTHrhGyDTPt8SC_zFjfcYqMtg.roa
File: C6zTHrhGyDTPt8SC_zFjfcYqMtg.roa (raw, json)
Hash identifier: cIp3xAmcAMPvOD6+h9srjwvlrYg/w1UTDSah6Yn68Vc=
Subject key identifier: 0B:AC:D3:1E:B8:46:C8:34:CF:B7:C4:82:FF:31:63:7D:C6:2A:32:D8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D3E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/C6zTHrhGyDTPt8SC_zFjfcYqMtg.roa
Signing time: Wed 26 Apr 2023 10:31:42 +0000
ROA not before: Wed 26 Apr 2023 10:31:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 211.79.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:42 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BACD31EB846C834CFB7C482FF31637DC62A32D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:ae:38:df:25:0c:eb:e7:63:4a:d7:fb:da:
b9:66:5e:a8:ee:5d:33:02:a4:31:58:39:ad:8b:01:
b5:9a:f7:d6:27:d5:f4:af:83:89:d1:36:88:cf:a4:
27:7d:e4:19:9f:b3:63:12:b6:fd:eb:dd:87:dc:ba:
84:78:e6:a3:d0:10:41:e5:50:2f:36:72:95:48:9b:
b6:d4:9e:60:a7:43:89:02:25:62:4a:00:7b:3b:63:
27:9b:fe:a8:45:61:b8:cf:75:fd:f9:68:fc:03:ee:
80:00:a6:3a:d6:ff:fc:79:b2:de:8f:f3:3d:d5:b9:
cb:2e:bb:2a:19:f4:ee:1f:4c:6e:c5:d9:b9:3b:13:
33:81:dd:a3:36:30:32:15:dd:4e:18:05:62:15:ef:
39:f3:c7:92:bc:bf:50:de:46:f1:4f:e4:3f:40:1e:
a4:ee:7a:2e:87:a7:8b:cd:2b:73:da:46:78:d2:7e:
d6:f4:f1:31:b4:32:61:bb:4e:91:de:2b:ed:2d:be:
fc:ba:3d:1a:3d:93:55:f8:6a:9d:0c:41:d7:f4:3f:
eb:91:34:ee:b4:f4:16:18:40:e6:37:b2:29:3c:5a:
0a:a6:6c:58:18:13:b5:7d:94:ca:08:26:35:52:7b:
b9:b6:a6:22:44:cc:ff:2a:aa:6b:ff:31:f6:ce:7e:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:D3:1E:B8:46:C8:34:CF:B7:C4:82:FF:31:63:7D:C6:2A:32:D8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/C6zTHrhGyDTPt8SC_zFjfcYqMtg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.120.0/21
Signature Algorithm: sha256WithRSAEncryption
91:c7:15:1f:b6:fd:8a:9f:50:73:86:4e:7a:04:4b:62:fc:80:
f0:93:e8:9b:22:ac:7d:32:1e:cf:9f:64:60:da:33:1f:2b:ed:
9d:a1:2a:0b:37:65:50:6b:d7:8f:13:f3:30:6b:0d:98:f0:8f:
34:15:87:ca:42:10:d0:23:54:75:8f:2f:66:52:86:b7:1b:08:
6b:db:5f:43:60:35:bf:4d:d7:a2:7e:a8:55:b1:5e:e0:6f:61:
f7:32:b8:cf:f6:36:3b:8c:43:73:fb:a5:ad:39:ce:cc:66:08:
01:98:6b:aa:67:09:51:1d:7f:fc:86:60:cd:5b:cd:d8:3b:f2:
16:74:d3:bc:80:7c:a5:3d:3c:1a:2c:46:68:2b:5f:96:02:09:
e4:2b:da:68:c9:f5:c6:91:81:44:c9:55:89:90:63:ff:84:0e:
24:dd:0a:bb:d1:ae:cb:ae:a5:c0:54:6b:ab:fb:12:08:a1:36:
13:6d:2f:df:26:7d:b5:9a:1a:2a:83:d2:ea:a2:80:31:86:30:
e0:10:e5:ed:7a:17:8f:83:9e:a6:c9:0d:93:24:da:19:4a:ef:
e0:40:83:35:ca:67:29:57:db:b2:db:b5:0f:9e:ee:bf:88:35:
0c:b1:b6:11:76:59:1d:b9:ca:cb:2a:50:5a:f7:58:8f:db:34:
19:bb:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org