Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/CX7oEkivAlALaUnWkPXfOlDwbRE.roa
File: CX7oEkivAlALaUnWkPXfOlDwbRE.roa (raw, json)
Hash identifier: ItF6oGQPNaQfYu2g5cMKb2IOAaW9uDZhxxb03cW9+Q4=
Subject key identifier: 09:7E:E8:12:48:AF:02:50:0B:69:49:D6:90:F5:DF:3A:50:F0:6D:11
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D4C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CX7oEkivAlALaUnWkPXfOlDwbRE.roa
Signing time: Wed 03 May 2023 01:03:45 +0000
ROA not before: Wed 03 May 2023 01:03:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: May 3 01:03:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=097EE81248AF02500B6949D690F5DF3A50F06D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:3f:1f:ca:36:4b:90:67:66:4d:d9:91:07:
47:74:e8:72:78:c2:90:45:ef:13:df:bf:02:88:e8:
29:cf:b6:bf:cb:3b:95:37:29:1f:93:84:fa:93:99:
6b:94:a7:6c:6a:25:d3:bd:04:96:18:d6:fe:ee:c3:
90:5a:8b:eb:c6:5d:b3:6f:6f:32:f7:64:de:df:66:
d9:09:f2:b5:b3:aa:e0:99:74:2f:f1:2a:9c:5b:a3:
bf:d2:c9:a7:28:d4:da:13:56:37:8d:8a:36:e5:bf:
2f:cf:b3:94:04:25:38:1c:64:91:bf:fb:f2:73:30:
18:9a:a1:85:d2:e8:7f:8a:39:12:dd:0e:da:dc:ac:
66:41:c9:a4:25:6e:04:43:a7:e7:00:86:52:ff:29:
57:a8:63:94:32:3a:73:ae:05:af:4a:74:b5:58:c6:
f4:35:23:b3:0f:e5:df:30:a5:91:64:09:20:e1:d8:
d8:9e:81:6a:77:59:b0:ce:f5:d2:1f:d8:8a:9c:a1:
92:76:b3:c8:1e:9f:18:e3:90:45:02:d9:24:2a:a8:
1e:dc:33:7f:b7:e7:52:46:31:b5:1c:2b:e7:26:f9:
d7:0c:63:ce:8f:f4:52:76:98:5c:f9:7e:ac:7c:2e:
75:30:5a:44:2a:6f:8f:07:99:35:55:b4:c2:74:f2:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:E8:12:48:AF:02:50:0B:69:49:D6:90:F5:DF:3A:50:F0:6D:11
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CX7oEkivAlALaUnWkPXfOlDwbRE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:61:6e:db:8d:76:3d:69:ab:e2:2f:f8:bf:24:d2:2a:76:56:
8c:bf:96:33:b0:c8:30:ee:ee:53:da:3e:e4:93:fc:42:e4:4f:
68:41:c2:85:9d:95:0b:5e:0f:06:e2:e8:2d:eb:d5:b5:5e:af:
bc:a5:0c:3c:9d:01:c8:cb:61:b7:58:6c:e7:87:8f:84:ce:92:
8c:f0:32:c3:e8:ef:1d:92:da:26:dd:ac:39:41:70:8c:1b:d1:
b4:e0:5a:b0:e3:13:c6:76:90:22:ab:f1:07:8d:84:9d:0c:c7:
dc:51:f2:25:11:c2:13:3f:36:ec:37:04:01:aa:39:2e:9b:59:
0e:80:f5:49:a2:95:2a:0a:91:79:e1:c7:68:7b:09:05:37:06:
d5:27:60:50:4f:87:e4:73:8b:50:6f:d0:c1:65:78:d5:cf:aa:
0b:59:10:e3:8a:d7:e5:70:bf:04:2c:ad:69:af:96:a5:6e:ad:
49:8d:d2:b6:9e:8b:55:c7:ae:01:ad:9d:67:61:4f:37:40:85:
88:a5:e3:17:98:f8:1a:00:b7:28:a7:88:79:e8:49:84:db:ca:
a3:f6:c7:65:85:85:46:6f:05:a3:4a:85:64:30:5c:ea:3a:32:
fd:b9:c2:6a:24:3d:1d:c5:1a:59:b1:64:54:da:c4:d5:04:ac:
4d:9d:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org