Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/H0V5w_KdN2lciTYghYBo7ggWwJw.roa
File: H0V5w_KdN2lciTYghYBo7ggWwJw.roa (raw, json)
Hash identifier: Kz1qw/HAZQ+cy4zcZJ4F7+yTtWvabQs90Q4+sCyfX6k=
Subject key identifier: 1F:45:79:C3:F2:9D:37:69:5C:89:36:20:85:80:68:EE:08:16:C0:9C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D4A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/H0V5w_KdN2lciTYghYBo7ggWwJw.roa
Signing time: Wed 03 May 2023 01:03:29 +0000
ROA not before: Wed 03 May 2023 01:03:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: May 3 01:03:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1F4579C3F29D37695C893620858068EE0816C09C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:22:c3:ca:93:ea:d0:4f:ed:d9:f8:f2:d1:
8d:56:71:df:14:7f:0f:3e:dd:02:00:40:ba:fe:0c:
f2:aa:5a:8d:39:0a:87:5c:c5:4e:20:24:88:80:65:
be:d6:d2:e5:fc:a7:7a:f3:86:9b:d0:64:de:c1:30:
fa:90:45:2a:1b:e5:73:ba:8f:1a:31:a7:f0:ef:ff:
e0:8a:23:d0:02:53:8c:26:44:6c:4f:49:67:60:2d:
64:a8:be:3b:52:ac:9b:30:64:e7:b4:b8:42:15:8b:
d2:dc:27:66:2e:83:ba:0e:f0:99:0a:84:b7:67:dc:
93:76:74:1e:f9:39:03:b3:f3:46:c8:01:0a:d1:b4:
3b:11:c0:f5:67:32:ed:15:25:0a:d2:23:d4:42:25:
c7:b5:ba:eb:36:18:43:c7:1a:c8:f0:89:41:42:ea:
f5:01:b8:5a:64:e6:6c:e0:a2:7a:12:03:70:a7:45:
92:f3:93:4e:5f:28:e6:1b:65:d5:42:59:2f:b0:3b:
7b:11:c5:4a:d0:68:06:df:c4:cc:8d:fb:61:67:a9:
b7:19:65:fc:7f:06:bd:e4:d9:98:46:4c:62:a1:2f:
b1:64:12:68:ef:af:a1:b5:cf:44:0e:50:57:50:18:
71:c1:59:40:b0:06:6b:0e:63:2b:a4:8f:03:6d:74:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:45:79:C3:F2:9D:37:69:5C:89:36:20:85:80:68:EE:08:16:C0:9C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/H0V5w_KdN2lciTYghYBo7ggWwJw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.160.0/19
Signature Algorithm: sha256WithRSAEncryption
59:51:0e:a7:7a:76:74:fb:dd:16:54:ac:e1:c9:df:59:d8:e3:
50:04:7e:e1:1e:1d:8d:ff:27:fd:12:ba:2b:4a:d2:c2:f4:c4:
0e:25:29:68:cf:ef:b6:b8:6f:40:f0:17:f0:cb:57:55:a9:41:
29:2f:bc:a3:ad:cc:fe:66:88:2b:a7:05:4b:23:6c:bc:93:86:
6b:38:6a:d3:ae:4e:5b:b3:f7:f4:a5:e1:0e:cd:7b:2b:b3:28:
db:1f:e3:68:5a:47:ee:2c:26:8b:63:40:4f:d6:ca:e5:89:40:
2e:8f:d4:9e:24:08:7f:13:d3:83:ce:e9:d6:65:89:a1:5f:8d:
48:6a:a1:8f:71:ef:51:70:15:45:be:49:90:ce:b3:8c:b3:3b:
8d:88:31:0f:ac:26:3e:c4:61:b2:5e:9e:86:63:1f:f5:19:17:
ec:d2:3d:be:e8:8a:d0:9d:7f:3d:76:58:02:73:d9:ec:30:27:
47:29:c0:8e:a0:1f:cc:27:33:bb:0f:b3:2f:95:d8:65:14:8e:
e1:4a:41:6e:3e:2a:5b:0c:e6:fc:3e:98:e2:64:49:94:d8:e4:
56:90:e4:3b:93:e6:a4:5e:bd:58:13:e9:b8:e2:8a:91:6a:e5:
a2:a0:55:76:06:ec:f5:2e:ec:bb:31:78:cd:8c:53:af:a3:5c:
7a:26:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:13 2023 by rpki-client on console-fra.rpki-client.org