Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/LrqV26GUXxL9PRh47d6KqKQTa6g.roa
File: LrqV26GUXxL9PRh47d6KqKQTa6g.roa (raw, json)
Hash identifier: TXbwh1P3PTUWEbX9OH1IMdJ8DOwy4Bw/0hKnBRFix7M=
Subject key identifier: 2E:BA:95:DB:A1:94:5F:12:FD:3D:18:78:ED:DE:8A:A8:A4:13:6B:A8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D01
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LrqV26GUXxL9PRh47d6KqKQTa6g.roa
Signing time: Wed 26 Apr 2023 10:31:26 +0000
ROA not before: Wed 26 Apr 2023 10:31:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.128.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:26 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2EBA95DBA1945F12FD3D1878EDDE8AA8A4136BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:bc:94:41:ef:86:c0:ca:8c:6f:a0:6e:6b:
2d:8a:cf:cc:c9:4d:36:af:8d:e1:b8:14:49:24:5b:
16:44:97:17:6b:f1:2a:02:a4:d1:ad:3e:f3:3e:e7:
f2:c3:95:82:c1:31:32:11:3d:21:b8:46:2c:2f:7b:
a8:e6:c6:d4:37:37:70:da:cd:a3:e7:43:86:0a:9f:
3a:aa:63:4f:1b:a5:9b:28:43:a0:e5:de:9b:69:26:
a9:05:05:d7:6e:ea:71:21:bb:f6:da:27:63:0d:aa:
3a:55:bf:e1:63:44:bb:df:a9:8c:5a:1c:09:b8:18:
83:dd:8b:df:64:e0:c8:b1:24:f5:a5:a9:c5:be:9a:
fd:c2:1b:27:d6:61:66:60:ad:58:b1:af:8b:3f:07:
15:14:0d:2b:88:47:8d:fe:95:f5:4c:c8:3c:5c:0b:
08:3c:76:12:c0:76:e6:d1:b3:56:03:91:94:d8:8a:
29:14:23:3c:ea:07:b4:78:56:97:d2:0a:6a:0b:e8:
19:d8:6d:83:1f:1a:51:7b:07:32:82:98:21:0b:ab:
b4:4a:71:f1:27:46:38:10:8b:ed:c9:7e:5b:1d:8c:
3e:82:49:05:6c:e2:93:bd:64:cf:73:5d:54:d3:f0:
3c:42:af:9a:ce:e5:fb:29:fd:db:74:d7:9f:88:c2:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:95:DB:A1:94:5F:12:FD:3D:18:78:ED:DE:8A:A8:A4:13:6B:A8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LrqV26GUXxL9PRh47d6KqKQTa6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/19
Signature Algorithm: sha256WithRSAEncryption
59:b6:6f:43:27:f0:ea:ef:bd:20:fc:78:23:fc:c7:dc:40:81:
98:9e:35:ce:b6:3e:1c:71:3a:de:d0:4c:cc:21:2d:97:37:66:
13:de:d4:18:56:23:13:20:f7:00:35:b1:14:ed:3d:2d:62:43:
0c:33:9e:d0:e4:a6:fc:68:2c:7d:e7:dd:a0:92:16:af:bd:69:
ed:5f:ca:0d:b3:30:b9:e4:64:4e:ec:9f:93:9b:02:4d:29:26:
bd:4b:99:7b:02:f8:28:fc:bd:d0:72:30:aa:0a:17:32:e3:ef:
6b:14:f9:20:95:8a:ea:42:2b:d0:5a:5d:a1:b8:50:4d:b8:9c:
58:9b:88:ea:0f:69:a3:6f:80:d0:3a:c9:d5:0b:fa:5f:f3:df:
39:f4:d6:89:09:3e:d8:4b:de:9c:e8:c1:2b:6f:a8:2f:a3:68:
fc:a0:1d:bd:5b:b1:80:a7:61:93:e7:86:d9:3b:ba:d1:dc:fe:
4c:fe:74:06:28:f5:1a:70:90:12:9f:f6:e5:7b:bf:fe:17:17:
85:45:1c:cc:01:a5:04:c9:7e:73:14:2d:d5:d9:62:42:00:ba:
b1:66:de:39:38:4d:ba:41:1d:59:be:3b:1f:25:20:88:1b:85:
20:db:79:fa:43:43:cc:fd:70:28:37:44:8d:cb:d5:ba:d3:8e:
7d:ab:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org