Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mjhvv7eGJRNVTrfEWetUU59bSEs.roa
File: Mjhvv7eGJRNVTrfEWetUU59bSEs.roa (raw, json)
Hash identifier: jsGmq5pD0hp2jKEn2TgOUhWccRtlL/XzYck/HmUcWGs=
Subject key identifier: 32:38:6F:BF:B7:86:25:13:55:4E:B7:C4:59:EB:54:53:9F:5B:48:4B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D08
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mjhvv7eGJRNVTrfEWetUU59bSEs.roa
Signing time: Wed 26 Apr 2023 10:31:28 +0000
ROA not before: Wed 26 Apr 2023 10:31:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.96.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:28 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=32386FBFB7862513554EB7C459EB54539F5B484B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:ed:42:b5:45:32:33:b9:f0:ce:57:a2:8c:
ae:25:cf:f9:39:10:5e:98:31:37:43:16:a0:91:d9:
ef:82:6f:08:e7:58:4d:ff:e5:b9:91:1f:64:9f:50:
63:32:78:4a:43:7f:40:65:c2:90:bb:a8:97:90:df:
dd:c0:c7:ce:01:07:66:d9:41:0d:3e:8c:0e:d6:c1:
2e:92:bc:bc:ab:00:d0:18:20:a2:25:ac:37:0c:0a:
26:75:6c:d9:34:11:b5:08:f8:4d:ed:fe:34:32:85:
74:10:c9:d5:ee:26:06:1c:56:15:5b:0c:14:55:93:
5f:fd:7f:25:39:72:64:95:3a:9c:e2:1c:36:a1:ab:
6f:06:c9:e1:69:84:18:de:7a:54:90:36:12:e4:51:
bc:0e:54:38:61:90:44:34:84:d9:42:be:2a:58:f3:
7b:7a:33:40:2c:cb:6b:8e:b1:d0:6c:7b:91:90:57:
b2:fe:15:47:d0:eb:b6:38:9a:7d:90:7e:0a:2a:80:
02:11:85:23:89:40:3e:bf:55:3f:18:41:2b:13:ef:
49:d9:ab:05:11:49:d3:6d:8f:3e:bc:8c:aa:9e:6c:
55:95:90:34:de:db:a0:f6:62:12:09:f4:d4:53:79:
01:9d:fd:07:36:1f:5e:c8:8e:7f:5e:40:45:b9:e9:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:6F:BF:B7:86:25:13:55:4E:B7:C4:59:EB:54:53:9F:5B:48:4B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mjhvv7eGJRNVTrfEWetUU59bSEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:fa:de:c2:c9:c0:74:94:2c:5e:bb:12:f6:42:17:37:05:76:
12:f5:a3:32:53:27:81:d1:d7:b9:3d:01:ae:27:1d:a3:35:0b:
9b:32:89:64:e5:0e:45:6e:d3:92:0a:72:22:41:d5:30:7c:b6:
4a:3b:ef:27:35:64:19:22:71:b2:43:46:a6:f2:31:85:87:c3:
47:45:ef:05:a0:66:ac:b2:8f:f9:e6:d6:22:e4:bf:81:cd:0a:
04:b4:55:c0:a9:5a:02:d5:98:42:76:8f:fc:a5:d9:91:e2:7d:
01:02:bc:0d:5b:67:39:b3:c1:85:1d:c5:63:ce:3d:1f:2a:33:
67:67:af:7d:d5:44:c6:37:ed:57:2d:d8:7e:4d:74:be:6a:94:
5b:fd:a6:79:f3:eb:24:4e:8e:8a:0f:a0:61:78:28:36:3d:1a:
78:7c:7e:3d:a6:7c:4b:75:b2:98:ca:eb:bd:3b:22:9c:40:db:
06:2f:6c:98:68:d8:10:b4:80:aa:53:d5:27:94:ce:22:c7:b5:
8f:9b:e6:25:44:82:72:04:d8:b9:31:5c:7b:cc:52:d8:a3:3b:
9e:c6:b0:5f:85:b0:7f:0b:99:7e:8c:ab:95:af:c7:71:28:c6:
91:70:df:58:46:36:c9:d5:18:4b:e9:0d:99:4a:03:a0:80:8c:
7b:6f:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org