Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/T4VwuHzMdWE5kQAFfCDAAQmFZtI.roa
File: T4VwuHzMdWE5kQAFfCDAAQmFZtI.roa (raw, json)
Hash identifier: +QxcNX3fCxR0fxGB/a2COdMBPQ9CcVOvmUHPSFKRy30=
Subject key identifier: 4F:85:70:B8:7C:CC:75:61:39:91:00:05:7C:20:C0:01:09:85:66:D2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D2E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/T4VwuHzMdWE5kQAFfCDAAQmFZtI.roa
Signing time: Wed 26 Apr 2023 10:31:38 +0000
ROA not before: Wed 26 Apr 2023 10:31:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F8570B87CCC7561399100057C20C001098566D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:57:e4:fc:ca:70:91:a7:a1:9d:25:6b:73:
d3:de:32:e6:d7:1b:8f:44:c7:32:45:53:94:c8:e4:
ed:bb:56:99:b5:51:45:3b:65:89:34:e1:e2:a4:91:
b5:84:ba:12:32:f4:5e:d8:3a:28:1b:ac:3a:46:cb:
23:34:63:d7:f4:83:d0:67:ab:78:2e:89:72:a3:c5:
4b:8d:13:8f:fc:da:1d:3a:f1:ed:42:84:f8:e9:3c:
c3:eb:7e:f8:05:7a:7b:f2:fe:b7:a5:69:6d:ef:32:
e1:ad:79:12:15:43:21:3d:56:56:f3:3b:20:b0:29:
da:97:3a:c7:42:c7:71:8e:ac:4b:86:a3:d9:73:aa:
0c:b7:c4:8b:36:90:11:97:a8:15:3f:a7:48:4f:09:
0d:dc:f0:8c:4b:e4:eb:44:d1:86:82:aa:55:1e:5b:
69:3a:19:9a:fb:d7:d3:3f:b4:1d:0e:07:43:5c:56:
cd:2a:0f:7b:a6:04:b9:a9:7b:b0:99:ca:c1:c7:5d:
6c:80:74:9a:63:72:c3:8a:af:c0:db:29:b6:9a:1d:
03:23:be:c0:4e:99:04:e9:bd:89:8a:7a:ce:06:24:
d2:79:a9:be:90:cf:c1:2a:46:a8:da:fe:5d:18:39:
5f:4d:12:84:6f:f5:2b:eb:3d:87:d9:c7:ae:f1:d5:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:85:70:B8:7C:CC:75:61:39:91:00:05:7C:20:C0:01:09:85:66:D2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/T4VwuHzMdWE5kQAFfCDAAQmFZtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.232.0/22
Signature Algorithm: sha256WithRSAEncryption
03:7d:13:65:08:d6:c6:7c:39:9f:3a:cf:5c:65:93:e6:ae:26:
ea:de:cb:59:59:92:da:c9:10:0a:de:5f:01:e4:4f:18:a6:a0:
4f:7c:0a:62:9c:cc:aa:e5:f0:88:f1:8f:94:8b:d9:40:7d:22:
3e:1b:64:9f:99:75:a1:11:86:cb:76:9e:1b:9d:ef:14:0c:88:
e7:2f:4e:f4:5f:f3:9d:f9:d2:f0:10:d2:1e:e5:c1:86:f8:d7:
08:73:04:2e:f0:f3:e6:b5:6a:c2:12:48:df:58:74:e2:a1:a6:
90:9f:2b:ad:13:95:f1:97:a9:b3:46:fe:ec:7b:a0:e3:1b:41:
ef:39:8f:a9:59:66:4e:e2:90:26:f4:0c:23:6f:42:86:69:96:
17:7c:78:5f:54:87:6a:0f:8d:54:07:cd:b5:e3:dc:d6:d0:70:
4a:26:df:49:0e:e5:28:dd:09:75:45:39:41:5d:29:98:57:c1:
1e:cf:0d:ce:57:69:75:7c:13:c9:7a:c5:44:2e:66:72:c2:1b:
17:7a:7e:14:c5:94:c5:a9:63:5b:a7:d7:b6:f5:1f:10:87:25:
33:95:b5:e5:6f:20:8b:6c:4e:80:1d:e6:a7:9f:95:1d:28:95:
f8:95:c2:da:fd:ca:2d:21:0a:5c:9a:a5:0d:b8:9f:17:01:1c:
b4:b1:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:13 2023 by rpki-client on console-fra.rpki-client.org