Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/TyIk63A2QpYVxHZ2zTV4rH_oKgI.roa
File: TyIk63A2QpYVxHZ2zTV4rH_oKgI.roa (raw, json)
Hash identifier: /t4LeMDm0q869f8x5MlV30kKenYVhN5MBlWOx6bnTkU=
Subject key identifier: 4F:22:24:EB:70:36:42:96:15:C4:76:76:CD:35:78:AC:7F:E8:2A:02
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/TyIk63A2QpYVxHZ2zTV4rH_oKgI.roa
Signing time: Thu 15 Sep 2022 02:37:23 +0000
ROA not before: Thu 15 Sep 2022 02:37:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 210.209.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F2224EB7036429615C47676CD3578AC7FE82A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:1e:c2:c7:3a:60:97:5b:25:9a:7e:b6:c8:
05:51:f3:45:d0:bb:62:ac:5b:68:bd:e4:c7:3e:e2:
53:12:c5:0e:bd:4e:38:02:aa:fb:15:a7:7a:d7:ed:
64:54:01:d7:d1:ff:37:56:79:09:6f:a3:79:e9:67:
12:8a:83:07:e8:29:1c:2c:14:d1:f3:c4:df:54:5a:
71:28:ec:12:e1:5a:2f:86:82:da:e7:37:47:48:5e:
0e:62:28:2f:6a:c0:93:48:b7:fd:b4:61:39:d8:06:
d0:5f:dd:d7:7e:d8:61:d5:a7:e8:45:05:03:af:51:
6d:22:8b:c4:81:6a:84:5d:9e:ef:54:83:5b:26:dd:
53:8e:d8:85:30:d1:fe:9d:38:a0:d8:8d:22:e0:b8:
e7:4d:ac:4d:0c:95:85:14:45:a6:06:05:90:71:6d:
59:43:67:14:52:9e:bf:b5:30:c6:45:8d:53:5f:8a:
f9:1e:66:ca:e1:63:a0:f0:d4:0e:00:fe:88:cf:e2:
20:1e:84:d3:c6:9a:23:90:d1:ef:17:17:88:48:e6:
30:c4:cd:d8:6c:0a:48:fa:55:37:e8:e5:ca:28:e0:
aa:92:c9:5b:5a:a8:5d:42:5e:29:cc:7d:f1:8f:57:
26:d4:df:b7:a3:e3:c8:f2:06:9d:95:81:b7:f1:e6:
54:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:22:24:EB:70:36:42:96:15:C4:76:76:CD:35:78:AC:7F:E8:2A:02
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/TyIk63A2QpYVxHZ2zTV4rH_oKgI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
27:25:8e:8e:46:89:fd:59:83:50:2d:6a:94:1d:16:ed:81:ad:
35:6b:87:c1:16:b6:f4:4c:35:ac:f9:44:76:7c:f2:d3:5c:62:
25:22:53:85:b5:05:39:b1:ff:23:fa:d9:05:3b:f9:a4:9b:6e:
30:4c:fb:02:c6:44:19:35:52:aa:57:37:d3:d3:3e:4e:be:24:
91:97:e6:ef:29:9e:30:aa:5d:ff:45:7a:b4:d7:ac:7b:3b:91:
d5:65:29:b2:b3:cd:37:02:0a:32:ae:e7:ab:7d:35:c5:dc:87:
00:db:5d:c6:9c:32:df:82:76:0b:45:e0:4d:ba:a1:8b:38:f0:
c2:13:ef:e4:3a:55:a4:b7:7c:c9:29:57:0e:a9:38:21:f3:64:
c8:ba:b4:fa:c1:ab:54:cb:0f:3a:81:4a:79:43:80:a6:7e:a3:
b6:aa:bb:07:6d:89:8f:7f:64:c3:cd:2b:75:0c:ca:43:44:5f:
c8:8e:6c:8f:54:c1:50:01:19:0d:08:f1:fa:90:c6:c2:b5:fc:
fe:46:ac:63:3d:c2:72:b0:cf:67:72:1e:a3:b9:bb:10:4b:a7:
5a:72:33:9c:71:fe:bd:b4:1a:26:97:34:2a:19:d5:1d:72:d5:
48:22:a3:b8:58:88:95:dd:89:b8:7e:3a:af:29:21:68:a6:e4:
f5:d8:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:53 2023 by rpki-client on console-ams.rpki-client.org