Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/VXqxOCYyZuSYpRV_P6r7k0tRba4.roa
File: VXqxOCYyZuSYpRV_P6r7k0tRba4.roa (raw, json)
Hash identifier: ds7gQbJoe/mFwOs6KCNjYmoXnTII+GVnup6Csxxjezc=
Subject key identifier: 55:7A:B1:38:26:32:66:E4:98:A5:15:7F:3F:AA:FB:93:4B:51:6D:AE
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D12
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VXqxOCYyZuSYpRV_P6r7k0tRba4.roa
Signing time: Wed 26 Apr 2023 10:31:30 +0000
ROA not before: Wed 26 Apr 2023 10:31:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=557AB138263266E498A5157F3FAAFB934B516DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:81:95:9e:d6:8e:cd:e8:a8:f2:0a:be:c0:
c3:9c:d4:d4:98:3d:dd:1c:95:17:81:c3:c2:b8:3d:
fe:c1:33:6c:05:ec:bf:fc:3e:68:f1:55:63:68:a7:
62:db:9b:d1:09:45:d4:e7:41:7d:53:b8:14:d8:e2:
64:09:9c:bc:5a:f2:8d:d9:53:45:22:23:7b:fb:e2:
ad:da:bf:4f:07:84:bd:f8:3a:11:4c:c5:1f:8e:0d:
65:ec:d9:71:3a:54:8a:8f:03:16:95:4a:fd:94:39:
b5:8c:14:fd:d8:ed:10:45:5a:01:58:0d:39:78:f5:
37:71:0a:fa:09:89:60:1f:d6:54:71:9b:26:e8:93:
3d:9f:32:0a:37:85:fb:fc:5b:b0:d9:0c:bc:47:a2:
d1:39:92:74:70:a9:7e:1e:46:86:26:ae:02:b2:0e:
6a:d5:56:9a:d0:c6:5e:16:30:04:63:77:c0:52:97:
7d:79:09:1a:c9:84:5c:73:43:e1:bc:5d:94:22:21:
99:c3:65:a8:21:fd:d6:e6:80:7a:93:8f:81:e4:a4:
ea:06:c2:47:7f:e8:93:25:17:7e:ca:99:0d:d6:de:
c6:1c:b1:bb:50:64:5f:84:e1:e0:9a:d1:33:1a:27:
e0:4d:97:58:f2:9c:62:bd:bc:66:1d:d8:ff:d1:92:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7A:B1:38:26:32:66:E4:98:A5:15:7F:3F:AA:FB:93:4B:51:6D:AE
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VXqxOCYyZuSYpRV_P6r7k0tRba4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.232.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:57:7b:29:e4:08:d6:7a:1f:48:5c:1f:00:87:c4:d4:f2:08:
93:c3:2a:8f:da:14:3b:64:e4:fe:c2:e9:e2:5c:08:22:d1:65:
c6:60:f2:cd:8a:3f:d0:ba:b8:98:29:43:7d:a9:f8:88:70:19:
72:c6:73:ad:27:22:f4:83:ce:2c:dc:ba:21:20:71:f3:3c:67:
2c:22:2e:b1:4e:86:ab:e7:a5:a4:e1:74:d9:76:b6:06:28:75:
4f:eb:ec:23:c9:02:a7:8a:f0:31:3f:66:70:7e:61:13:cc:c9:
a3:7f:a0:6c:d6:f3:cf:58:5a:92:05:59:79:b2:f5:ab:ff:f0:
97:84:5c:f9:07:f5:a9:9f:53:de:f7:c6:dd:5f:ba:0a:d5:a6:
d5:8d:2c:ee:fe:00:2b:5c:b0:6d:a2:b2:de:c2:8d:cc:cc:62:
0a:83:ff:9d:70:e0:72:33:2c:fb:01:4b:06:9c:e4:a2:f2:ce:
07:32:f4:1c:d7:88:71:4a:fe:97:5f:a3:b8:f9:f9:7c:6a:dd:
2b:7a:8f:d3:22:af:db:58:8d:9c:5f:54:e3:8d:0a:66:53:62:
86:20:cd:9e:ce:44:57:40:99:88:9a:13:63:9d:d5:86:9c:7f:
e6:8a:1e:bc:e4:bd:eb:2f:20:e5:03:94:30:f8:96:7c:fc:e5:
19:03:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:13 2023 by rpki-client on console-fra.rpki-client.org