Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/XOC6XDaA1R60GljFGfCYaYeOruE.roa
File: XOC6XDaA1R60GljFGfCYaYeOruE.roa (raw, json)
Hash identifier: Xp0niYUXmrAfK0fsJIFd/v4Squ+TsuVCnkObhGjSbRM=
Subject key identifier: 5C:E0:BA:5C:36:80:D5:1E:B4:1A:58:C5:19:F0:98:69:87:8E:AE:E1
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D3A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/XOC6XDaA1R60GljFGfCYaYeOruE.roa
Signing time: Wed 26 Apr 2023 10:31:41 +0000
ROA not before: Wed 26 Apr 2023 10:31:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.64.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:41 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5CE0BA5C3680D51EB41A58C519F09869878EAEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:3a:d5:dd:92:98:31:6a:d3:21:b3:f0:7f:
30:3c:ce:4f:fe:94:20:a0:0c:e7:cc:dc:0d:82:2b:
72:65:fd:fb:e7:6b:aa:a4:dd:3f:03:2e:bd:ff:49:
6b:98:a1:1e:c1:1b:db:96:88:e6:98:be:61:ad:db:
53:ad:be:fa:17:09:dc:e7:00:f1:ab:96:66:e5:f7:
3d:77:16:54:c3:59:86:6c:c0:dd:ce:cd:21:79:24:
7a:2c:0a:7c:4a:cf:7d:59:3f:70:17:10:97:72:1c:
56:55:8b:de:c1:f3:79:8f:c8:23:76:cc:3d:b2:26:
ac:33:d2:bd:a7:e8:97:bd:02:32:b6:6c:bb:7f:74:
53:41:09:39:b9:21:5a:7f:23:9b:64:b0:51:6e:da:
c2:1d:5d:dd:79:62:9e:2d:8c:d7:31:c0:8f:f1:8c:
16:e6:ef:b6:b1:45:8d:1f:e5:99:0e:a9:06:35:73:
fd:a1:19:4b:91:0c:50:7b:1b:ee:81:2a:b2:bc:58:
22:01:9f:f4:86:13:a0:75:42:64:91:c4:b3:a9:aa:
c9:fa:f8:af:be:4e:56:6e:b7:eb:2f:fe:75:24:59:
50:df:4d:13:fc:be:82:e3:d9:54:6e:57:05:45:cb:
96:42:b0:70:32:71:ea:c7:67:93:31:64:da:56:22:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:BA:5C:36:80:D5:1E:B4:1A:58:C5:19:F0:98:69:87:8E:AE:E1
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/XOC6XDaA1R60GljFGfCYaYeOruE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/19
Signature Algorithm: sha256WithRSAEncryption
62:ca:72:79:a8:cb:98:bb:f7:be:bd:f3:4f:2c:99:13:2f:45:
f1:37:e4:d1:e3:c2:45:f6:c9:88:e5:0f:b3:69:7a:63:97:e0:
b5:5c:ba:65:dc:2e:99:af:95:d2:93:16:63:74:52:fe:0d:9e:
3e:ab:0c:9d:ec:27:0f:5c:55:28:51:4e:3d:4f:ff:ad:12:16:
ed:1e:66:5c:3a:ad:63:7f:55:10:7d:90:0a:18:cf:db:ba:af:
98:75:66:15:86:43:72:fd:80:eb:17:80:78:f1:0b:0a:02:e8:
25:ca:4f:ec:97:af:8c:dc:a0:88:8a:09:1d:d3:4f:dc:4a:2e:
0a:73:5a:1a:a7:7a:06:45:23:1a:10:59:bf:44:28:40:fa:31:
78:88:29:61:b2:8b:8a:6f:49:8e:14:62:03:3b:e4:f4:01:78:
f2:93:ba:3a:90:d4:b9:07:17:13:c1:73:6c:f0:f6:48:dc:39:
b8:c2:37:77:9f:2f:8f:67:68:07:97:9c:95:ab:6b:c6:1b:07:
04:8c:bd:38:f5:23:81:bf:d3:97:e6:e5:be:f1:cf:9e:52:71:
5f:81:14:0e:c6:6d:56:01:31:fa:28:31:f7:92:b5:6a:a4:56:
8b:b2:84:b2:b6:e1:d7:e5:d5:8d:ee:d1:f1:05:e0:dd:97:7f:
d5:e2:a4:c1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA0MjYx
MDMxNDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVDRTBCQTVDMzY4MEQ1
MUVCNDFBNThDNTE5RjA5ODY5ODc4RUFFRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzYzrV3ZKYMWrTIbPwfzA8zk/+lCCgDOfM3A2CK3Jl/fvna6qk
3T8DLr3/SWuYoR7BG9uWiOaYvmGt21OtvvoXCdznAPGrlmbl9z13FlTDWYZswN3O
zSF5JHosCnxKz31ZP3AXEJdyHFZVi97B83mPyCN2zD2yJqwz0r2n6Je9AjK2bLt/
dFNBCTm5IVp/I5tksFFu2sIdXd15Yp4tjNcxwI/xjBbm77axRY0f5ZkOqQY1c/2h
GUuRDFB7G+6BKrK8WCIBn/SGE6B1QmSRxLOpqsn6+K++TlZut+sv/nUkWVDfTRP8
voLj2VRuVwVFy5ZCsHAycerHZ5MxZNpWIupfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUXOC6XDaA1R60GljFGfCYaYeOruEwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvWE9DNlhEYUExUjYwR2xqRkdmQ1lh
WWVPcnVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXn+QDAN
BgkqhkiG9w0BAQsFAAOCAQEAYspyeajLmLv3vr3zTyyZEy9F8Tfk0ePCRfbJiOUP
s2l6Y5fgtVy6Zdwuma+V0pMWY3RS/g2ePqsMnewnD1xVKFFOPU//rRIW7R5mXDqt
Y39VEH2QChjP27qvmHVmFYZDcv2A6xeAePELCgLoJcpP7JevjNygiIoJHdNP3Eou
CnNaGqd6BkUjGhBZv0QoQPoxeIgpYbKLim9JjhRiAzvk9AF48pO6OpDUuQcXE8Fz
bPD2SNw5uMI3d58vj2doB5eclatrxhsHBIy9OPUjgb/Tl+blvvHPnlJxX4EUDsZt
VgEx+igx95K1aqRWi7KEsrbh1+XVje7R8QXg3Zd/1eKkwQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org