Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/iETQnHeQE0kBLO85nTaF5EqfJok.roa
File: iETQnHeQE0kBLO85nTaF5EqfJok.roa (raw, json)
Hash identifier: xb/Qm+8xaNPd0FZOok5P0DObWkGrYU4Ijp/ozu8NHv0=
Subject key identifier: 88:44:D0:9C:77:90:13:49:01:2C:EF:39:9D:36:85:E4:4A:9F:26:89
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CFB
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iETQnHeQE0kBLO85nTaF5EqfJok.roa
Signing time: Wed 26 Apr 2023 10:31:25 +0000
ROA not before: Wed 26 Apr 2023 10:31:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.0.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8844D09C77901349012CEF399D3685E44A9F2689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:80:03:a7:a1:45:4f:1b:79:2a:fd:53:d9:
6e:fd:39:c0:a6:5f:89:7e:d6:7f:e9:fc:21:4d:6a:
0c:c8:db:12:db:e0:f7:b4:27:18:30:fc:72:9e:cd:
6a:17:43:3f:97:d7:11:23:07:0c:15:1b:9f:67:99:
17:55:c2:0e:01:02:4a:30:17:05:24:ed:c0:4a:50:
04:87:d1:a9:c7:b7:a8:a7:2e:80:3b:c0:16:27:9a:
72:4f:c7:d2:30:79:a2:95:36:8a:59:30:37:c7:25:
06:b3:a0:a8:17:e7:39:bc:4a:a4:fb:57:2d:03:a5:
ad:ba:83:7f:23:16:97:0d:08:5c:e8:c6:58:4f:03:
65:26:2a:86:fb:0c:31:ae:ce:7d:85:35:81:f2:86:
00:75:66:b0:c0:61:89:8e:91:a9:e6:a6:c9:48:2a:
6d:6e:0f:04:1a:96:4f:03:3f:59:f2:59:e8:40:f9:
d9:b4:51:48:d1:45:5f:fb:bf:1b:96:9f:81:c5:77:
44:ac:55:44:90:24:a0:40:56:28:6b:d8:ff:3b:ea:
b8:b0:d8:8f:8e:27:ab:7c:1d:f2:b3:14:c7:58:51:
90:34:b3:20:80:73:72:97:75:a2:4e:3b:c0:c1:ff:
95:dd:36:03:4d:ca:ff:6e:94:72:18:de:56:bc:7c:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:D0:9C:77:90:13:49:01:2C:EF:39:9D:36:85:E4:4A:9F:26:89
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iETQnHeQE0kBLO85nTaF5EqfJok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/18
Signature Algorithm: sha256WithRSAEncryption
82:d6:72:6c:9f:99:36:20:4b:11:89:46:f7:1a:e9:ef:5e:1c:
04:2d:70:0d:66:96:98:a0:f8:7a:1f:2d:42:a2:51:43:38:da:
fd:f3:76:5d:cb:66:ab:a3:3f:75:12:6b:ec:97:3c:e9:dd:e0:
09:5e:c4:57:a5:df:66:92:9a:05:f1:27:9b:9a:54:60:8f:bc:
a8:ea:7e:5e:9a:eb:6c:8c:4d:04:ac:04:74:94:be:0c:89:ef:
9c:43:df:a4:a7:29:0e:b7:c8:e9:29:06:10:01:85:6e:27:af:
33:82:bc:6f:53:da:af:26:41:a2:a7:74:89:05:d8:6b:8a:c4:
d0:57:5e:64:e1:b3:4d:52:0c:22:fa:ff:01:bd:0e:de:53:b8:
3d:58:47:48:45:ea:32:af:05:70:55:66:41:cb:e0:ba:42:06:
65:45:de:fd:97:7d:21:33:cf:d0:73:65:60:46:91:8c:c4:5b:
a7:2a:0d:e7:11:7e:b3:29:80:8f:b1:ef:2d:16:3c:a1:de:28:
12:3b:f1:6c:e4:0c:4a:32:98:82:fc:79:a4:31:7d:f9:43:e6:
49:b7:f3:85:56:1d:ef:18:26:b8:84:05:c8:f7:bb:81:a0:8e:
45:b0:b5:3b:29:85:4d:c2:bd:d1:aa:74:2a:69:2b:83:a5:e7:
19:47:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org