Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ig3O6qZZDTOIkKtGvGKEkpxfLUE.roa
File: ig3O6qZZDTOIkKtGvGKEkpxfLUE.roa (raw, json)
Hash identifier: h1kEXpmb4z9Ucc8dENFJkRCq66IDyEWEpTYFcpU4pew=
Subject key identifier: 8A:0D:CE:EA:A6:59:0D:33:88:90:AB:46:BC:62:84:92:9C:5F:2D:41
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ig3O6qZZDTOIkKtGvGKEkpxfLUE.roa
Signing time: Thu 15 Sep 2022 02:37:19 +0000
ROA not before: Thu 15 Sep 2022 02:37:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.96.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A0DCEEAA6590D338890AB46BC6284929C5F2D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:05:b3:a8:ff:6a:13:bf:00:85:28:ce:fd:
72:cb:48:ef:84:67:3b:fc:8e:c0:cd:dc:81:94:8b:
71:d3:62:68:c6:08:d4:ca:7c:e5:d1:02:45:be:7d:
44:79:bb:de:13:55:00:85:dd:17:c9:3a:31:c2:4b:
6a:f7:f3:c4:7f:41:91:f3:90:c0:47:73:da:13:81:
aa:41:60:d6:63:e0:85:f3:2d:68:b5:63:f2:77:6f:
e1:b7:d5:39:4b:95:a5:a1:51:44:da:8b:c0:a0:97:
27:d5:b3:bd:bc:7e:04:7a:e0:9a:8d:c4:b8:2d:d5:
70:ba:22:82:f8:33:13:7b:cb:6a:87:aa:25:a4:5b:
85:e5:21:4b:43:05:6e:65:94:4d:23:b5:e0:8c:3a:
8e:95:98:bd:52:0f:8a:ea:93:4f:f8:7c:cd:e9:2c:
3e:90:28:d6:17:ad:9e:c4:96:6a:06:54:f0:6d:7d:
fb:92:67:ed:cc:f3:2d:a5:af:97:2b:2e:37:7f:c3:
7b:b6:2d:a5:0b:74:34:9a:23:55:2f:a5:69:48:42:
82:6e:da:66:5e:3c:a4:50:8a:3e:24:47:fc:bd:f6:
86:09:f5:c9:c6:74:f3:18:0b:dc:87:81:d2:e1:48:
8d:d9:bf:94:8a:06:88:41:6e:1e:b7:32:0c:34:d8:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:CE:EA:A6:59:0D:33:88:90:AB:46:BC:62:84:92:9C:5F:2D:41
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ig3O6qZZDTOIkKtGvGKEkpxfLUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.96.0/21
Signature Algorithm: sha256WithRSAEncryption
28:f7:f8:cf:97:c3:33:99:23:56:85:2d:80:fd:11:38:69:db:
ac:1c:1d:21:95:79:4d:bf:00:a7:56:29:e8:9b:3c:40:91:f5:
2e:08:2a:a1:6a:de:6a:80:7f:d0:6c:3d:cc:28:c1:34:ae:da:
65:08:f7:b7:e1:dc:5a:29:56:08:1d:4f:45:31:a5:34:08:d0:
fb:07:0e:40:ac:f4:b7:af:4a:ab:34:38:de:67:cd:10:4f:bc:
46:a9:59:88:b8:3f:00:84:ba:5b:dc:5b:c0:8a:8c:f3:de:c5:
3f:61:da:48:77:07:6a:07:c3:38:33:93:06:1f:24:25:32:c0:
0a:ae:52:8b:16:da:66:17:a9:dd:3f:98:7e:5d:a9:88:b8:84:
ef:2a:d5:b4:ac:a2:dc:12:b2:20:0f:b4:35:37:15:a9:a8:93:
8a:90:23:e4:cf:28:27:29:2f:ac:21:f3:8d:6f:d3:c7:2f:9d:
a4:74:fb:79:f8:1a:a5:0f:80:52:8f:ae:90:3c:d3:ba:3f:e3:
f3:d7:4d:a8:37:be:06:cd:f5:b0:fe:d8:bc:15:b4:97:06:3c:
fd:0a:fa:26:3f:3c:da:80:ba:40:bb:15:ac:12:0e:cc:09:71:
a0:bb:13:33:67:a3:ba:1e:4b:6b:93:c1:10:f5:cb:52:8c:21:
62:ed:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-fra.rpki-client.org