Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/j942ZZ4ldFny8yQeFkwCAoSu8Vo.roa
File: j942ZZ4ldFny8yQeFkwCAoSu8Vo.roa (raw, json)
Hash identifier: MdIW4e1SA5h6iel8vSESi2pEFRsaYa5fh0u5KrbyKew=
Subject key identifier: 8F:DE:36:65:9E:25:74:59:F2:F3:24:1E:16:4C:02:02:84:AE:F1:5A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D4E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/j942ZZ4ldFny8yQeFkwCAoSu8Vo.roa
Signing time: Wed 03 May 2023 01:04:01 +0000
ROA not before: Wed 03 May 2023 01:04:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: May 3 01:04:01 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8FDE36659E257459F2F3241E164C020284AEF15A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:69:99:37:c3:0f:b7:6d:6c:d8:3f:a5:35:
91:b3:ac:b8:b5:dc:d5:09:13:7a:c2:e4:af:4c:85:
15:dd:a9:19:9f:9e:1a:00:31:a3:af:e1:4d:97:3e:
f8:65:c2:cc:0d:aa:76:1a:27:ab:0c:0d:bd:6c:f6:
76:13:25:67:36:a9:47:ee:46:89:b6:bd:a6:33:0e:
38:21:61:e0:95:9c:bf:49:27:90:9f:22:22:39:49:
72:85:71:36:f7:22:56:16:a4:8e:b2:a8:24:67:fb:
09:7f:e5:8c:ef:54:79:75:44:b6:bf:5f:78:ef:cd:
fa:04:43:73:6e:da:99:42:c9:ed:fe:5c:00:1c:17:
a9:99:ed:60:f8:73:59:ab:99:1a:79:59:3a:db:df:
af:c3:b2:76:e6:0e:7c:58:80:de:f4:fc:8c:57:c8:
c1:af:ce:ba:e6:f6:55:9a:94:6d:74:1f:93:66:0f:
1e:0f:1a:84:a8:94:3e:c4:e7:0a:a1:47:0c:9a:1c:
a3:f8:be:db:18:11:f0:64:1e:7d:28:4e:f5:dc:2b:
a2:db:7e:1f:65:e7:d1:f1:64:c2:39:9e:54:06:49:
d4:cc:4e:92:13:bc:60:bb:d6:4c:63:bf:5d:fa:89:
7b:f1:83:c4:da:39:83:bc:72:47:1a:41:d4:4e:f0:
af:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:36:65:9E:25:74:59:F2:F3:24:1E:16:4C:02:02:84:AE:F1:5A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/j942ZZ4ldFny8yQeFkwCAoSu8Vo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:ea:79:6b:91:ec:b8:c8:a3:41:82:d7:fc:5c:83:62:8c:47:
c0:ca:8b:e4:fe:2c:97:96:0f:5a:4c:62:18:37:96:4e:39:91:
2b:74:4f:48:91:6c:df:aa:2a:d5:7c:36:f7:6a:67:1e:a9:11:
f7:b5:af:e5:64:3c:9c:52:ba:30:31:f1:e3:97:9b:dc:37:51:
d8:9f:ec:bf:02:71:b9:ce:7c:6c:ad:67:53:b4:71:19:e9:df:
71:46:04:ba:9f:ea:c0:ea:62:fb:81:da:aa:0e:49:eb:19:63:
16:6a:8a:37:af:34:89:af:60:05:8a:25:f0:c4:54:22:60:a2:
d9:64:34:12:9a:ba:bb:3e:67:2e:a5:c0:ac:e9:01:86:1e:b9:
04:a2:1c:51:d7:0d:9f:17:60:47:cf:0a:ff:9a:bb:19:59:bd:
f1:20:75:8d:5d:c4:e9:84:5b:9d:46:ca:fc:29:d5:61:99:41:
d3:fd:5a:85:e3:48:fa:c5:fe:2f:0a:b9:29:01:f8:d9:3b:e6:
5a:4b:25:b0:c9:43:81:a9:0f:50:6e:b8:4a:b9:19:c7:33:22:
51:b5:79:2d:68:29:54:7b:0e:5b:bc:56:00:c7:cd:4e:8a:c3:
9a:e7:9e:26:7b:b8:98:e3:dd:c4:77:17:7b:8a:13:7a:e2:3e:
4d:00:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org