Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jlcPYKzZ3JRRAOtwxf0KgGPd2Vo.roa
File: jlcPYKzZ3JRRAOtwxf0KgGPd2Vo.roa (raw, json)
Hash identifier: XtWgaJpJkfFRHcAkG42rRuz0NjD2xzKcUElcSPf1Pyc=
Subject key identifier: 8E:57:0F:60:AC:D9:DC:94:51:00:EB:70:C5:FD:0A:80:63:DD:D9:5A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D0E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jlcPYKzZ3JRRAOtwxf0KgGPd2Vo.roa
Signing time: Wed 26 Apr 2023 10:31:29 +0000
ROA not before: Wed 26 Apr 2023 10:31:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.0.0/16 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E570F60ACD9DC945100EB70C5FD0A8063DDD95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:19:e8:5f:11:21:4a:44:44:80:48:16:71:
e3:2e:7b:0e:67:bb:92:34:c7:b8:01:9f:ac:c6:a0:
8f:e9:57:25:fa:f2:b0:4a:72:3c:b3:2b:4d:5b:1a:
8d:25:48:80:ba:f9:c0:24:6b:3e:55:a5:57:ae:c9:
73:7a:65:04:9c:36:50:2a:f5:e6:29:a2:62:11:98:
d8:5b:ca:3e:4f:36:59:5f:26:d9:76:0a:36:9c:fb:
69:93:ec:98:d3:a4:f3:f6:e7:eb:d9:9c:7f:de:2e:
cf:a0:f4:71:6e:1e:27:63:46:6e:cb:73:68:61:69:
12:18:73:ef:6d:e8:da:5a:68:49:e7:e4:2c:2c:91:
aa:05:d8:a0:cd:5d:78:c1:74:28:97:37:e4:43:ab:
10:24:79:7f:68:5e:84:c1:c0:d0:f6:ee:47:a1:ef:
57:9f:1e:a2:84:96:07:39:0d:bb:c8:82:e7:4a:bf:
52:60:ba:21:e0:b3:b1:3d:52:06:cc:d4:a7:89:79:
71:34:5a:fb:c8:69:d6:7a:c7:4a:cf:1a:3f:db:41:
ea:ea:cc:5f:ff:6b:66:f5:56:33:64:01:27:66:23:
44:5d:05:16:51:3d:f2:e6:6a:a2:d5:d2:90:f7:cd:
19:6d:76:99:b3:50:3b:af:21:86:1d:33:1a:2a:80:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:0F:60:AC:D9:DC:94:51:00:EB:70:C5:FD:0A:80:63:DD:D9:5A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jlcPYKzZ3JRRAOtwxf0KgGPd2Vo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:7e:4f:b4:5c:82:4e:07:dc:0d:61:c9:8b:3c:66:fd:18:ec:
42:f5:af:4c:20:58:42:71:b8:4e:fd:e7:25:6c:e3:e3:5c:98:
0a:95:13:5a:aa:df:42:b1:e5:62:2e:ec:9c:fe:8c:42:57:59:
23:44:52:94:65:55:06:dc:b5:15:00:0e:28:6c:2c:7e:11:6f:
5a:57:3b:31:ab:81:8c:5c:e9:9b:84:75:a1:8e:53:4c:84:f6:
1b:1b:16:1d:4e:b0:90:86:53:aa:f5:31:24:8d:cb:17:da:bf:
b2:0d:a6:27:89:2a:f8:c0:ca:9c:b0:ab:6d:56:3d:5a:7b:84:
ca:80:f2:88:13:9b:c9:38:8a:b1:9f:41:c9:e0:8c:6a:fd:3e:
51:f2:4c:86:3b:99:70:8d:60:89:d7:c5:c5:db:79:ad:43:af:
da:c0:a3:7f:9d:27:c4:a5:ea:72:8d:6a:2e:4c:eb:bb:c7:8f:
36:19:37:04:c3:42:7d:cd:c6:cd:48:84:f3:bc:79:65:b5:8b:
82:00:fc:a8:58:29:a8:3c:6c:86:e7:89:70:7d:d9:1d:21:b4:
d3:a7:1e:2e:60:c1:6a:8c:d7:3c:2d:de:c4:a2:bc:5e:59:78:
47:1b:2d:25:9b:01:b6:2e:c0:53:22:ad:90:96:f6:b8:32:f1:
d7:89:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org