Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jumWfOzF3HlgiQ1X-PdsvPvnHMY.roa
File: jumWfOzF3HlgiQ1X-PdsvPvnHMY.roa (raw, json)
Hash identifier: 9xioho9sg5gW2pjhS5SxRomqPeAvPIjdL+6TpAkTt20=
Subject key identifier: 8E:E9:96:7C:EC:C5:DC:79:60:89:0D:57:F8:F7:6C:BC:FB:E7:1C:C6
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CD5
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jumWfOzF3HlgiQ1X-PdsvPvnHMY.roa
Signing time: Wed 26 Apr 2023 06:54:12 +0000
ROA not before: Wed 26 Apr 2023 06:54:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.0.0/16 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3285 (0xcd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 06:54:12 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8EE9967CECC5DC7960890D57F8F76CBCFBE71CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:2c:4e:a2:c1:2c:1a:06:b6:2c:5a:8d:b1:
f4:02:ed:c4:06:e1:dd:86:66:8b:cd:97:7f:e1:47:
35:7b:da:82:90:45:93:03:78:dd:8d:23:53:bb:4d:
e4:9f:46:6b:da:ec:9a:9c:35:7f:9d:fe:32:9f:40:
8c:4b:de:fd:d8:bb:50:2d:fc:2d:1b:8c:b1:c3:df:
7e:37:ef:57:55:e2:ce:fb:5d:ca:60:f6:e6:2d:99:
1b:96:1b:4d:ce:60:e6:6d:9f:1d:28:11:e7:75:57:
34:9f:00:58:c5:37:85:03:f9:50:25:89:2b:1b:41:
18:ec:cb:69:a1:07:a8:e5:d9:4f:61:a2:9c:65:38:
0b:8c:39:00:5b:bf:d0:33:f7:58:23:95:6b:d4:4f:
d1:8b:8d:bb:a3:70:d7:8d:77:2b:06:00:f0:dd:b0:
8c:8d:9b:ce:09:38:09:6c:f4:50:55:16:3b:57:93:
3d:4c:79:9a:cb:d1:44:12:2f:3b:f5:88:f8:04:84:
57:b6:cd:81:54:4e:15:d3:6e:87:9a:0f:cd:ac:25:
2c:0b:b8:b7:0b:b4:5f:58:1d:a7:04:13:b5:59:f5:
41:44:c7:7f:90:65:f4:8a:0d:37:7e:47:e6:b6:de:
cd:ea:b4:c7:ac:89:2d:13:ce:88:fc:c1:72:0c:1d:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:96:7C:EC:C5:DC:79:60:89:0D:57:F8:F7:6C:BC:FB:E7:1C:C6
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jumWfOzF3HlgiQ1X-PdsvPvnHMY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:db:41:d1:2f:f1:10:bc:a4:fa:72:19:29:c8:da:8e:d6:72:
5a:65:bc:ea:44:08:1f:fa:f5:f4:3a:0b:7c:1e:01:a6:83:18:
72:02:f6:7b:b3:36:52:94:ff:6b:39:34:e4:b1:f2:bc:0c:f8:
00:b2:c1:4f:4c:df:7f:f8:c1:f5:0f:0e:b8:06:c7:21:d3:d1:
7a:0e:61:f6:57:b9:cd:9d:19:fa:4d:48:bb:3e:c6:57:e3:bb:
b8:d1:ab:11:11:1d:03:e5:b3:ef:e8:00:ad:a2:8a:e0:15:32:
5d:2e:12:dc:0a:1b:3f:49:06:1d:54:98:d9:9d:55:2a:97:00:
b9:98:81:06:7c:dc:09:b2:1e:2d:62:28:cb:a3:8c:e6:f2:94:
0d:ed:8a:73:de:bc:0c:30:55:e9:90:fa:fa:da:3f:37:a1:14:
f1:38:ff:5c:6e:6d:17:c5:fa:1a:2e:fa:e1:6b:e4:7e:ce:47:
8c:d1:de:ad:2d:73:a5:ec:46:72:e6:a1:45:1f:ed:d7:ab:c3:
4b:5f:0e:67:d0:6c:89:c6:c6:f2:fe:06:a5:8b:c7:7f:1f:44:
3d:da:96:67:70:e9:e8:43:78:d1:dc:dc:15:c0:fb:f1:91:f2:
c6:34:1b:3c:08:ad:8f:4d:d4:48:69:5f:27:75:5e:20:2a:62:
a2:e7:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-fra.rpki-client.org