Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nP6_A-vrunZP3HpaQ_nP_rJ3M9c.roa
File: nP6_A-vrunZP3HpaQ_nP_rJ3M9c.roa (raw, json)
Hash identifier: 1AkG4fINGNICXog5DRgmk2X+4wIP+EXQsTvv2vZl1fs=
Subject key identifier: 9C:FE:BF:03:EB:EB:BA:76:4F:DC:7A:5A:43:F9:CF:FE:B2:77:33:D7
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D15
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nP6_A-vrunZP3HpaQ_nP_rJ3M9c.roa
Signing time: Wed 26 Apr 2023 10:31:31 +0000
ROA not before: Wed 26 Apr 2023 10:31:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 211.79.112.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:31 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9CFEBF03EBEBBA764FDC7A5A43F9CFFEB27733D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:91:fe:df:3a:72:0e:6c:3d:2d:5d:bd:f9:
ae:7e:b0:86:27:74:d3:07:72:42:5a:57:af:08:ec:
12:6d:3f:68:a2:bc:88:50:29:fb:2a:93:f0:f2:fd:
27:cf:a3:67:80:dd:4f:60:43:6c:10:76:d1:00:a0:
1b:6e:4d:bf:b1:66:44:0a:0c:38:6e:d1:ab:82:28:
39:1c:f4:10:cb:f4:7b:3b:5a:91:98:08:9e:7a:17:
f6:4c:54:76:72:c8:6b:23:8d:ca:2c:00:b0:0e:38:
f0:9f:96:e1:af:cf:95:72:cf:19:88:2e:16:d0:11:
55:a0:71:5b:07:30:89:b4:6e:75:fd:0b:2a:39:30:
c9:fe:e9:84:0f:48:3c:bd:64:13:71:3b:b8:1e:a6:
07:52:e6:5f:13:db:04:b7:c5:ad:c7:ba:f8:10:02:
7a:0c:4d:ba:48:d1:52:d5:3d:4d:79:b3:d6:7b:54:
6b:0d:47:04:c7:d2:a3:26:73:2c:cf:5a:19:40:76:
bc:78:ca:2e:0c:b3:c0:d3:36:b4:46:5f:ea:02:fa:
51:d4:82:ee:4b:99:b4:4a:c3:9a:36:ef:2c:62:5b:
b1:48:5a:1c:d3:37:c4:5b:06:f9:5f:19:84:69:2b:
b4:20:f2:0f:ec:e3:af:9d:88:5c:09:db:b2:43:9e:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:BF:03:EB:EB:BA:76:4F:DC:7A:5A:43:F9:CF:FE:B2:77:33:D7
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nP6_A-vrunZP3HpaQ_nP_rJ3M9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.112.0/20
Signature Algorithm: sha256WithRSAEncryption
57:74:bd:0f:7a:0f:aa:7f:06:7d:16:64:ad:0c:05:a3:cf:28:
89:c2:52:d2:b9:66:42:c7:10:17:9d:ba:6c:bb:0c:f8:ae:3c:
45:21:00:87:ec:7d:8f:88:93:8f:a6:cf:29:b7:a1:81:67:e7:
ac:ea:36:ce:cf:3e:45:a0:c2:bc:58:43:ab:b6:f3:6d:0d:32:
46:79:a5:cd:39:a7:c8:45:be:89:75:c4:10:8b:c2:3d:70:5c:
0d:22:57:91:ab:9e:7c:b3:fc:9e:70:47:30:63:d5:b4:2c:95:
ed:8c:9c:ed:05:4d:12:3f:39:8c:64:3b:a7:55:be:dd:8b:68:
b6:da:14:f5:69:d0:d0:74:65:b0:90:02:f7:52:fd:cb:07:01:
cb:67:21:e0:f4:f8:0c:6d:6c:8d:bc:37:3e:29:ad:f4:a3:25:
1a:9e:e2:2c:1d:74:1b:b5:9f:4b:cf:79:8f:c2:e3:e5:4c:1a:
b1:79:b0:aa:ce:12:19:4f:e9:52:18:c7:84:47:97:d6:c8:55:
8f:99:33:03:13:ea:a2:8a:77:34:90:59:74:ea:a8:38:e8:d6:
05:d0:f9:5e:51:ad:18:e1:46:08:a2:1a:9c:05:02:16:a2:26:
99:7c:60:b9:b7:e9:26:48:d1:dc:01:8f:dc:a8:92:ad:7d:a3:
42:4a:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org