Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/r6nbLLhNzvfTmNuZkOCajfeC_F0.roa
File: r6nbLLhNzvfTmNuZkOCajfeC_F0.roa (raw, json)
Hash identifier: 4Y7jKLFeg3/bf1wro2K1qkUiIzczoTeqeSRucY8cCvA=
Subject key identifier: AF:A9:DB:2C:B8:4D:CE:F7:D3:98:DB:99:90:E0:9A:8D:F7:82:FC:5D
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D00
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/r6nbLLhNzvfTmNuZkOCajfeC_F0.roa
Signing time: Wed 26 Apr 2023 10:31:26 +0000
ROA not before: Wed 26 Apr 2023 10:31:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.224.0/19 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3328 (0xd00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:26 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AFA9DB2CB84DCEF7D398DB9990E09A8DF782FC5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:f6:1b:2a:66:f8:98:ce:20:c2:92:36:40:
81:c8:ef:e3:fe:86:93:b9:ba:9b:c9:a8:1b:d1:02:
e6:34:2a:41:b2:54:c1:69:d4:e2:87:13:be:d6:6f:
e1:83:fd:df:e6:0e:4f:c6:f4:fd:11:d8:20:fc:56:
04:1e:a0:a6:82:e1:8b:df:7a:4c:2e:bb:00:bd:73:
88:16:47:4b:21:34:cc:e7:b8:a7:44:fa:7b:c6:7a:
15:38:7b:da:e6:15:2e:79:fa:48:45:85:75:25:26:
56:70:5e:04:8a:f4:64:01:d0:34:91:07:14:26:c5:
ab:dd:ed:36:03:7a:d1:ed:44:77:86:be:ad:57:54:
81:f8:a9:4a:ef:50:cd:36:f5:b9:c1:92:db:20:f5:
22:1b:aa:14:54:ec:63:a2:6d:9c:fb:0e:b4:2a:4d:
fc:03:01:3a:04:70:5b:f6:bb:9a:33:82:e9:36:5c:
df:49:a5:3d:68:3c:93:74:cd:fb:f6:ec:67:a6:7c:
2b:b2:29:97:52:23:92:c7:93:c7:45:f9:87:cd:5d:
4a:89:69:11:59:c4:38:7c:15:6f:60:00:ed:0a:4e:
9a:da:ce:2a:c1:fe:00:6f:5b:16:9e:66:ee:1a:85:
c8:02:54:16:7b:56:d4:f4:ce:47:81:df:8d:df:94:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:DB:2C:B8:4D:CE:F7:D3:98:DB:99:90:E0:9A:8D:F7:82:FC:5D
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/r6nbLLhNzvfTmNuZkOCajfeC_F0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:34:46:b8:88:42:5d:02:53:77:fa:03:88:a9:c1:fa:c0:7b:
87:9e:28:ba:b4:8d:ae:0d:f0:1c:6f:df:6e:a8:63:54:2b:1e:
40:ac:1b:ee:1f:a9:ac:8e:d6:e1:45:e3:ac:9d:99:0f:db:f2:
db:30:4b:8b:5f:0a:f0:65:a3:1a:7f:f9:c8:82:3f:c0:03:7a:
49:f5:db:5f:6e:96:a5:ff:4a:f4:8b:5c:4f:c7:fd:0c:14:27:
e6:bf:bb:8f:e7:ed:34:38:c8:21:75:36:a8:27:06:ff:4b:15:
17:2a:56:2d:56:fd:b7:ce:4d:b3:ab:86:59:3d:39:9c:8c:d5:
ee:63:f8:be:61:e8:66:23:71:1a:e4:96:c7:6b:23:32:ab:e9:
e2:44:96:40:bb:f7:07:d4:89:06:f6:be:f3:83:aa:5c:6b:15:
93:37:03:d5:ff:46:10:c4:64:f9:92:6e:d7:38:af:6a:a7:1e:
0a:a0:b9:ed:83:7e:c2:74:a7:66:56:ee:da:0e:6f:fa:c1:d9:
04:68:66:e3:34:d4:a0:bc:82:05:06:3e:f2:eb:3b:f6:54:87:
df:b5:c4:5b:be:a3:e0:8d:9a:89:7c:8a:61:dd:77:26:8b:e1:
b9:8b:03:45:02:f1:34:88:c5:1a:53:b6:e5:33:68:54:a3:b0:
29:58:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org