Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ru3LYPSt9Ldd2zaubIRr-E7YCi0.roa
File: ru3LYPSt9Ldd2zaubIRr-E7YCi0.roa (raw, json)
Hash identifier: 8UeL4fmVxu+gI+tbx5D4XJpfTf+j0umTWSHi4/b0zHI=
Subject key identifier: AE:ED:CB:60:F4:AD:F4:B7:5D:DB:36:AE:6C:84:6B:F8:4E:D8:0A:2D
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ru3LYPSt9Ldd2zaubIRr-E7YCi0.roa
Signing time: Thu 15 Sep 2022 02:37:17 +0000
ROA not before: Thu 15 Sep 2022 02:37:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.160.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AEEDCB60F4ADF4B75DDB36AE6C846BF84ED80A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:bd:12:5e:ba:34:db:7e:36:f3:32:07:46:
de:5c:3f:bb:3d:2a:34:aa:ec:b1:78:dd:18:8a:ff:
f9:55:cf:2b:7e:2d:2c:6d:65:f8:32:08:4b:d7:ca:
8c:3f:8e:b8:62:44:db:64:68:02:e6:a5:38:54:c3:
be:0b:d3:86:35:32:59:74:cb:4f:bb:0e:90:be:5c:
a6:12:9a:cf:5d:cf:e9:70:b1:43:fd:e4:5b:8a:0e:
cb:0b:fd:92:ff:d8:4a:40:67:0f:3f:d4:84:a2:5d:
dd:ec:fc:ea:f5:60:d2:a8:32:43:7e:41:79:f7:b5:
de:79:ef:34:24:ca:8a:73:8e:a3:db:8d:ea:0d:e7:
73:51:d7:b8:3f:b0:98:76:61:1d:d2:c3:e0:94:ef:
0f:80:9c:c7:ee:eb:36:b8:70:17:0c:bb:6a:4b:73:
45:14:ff:e2:89:23:60:1a:07:7f:7f:76:bf:72:d0:
59:e7:c6:89:5f:5c:73:c8:c0:75:cd:0e:eb:f0:76:
ab:4c:91:75:ee:46:1e:96:cc:60:69:fd:9f:d0:da:
34:37:ba:3a:7e:ea:7b:6a:ba:7c:9e:44:1f:89:3c:
a5:e0:52:9f:d9:1b:fe:e1:58:4d:4b:8a:b7:c9:fc:
71:46:37:3b:fd:21:4e:ee:60:24:9a:26:b8:6d:06:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:CB:60:F4:AD:F4:B7:5D:DB:36:AE:6C:84:6B:F8:4E:D8:0A:2D
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ru3LYPSt9Ldd2zaubIRr-E7YCi0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.160.0/19
Signature Algorithm: sha256WithRSAEncryption
71:24:8d:6f:e5:bb:2c:b9:df:7d:9e:5a:6a:c1:86:55:e1:b4:
c1:b2:83:de:77:b6:8b:ee:25:32:42:bb:98:9b:50:40:ee:7b:
be:ed:1b:a3:1d:fc:e4:12:01:2a:41:e3:c8:40:6a:0e:cd:40:
87:7e:e1:e5:79:8a:98:20:f3:99:65:76:34:c5:26:e4:71:f0:
1d:45:7d:52:5d:39:e5:90:62:50:59:af:d9:0b:09:f1:3e:72:
bc:25:59:f1:c5:2a:b5:67:bd:c0:73:aa:77:75:b8:ca:78:68:
90:23:ba:6f:ad:f2:27:d9:f8:6b:67:8b:c3:c4:ae:54:5a:50:
bb:da:b0:f7:45:02:ad:4e:8e:91:9e:aa:4d:f3:91:fb:c1:ef:
f2:70:1b:66:36:d3:33:9a:f8:6c:79:7c:7a:0a:7e:a0:0b:62:
67:67:3e:27:c5:b5:5d:1b:04:24:b8:89:d7:70:04:66:7d:3e:
8f:8a:00:c8:e1:7d:ac:aa:de:85:d8:0e:56:4e:bf:e5:55:30:
8d:4d:02:d7:43:31:5c:19:01:3f:2a:b3:f0:6f:9a:48:c0:db:
d7:2f:b6:a4:a5:ce:6c:aa:34:60:57:ce:7d:e0:25:20:eb:2b:
9f:15:cb:55:0d:fd:32:c5:dc:ff:02:df:c9:64:0c:93:12:e2:
8c:c5:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-fra.rpki-client.org