Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/sdE3yG8V-g002shcVp9sCPvQiUw.roa
File: sdE3yG8V-g002shcVp9sCPvQiUw.roa (raw, json)
Hash identifier: V7NC8VgFfdJMN/OPhOM73t2P1n0UkFw+DQ2H3jlHBgY=
Subject key identifier: B1:D1:37:C8:6F:15:FA:0D:34:DA:C8:5C:56:9F:6C:08:FB:D0:89:4C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sdE3yG8V-g002shcVp9sCPvQiUw.roa
Signing time: Thu 15 Sep 2022 02:37:30 +0000
ROA not before: Thu 15 Sep 2022 02:37:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 211.79.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B1D137C86F15FA0D34DAC85C569F6C08FBD0894C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:0d:96:9b:53:97:4d:9a:4a:22:57:cf:c2:
ca:fb:3c:6d:f9:b0:a4:00:7a:6a:0b:85:88:0f:96:
2a:7e:ef:3c:8a:ba:ff:c7:1b:23:31:11:c4:0e:95:
47:b4:09:48:8f:c5:7f:e6:a3:6e:02:6f:cf:bf:f9:
a4:9d:9c:b0:bc:f3:bc:a7:26:e3:dc:fb:ae:99:d1:
8e:ca:c6:6f:9e:f6:12:74:c4:2f:15:90:10:37:40:
0a:5a:d3:1f:b9:c7:cf:23:e3:65:4c:e7:ce:5c:c8:
7b:ff:0d:65:4e:80:c6:b0:70:8c:a2:f4:d5:62:f2:
c0:23:8c:64:0f:04:fa:bf:a6:86:30:ed:14:73:27:
02:f7:66:ec:21:3a:4f:d5:b6:0c:93:50:66:ed:cb:
84:86:2a:f8:59:d6:c9:f6:81:bc:3b:e2:05:bc:93:
44:14:5b:5c:fc:19:1f:a5:19:79:3d:55:d0:5d:e2:
5c:91:4a:aa:02:4a:75:ca:0d:b9:59:21:23:5d:d0:
c0:f3:a4:ae:f3:b5:a7:10:6f:40:a5:aa:d3:df:fb:
07:65:a0:47:1f:0d:26:ca:c0:1a:b4:c4:d0:be:47:
5e:22:b3:20:2c:ca:60:ce:a4:a2:7c:bf:54:ff:2f:
64:47:00:44:64:17:91:33:0b:96:3e:06:85:74:14:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:37:C8:6F:15:FA:0D:34:DA:C8:5C:56:9F:6C:08:FB:D0:89:4C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sdE3yG8V-g002shcVp9sCPvQiUw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.120.0/21
Signature Algorithm: sha256WithRSAEncryption
36:83:04:f5:ad:c7:64:2f:b4:e1:d1:79:48:ff:88:9d:09:3e:
b6:1d:12:2a:c5:64:a9:83:5d:98:b4:d8:e2:59:4c:bf:ec:ef:
4b:0c:3a:32:37:1b:08:70:e1:e4:33:3a:17:f5:5f:06:ff:4d:
f0:29:a7:99:ba:56:a6:af:8f:0e:0b:00:c3:27:59:7d:df:ae:
67:81:40:f6:ea:dd:90:3c:a6:50:63:8c:68:20:60:10:20:41:
7b:bf:14:0a:74:49:ed:26:b7:e5:5a:9c:96:1b:b8:8f:09:ff:
95:6a:78:46:59:bf:44:b4:cf:72:2f:8f:51:22:1e:a9:17:3d:
9b:5c:3e:5c:c5:c8:07:a7:78:38:1e:f9:55:58:61:d8:57:d3:
d8:18:8d:df:c2:45:53:59:9c:ab:8c:2f:6e:3d:fc:49:0a:54:
4b:71:c5:05:74:74:14:ed:10:1b:f4:09:eb:87:10:45:38:cf:
63:22:5a:2e:0f:aa:11:eb:ba:fd:4c:ac:df:d6:b5:6a:bc:ca:
38:81:ae:10:af:8c:a3:19:f4:4c:2a:b6:43:28:09:2e:69:e9:
b8:ab:86:ee:a3:eb:de:24:95:cb:72:40:0c:80:7b:11:32:f6:
71:31:d1:23:22:ab:1f:9a:12:2e:47:6e:15:dc:ee:a3:7b:b7:
e0:05:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-fra.rpki-client.org