Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uAg4kAAPXJ1PVo2IOFBZlhG5nTU.roa
File: uAg4kAAPXJ1PVo2IOFBZlhG5nTU.roa (raw, json)
Hash identifier: +LNOi1q9QpWghA7Dq22w4iHDmm0S50X8YKSOK5aIioo=
Subject key identifier: B8:08:38:90:00:0F:5C:9D:4F:56:8D:88:38:50:59:96:11:B9:9D:35
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D2F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uAg4kAAPXJ1PVo2IOFBZlhG5nTU.roa
Signing time: Wed 26 Apr 2023 10:31:39 +0000
ROA not before: Wed 26 Apr 2023 10:31:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3375 (0xd2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8083890000F5C9D4F568D883850599611B99D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:a5:7f:17:59:59:e5:7e:17:ba:6b:f8:3d:
5c:62:49:4e:c6:f4:6a:8c:b7:40:6c:b9:e0:5c:d9:
6d:ae:dc:a3:2f:c4:25:bc:b7:65:cc:16:88:61:98:
bc:94:56:91:a9:cf:63:fb:a0:c2:0c:d1:86:40:3d:
ca:68:e6:2f:09:26:70:b6:15:74:4d:fe:94:b8:0c:
ac:e7:8d:00:6f:9f:62:19:fb:36:2c:0c:74:ba:f8:
b3:75:3a:5f:f9:76:c7:50:c0:c9:46:1f:54:6d:8d:
fe:55:34:40:8b:d2:e4:04:9b:f1:66:ff:4f:ab:fb:
2e:d4:58:b5:fe:0a:89:68:1a:14:66:8c:67:b8:01:
2a:1d:6e:5b:e5:82:85:05:62:80:02:db:fe:e1:10:
26:34:24:a4:5c:0d:9a:63:79:f2:fe:5c:b3:fc:0c:
5d:23:8e:6c:6a:74:86:36:d1:5b:ec:0d:63:a0:96:
3e:ea:f5:c8:3b:45:fa:44:18:47:67:46:18:e1:83:
5f:88:21:91:a0:43:f6:51:62:77:fc:73:b1:bb:ea:
21:d1:53:68:8e:3b:08:f9:96:6c:d6:89:30:b8:e8:
83:5e:15:9d:d2:d5:8e:42:54:58:bb:c6:e6:27:f8:
84:a1:d7:b0:c9:3f:06:b5:d8:7f:50:77:cd:ac:f7:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:38:90:00:0F:5C:9D:4F:56:8D:88:38:50:59:96:11:B9:9D:35
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uAg4kAAPXJ1PVo2IOFBZlhG5nTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:d5:a7:46:c8:a6:66:f8:49:ff:63:59:9c:70:2c:01:6d:98:
2d:d5:48:97:f7:73:d0:c9:3b:49:57:97:d9:96:34:46:20:9b:
9d:39:f2:d0:c7:74:e0:bf:ec:aa:24:7d:8f:83:5f:ef:37:a5:
8b:e1:1c:b2:f1:6e:1b:5e:72:d6:d2:23:d9:ab:56:41:8d:a1:
fd:3d:f9:f3:e9:eb:62:f3:d4:1b:5a:12:5f:71:03:df:e3:d1:
a0:e4:4c:5e:e2:b2:20:0f:b9:54:e6:27:aa:16:09:a4:4e:6a:
bc:92:06:00:5b:ab:1d:79:22:b0:8e:22:14:4b:52:57:4e:fe:
f4:73:22:75:6f:58:15:71:c7:76:06:29:8d:49:11:ff:e3:05:
84:4a:71:fe:23:c7:51:ea:c1:71:65:cf:5c:d5:f9:9f:b3:ce:
9c:c4:87:a2:33:0d:ba:ff:2c:7e:99:87:2b:91:18:58:ea:70:
c3:67:a9:a6:bc:35:f4:79:24:a7:a2:1e:55:9f:9e:9f:d6:a7:
dc:81:7f:9f:25:f2:fb:3d:8a:ba:af:78:e3:7d:da:53:53:4c:
73:9c:4a:1c:e3:15:db:e6:f3:eb:55:47:27:b2:78:77:06:dc:
e1:58:89:81:87:89:22:a3:77:88:14:37:df:c5:3e:97:81:90:
42:ee:94:38
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA0MjYx
MDMxMzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI4MDgzODkwMDAwRjVD
OUQ0RjU2OEQ4ODM4NTA1OTk2MTFCOTlEMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcjqV/F1lZ5X4Xumv4PVxiSU7G9GqMt0BsueBc2W2u3KMvxCW8
t2XMFohhmLyUVpGpz2P7oMIM0YZAPcpo5i8JJnC2FXRN/pS4DKznjQBvn2IZ+zYs
DHS6+LN1Ol/5dsdQwMlGH1Rtjf5VNECL0uQEm/Fm/0+r+y7UWLX+ColoGhRmjGe4
ASodblvlgoUFYoAC2/7hECY0JKRcDZpjefL+XLP8DF0jjmxqdIY20VvsDWOglj7q
9cg7RfpEGEdnRhjhg1+IIZGgQ/ZRYnf8c7G76iHRU2iOOwj5lmzWiTC46INeFZ3S
1Y5CVFi7xuYn+ISh17DJPwa12H9Qd82s91Y5AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUuAg4kAAPXJ1PVo2IOFBZlhG5nTUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdUFnNGtBQVBYSjFQVm8ySU9GQlps
aEc1blRVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE94DAN
BgkqhkiG9w0BAQsFAAOCAQEADNWnRsimZvhJ/2NZnHAsAW2YLdVIl/dz0Mk7SVeX
2ZY0RiCbnTny0Md04L/sqiR9j4Nf7zeli+EcsvFuG15y1tIj2atWQY2h/T358+nr
YvPUG1oSX3ED3+PRoORMXuKyIA+5VOYnqhYJpE5qvJIGAFurHXkisI4iFEtSV07+
9HMidW9YFXHHdgYpjUkR/+MFhEpx/iPHUerBcWXPXNX5n7POnMSHojMNuv8sfpmH
K5EYWOpww2epprw19Hkkp6IeVZ+en9an3IF/nyXy+z2Kuq94433aU1NMc5xKHOMV
2+bz61VHJ7J4dwbc4ViJgYeJIqN3iBQ338U+l4GQQu6UOA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org