Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yau3g8wKRGFtOAr8amm0nNmhJgQ.roa
File: yau3g8wKRGFtOAr8amm0nNmhJgQ.roa (raw, json)
Hash identifier: P+y/S3QmLSZA3Rs3O02fJ4Ve5mXzH919sodZxk9I+Y4=
Subject key identifier: C9:AB:B7:83:CC:0A:44:61:6D:38:0A:FC:6A:69:B4:9C:D9:A1:26:04
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0FFE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yau3g8wKRGFtOAr8amm0nNmhJgQ.roa
Signing time: Mon 26 Aug 2024 05:13:17 +0000
ROA not before: Mon 26 Aug 2024 05:13:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 182.155.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4094 (0xffe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C9ABB783CC0A44616D380AFC6A69B49CD9A12604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:fa:16:03:f4:2d:50:a6:89:b6:c9:79:43:
9e:a6:3c:12:52:34:d1:84:b1:4f:22:da:33:13:cf:
8e:df:8e:3e:32:b5:22:dd:79:24:2a:a6:50:46:d5:
4a:e5:0d:3b:1c:83:aa:08:ce:c7:05:fc:1e:30:a3:
55:a8:b2:54:80:6b:ab:13:13:4d:e3:19:70:94:4b:
48:fc:a7:3a:7b:4f:02:2d:54:a3:10:d1:6e:46:3e:
38:30:8b:e1:1d:c8:b3:6c:1a:ed:e4:8d:5a:0e:94:
86:55:4d:59:84:04:a5:b5:81:b2:51:10:b4:00:27:
0a:b0:cd:51:96:65:c0:82:fe:eb:76:b0:c5:be:db:
c3:5c:1e:71:df:d1:46:34:fa:37:41:3b:08:be:09:
90:95:c3:82:90:b7:27:13:19:29:0a:45:b0:f5:f3:
35:3b:b2:89:7b:08:55:42:ca:5b:82:1d:5c:0f:59:
8f:aa:3a:6c:c1:9c:36:55:63:2a:27:98:df:20:05:
b8:90:03:0a:a4:9f:f7:e0:a9:d6:1d:84:c4:da:cc:
48:b7:21:ae:c5:41:0c:bf:7e:2f:e7:f4:e2:91:40:
53:8d:37:06:7f:02:4d:b4:0e:ac:c0:90:4c:36:d6:
d6:f9:86:e3:ee:ab:65:8c:18:b9:d2:de:9a:34:b3:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:B7:83:CC:0A:44:61:6D:38:0A:FC:6A:69:B4:9C:D9:A1:26:04
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yau3g8wKRGFtOAr8amm0nNmhJgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:7b:7d:de:27:c8:d1:ff:5d:19:84:a3:b3:5f:8f:5b:ca:c4:
af:14:a0:4c:7c:5b:be:65:63:5a:49:d5:3a:fb:19:03:c5:6b:
9e:27:f9:94:3a:5b:dc:02:da:f8:87:11:d0:a1:0a:cd:7e:2a:
46:6b:27:ec:e6:b5:4d:e4:bc:21:d3:69:b1:49:1d:f5:5b:c4:
81:f7:db:08:47:09:db:ca:d3:69:0a:f6:c2:46:d6:fe:2c:98:
35:10:e8:7d:3f:01:32:12:23:16:4d:b6:ea:53:3c:75:3f:d5:
e8:5c:74:d2:a9:1e:74:ba:68:38:62:a3:5f:a0:29:4c:ac:2d:
76:3a:85:12:ed:84:fa:1a:95:71:2a:0d:c8:00:6f:7e:c0:6a:
cc:ee:69:0f:a4:c0:d8:5b:96:f6:06:85:99:17:65:31:18:0a:
5b:c3:99:59:d0:5d:6c:f4:6c:3b:9d:a1:04:30:f0:f4:48:2e:
88:e9:ba:09:d1:11:78:3b:01:50:0e:7e:0b:ba:47:0b:2e:14:
a9:d5:7b:b1:38:38:76:54:88:35:50:0d:e4:41:24:53:e9:33:
1a:13:8d:ef:53:e0:1c:9f:4c:9d:2d:51:2f:6c:0f:9a:bd:00:
a8:7e:55:0e:75:e1:26:b3:87:cd:0a:92:04:fd:3d:c1:da:a0:
f9:ee:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:06 2025 by rpki-client