Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/zMYzVza8EiaUUxqWHaaaBvQ7mu0.roa
File: zMYzVza8EiaUUxqWHaaaBvQ7mu0.roa (raw, json)
Hash identifier: qPJBBCLOr+1LyCmd1QH1r4caOWoBAi6UaOqflv7eDGA=
Subject key identifier: CC:C6:33:57:36:BC:12:26:94:53:1A:96:1D:A6:9A:06:F4:3B:9A:ED
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zMYzVza8EiaUUxqWHaaaBvQ7mu0.roa
Signing time: Thu 15 Sep 2022 02:37:26 +0000
ROA not before: Thu 15 Sep 2022 02:37:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CCC6335736BC122694531A961DA69A06F43B9AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:6e:e5:46:ae:0a:b3:ce:6c:21:a8:25:1d:
7c:66:03:6d:ad:4c:51:17:bd:ca:21:a1:d9:6c:53:
54:2d:fc:36:a0:63:95:44:02:6f:ea:4a:05:81:2f:
81:83:f0:cc:80:26:02:13:85:39:cb:f9:07:3f:26:
4c:69:e6:c5:d8:5c:29:c8:7c:91:92:e2:a6:70:3a:
b4:33:5f:c2:8e:49:5e:30:cd:59:0d:08:71:78:ef:
19:24:91:ba:d0:91:96:0c:38:68:f0:ee:de:35:0f:
a5:55:d6:f6:62:90:13:05:31:a3:c1:b4:6d:35:2a:
db:82:ae:16:50:e8:bc:d9:09:af:aa:70:12:fe:9b:
9d:94:4a:0a:dc:9e:ef:db:9c:90:da:1b:1e:da:f9:
a7:5b:30:f1:a3:e4:7f:aa:cf:f0:07:41:17:7d:05:
15:a3:83:38:2e:20:35:05:6d:26:30:e9:9f:f5:19:
0c:da:b1:8a:35:b6:90:aa:c2:34:dd:bf:6e:dc:61:
df:43:90:ad:46:25:92:af:ef:58:82:5b:05:a7:52:
80:26:6a:d1:4f:eb:55:c3:5c:74:e3:89:50:fa:15:
2d:f7:92:0d:99:04:12:72:0c:3c:86:1e:98:6a:96:
e4:ec:bd:19:63:3f:be:2e:09:cf:1b:a3:69:3a:0a:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C6:33:57:36:BC:12:26:94:53:1A:96:1D:A6:9A:06:F4:3B:9A:ED
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/zMYzVza8EiaUUxqWHaaaBvQ7mu0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:3e:93:41:11:54:f5:98:b2:e2:d7:3c:ff:1f:d0:e6:00:19:
ee:8f:4f:26:7b:a4:3d:71:d8:66:d6:53:96:82:68:9c:8b:4d:
f3:59:8f:5c:64:77:7f:32:86:bd:27:f8:23:ec:88:25:2b:e4:
eb:03:d2:e6:d5:fc:21:80:88:07:5e:6f:3b:59:2c:83:4d:09:
da:8f:77:08:81:5a:52:10:ef:79:59:52:d5:6b:bd:92:97:46:
19:8d:8c:a3:7d:d2:81:5b:75:2d:75:7b:48:db:98:5c:f8:c4:
11:19:27:1d:f3:41:ad:85:8d:18:97:33:24:aa:79:bf:4a:f8:
3c:95:66:f0:f8:9a:d8:88:17:e8:05:0e:9f:90:f4:f0:8c:ea:
fb:22:19:1b:3f:9a:a9:26:10:92:99:33:b1:ce:64:83:59:2d:
a2:29:58:f1:a6:5f:1e:41:b4:d7:cc:00:c7:21:39:8b:c0:c2:
52:e0:d1:f1:b2:47:32:6b:12:d3:18:0e:ab:37:9a:35:09:f8:
cc:b5:02:67:31:29:d1:a4:1e:f6:03:21:48:a1:47:42:bc:2c:
c3:6d:47:05:32:0d:21:ea:ef:6f:16:49:2e:93:82:69:c6:11:
c0:00:fd:94:a9:6b:0f:65:95:8a:05:87:28:b4:54:9b:e8:a5:
62:95:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:53 2023 by rpki-client on console-ams.rpki-client.org