Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-n1aPNBKWSpvtHLp0pu41CfF1mA.roa
File: -n1aPNBKWSpvtHLp0pu41CfF1mA.roa (raw, json)
Hash identifier: sfAeQ6AxaaAI39dkwV5ZMqoT4leSIa/BMDKXEDrjmtA=
Subject key identifier: FA:7D:5A:3C:D0:4A:59:2A:6F:B4:72:E9:D2:9B:B8:D4:27:C5:D6:60
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-n1aPNBKWSpvtHLp0pu41CfF1mA.roa
Signing time: Thu 15 Sep 2022 02:47:23 +0000
ROA not before: Thu 15 Sep 2022 02:47:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 203.77.54.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA7D5A3CD04A592A6FB472E9D29BB8D427C5D660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:b7:32:66:41:20:53:b2:34:8b:57:39:b6:
a1:73:43:94:a9:e2:fc:5f:f8:88:3d:a9:32:21:46:
cb:b6:c5:59:fc:13:87:af:5e:48:b3:de:57:c7:5e:
23:d2:2e:51:96:59:25:ae:95:66:95:f4:cf:26:55:
2e:52:3f:a2:03:3f:d4:0a:8e:65:e8:af:ad:c6:99:
ca:89:86:6f:82:d8:68:92:3d:e0:d9:28:70:4d:f6:
ca:36:3c:19:7b:9f:7b:dc:07:45:22:cd:b4:ba:e5:
17:33:4f:85:96:c9:aa:9c:b7:48:59:42:ef:06:ef:
2c:59:60:58:e8:34:40:50:a8:e3:49:e3:09:2d:e8:
29:3b:af:b9:9a:ea:43:88:38:80:38:fc:05:79:03:
b1:d0:d6:c0:e7:da:24:ce:df:06:62:96:62:fb:8b:
6e:61:c5:58:fc:80:aa:7d:f3:c7:d1:7b:7d:55:27:
8e:de:d9:f2:20:2c:b1:3b:4c:9d:c3:11:85:c2:26:
92:c8:c2:ed:67:9a:06:4a:23:3c:b4:69:33:f6:b6:
d9:77:62:9c:5c:d8:75:22:56:cd:f3:d0:e1:3a:b8:
57:c8:ce:a1:74:29:88:31:c8:99:c0:e1:20:a8:b8:
63:e2:cd:cd:35:8f:94:dd:4b:ef:ac:35:9b:33:ca:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:5A:3C:D0:4A:59:2A:6F:B4:72:E9:D2:9B:B8:D4:27:C5:D6:60
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/-n1aPNBKWSpvtHLp0pu41CfF1mA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.54.0/23
Signature Algorithm: sha256WithRSAEncryption
01:cb:60:da:9f:ec:ed:49:b5:93:00:8f:82:0d:94:53:66:89:
f5:fa:93:3b:b1:b9:66:a3:18:67:e1:61:64:3d:7f:94:76:4c:
66:7c:9c:2a:db:df:08:7b:43:c8:cc:0f:89:69:d8:dc:f8:e4:
34:04:72:29:95:cc:30:2c:ce:25:9d:8c:c9:9f:70:95:b5:fd:
e3:d4:9d:f2:86:eb:d4:e7:a1:50:e6:c8:f7:23:9c:6a:d9:e8:
7e:54:38:cb:12:fd:96:ca:db:f4:7d:57:4b:56:b3:4e:49:f5:
e1:8c:37:e9:14:dc:68:53:6a:88:6b:18:fc:0d:94:52:b7:79:
0a:44:9a:a2:c3:0e:1d:73:57:87:78:9d:d9:83:69:41:71:ec:
0d:11:0f:fa:b8:d8:bb:ff:60:02:22:bc:8c:3c:ad:24:5d:40:
06:d7:a7:e8:c0:6c:97:7a:66:d2:6b:d7:da:94:63:f8:32:72:
50:de:51:08:54:20:52:7e:dd:52:a4:f6:e1:61:7d:83:c6:16:
32:34:63:fb:37:42:f2:22:a9:9e:f5:34:b6:fe:81:47:df:0c:
cb:fa:07:3f:a9:51:d9:19:78:69:3c:2b:72:c0:fc:30:d7:9b:
aa:e8:68:8d:bd:50:ea:9c:d0:b3:7b:a2:65:e8:60:33:d9:ba:
1c:83:1f:50
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZBN0Q1QTNDRDA0QTU5
MkE2RkI0NzJFOUQyOUJCOEQ0MjdDNUQ2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQcLcyZkEgU7I0i1c5tqFzQ5Sp4vxf+Ig9qTIhRsu2xVn8E4ev
Xkiz3lfHXiPSLlGWWSWulWaV9M8mVS5SP6IDP9QKjmXor63GmcqJhm+C2GiSPeDZ
KHBN9so2PBl7n3vcB0UizbS65RczT4WWyaqct0hZQu8G7yxZYFjoNEBQqONJ4wkt
6Ck7r7ma6kOIOIA4/AV5A7HQ1sDn2iTO3wZilmL7i25hxVj8gKp988fRe31VJ47e
2fIgLLE7TJ3DEYXCJpLIwu1nmgZKIzy0aTP2ttl3Ypxc2HUiVs3z0OE6uFfIzqF0
KYgxyJnA4SCouGPizc01j5TdS++sNZszyihBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+n1aPNBKWSpvtHLp0pu41CfF1mAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvLW4xYVBOQktXU3B2dEhM
cDBwdTQxQ2ZGMW1BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ActNNjANBgkqhkiG9w0BAQsFAAOCAQEAActg2p/s7Um1kwCPgg2UU2aJ9fqTO7G5
ZqMYZ+FhZD1/lHZMZnycKtvfCHtDyMwPiWnY3PjkNARyKZXMMCzOJZ2MyZ9wlbX9
49Sd8obr1OehUObI9yOcatnoflQ4yxL9lsrb9H1XS1azTkn14Yw36RTcaFNqiGsY
/A2UUrd5CkSaosMOHXNXh3id2YNpQXHsDREP+rjYu/9gAiK8jDytJF1ABten6MBs
l3pm0mvX2pRj+DJyUN5RCFQgUn7dUqT24WF9g8YWMjRj+zdC8iKpnvU0tv6BR98M
y/oHP6lR2Rl4aTwrcsD8MNebquhojb1Q6pzQs3uiZehgM9m6HIMfUA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org