Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa
File: 0TYftRU56oBwM-UWFn4ToKuXVFw.roa (raw, json)
Hash identifier: bexIw3GD+vxMMj9dGzMYM9yVloDGH6BawzBXZ0KqGvk=
Subject key identifier: D1:36:1F:B5:15:39:EA:80:70:33:E5:16:16:7E:13:A0:AB:97:54:5C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FE7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa
Signing time: Fri 01 Sep 2023 09:37:30 +0000
ROA not before: Fri 01 Sep 2023 09:37:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17213
IP address blocks: 60.198.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 09:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4071 (0xfe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D1361FB51539EA807033E516167E13A0AB97545C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:c2:42:54:c2:43:9c:57:42:36:0c:22:c3:
a8:02:be:35:1a:80:17:65:4d:eb:f0:92:9f:f1:10:
97:c9:d9:c8:03:b0:3b:4e:94:cc:04:99:11:9d:35:
b9:d2:36:72:62:02:b5:f3:bd:ed:7a:ac:af:24:92:
47:49:b6:7d:e0:64:92:b5:22:43:a2:5d:ba:c6:59:
4e:a3:e6:c6:da:d2:15:0f:0f:23:71:ce:57:c1:58:
3f:c8:63:68:56:40:f8:81:53:af:2d:0d:e2:d8:60:
16:c9:eb:33:9e:3f:0f:f2:66:4c:42:39:70:57:52:
99:e4:93:52:1e:73:e5:87:2d:1c:e5:12:5e:e4:50:
99:a7:fe:88:85:f5:4a:46:4d:51:fa:4c:e0:0f:18:
93:7c:c0:f8:0d:77:71:7a:22:ac:eb:96:b5:63:db:
8a:cf:b1:f3:a0:ea:a0:49:c1:7a:5c:f2:0e:ea:36:
b3:47:9e:a3:d5:05:13:0b:05:af:59:2c:d9:32:bd:
4c:42:ab:dd:f0:96:52:7f:1c:bc:07:6c:c4:50:92:
3c:6e:f1:34:d7:19:4f:f7:44:35:b4:5d:f4:bd:80:
f3:a5:22:d4:3e:73:18:48:e4:54:7f:78:b8:fd:e1:
6d:fa:7b:53:96:6d:db:a0:06:0c:ff:84:1f:a1:e4:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:1F:B5:15:39:EA:80:70:33:E5:16:16:7E:13:A0:AB:97:54:5C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:53:57:c1:af:9b:66:03:c5:b5:3b:03:6c:43:be:11:f0:51:
25:d7:aa:66:9d:9d:ef:4d:d7:7b:b2:ba:c9:c4:cd:3f:c9:c9:
19:db:0f:b8:48:c2:f6:a6:11:29:a7:95:aa:e6:b2:62:24:37:
12:93:73:25:dd:87:d4:31:d3:fc:67:b2:5e:64:25:5f:e9:22:
02:3e:93:d6:c6:5d:95:25:ca:ee:bd:15:e3:bc:29:89:99:cd:
38:ea:16:f1:1a:de:66:b8:6a:ac:ef:10:df:2c:42:5c:42:91:
4a:a3:32:03:c6:30:85:74:5d:fb:0f:53:6f:fc:5e:16:fa:31:
c2:34:a9:d6:0f:03:f8:c8:ca:c0:92:40:42:9f:97:9c:44:e5:
a1:2d:70:95:f6:a4:43:01:c6:d5:ca:70:1f:13:e2:f4:3d:e4:
c6:a8:84:29:3d:68:43:10:93:f5:1e:ea:60:e9:dc:b5:0a:18:
92:c4:98:7f:16:41:be:b8:d4:61:ab:a1:79:73:cc:58:2a:81:
fc:de:c9:08:4e:04:e8:df:00:02:1c:4c:b7:c3:29:92:87:d0:
40:be:63:aa:83:60:fd:1c:c3:b4:c7:c7:73:ba:6e:25:0c:23:
85:99:26:cc:39:9f:3d:44:0d:44:26:24:22:6b:d9:4f:47:14:
ef:64:30:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:54:20 2024 by rpki-client on console-fra.rpki-client.org