Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2aBWX9QtNqCGne3AvduTCvRJEaI.roa
File: 2aBWX9QtNqCGne3AvduTCvRJEaI.roa (raw, json)
Hash identifier: XDFMeGerHJT2tD5M3SqPa93JW9NHDgzl24T8E/TbeMM=
Subject key identifier: D9:A0:56:5F:D4:2D:36:A0:86:9D:ED:C0:BD:DB:93:0A:F4:49:11:A2
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2aBWX9QtNqCGne3AvduTCvRJEaI.roa
Signing time: Thu 15 Sep 2022 02:47:26 +0000
ROA not before: Thu 15 Sep 2022 02:47:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 203.77.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9A0565FD42D36A0869DEDC0BDDB930AF44911A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:03:50:ee:eb:17:b6:e0:e8:cb:38:b3:25:
ad:9c:80:97:73:ae:21:ab:6b:77:7f:fc:f6:4a:fb:
2b:00:82:27:cd:98:61:c2:14:0d:aa:ec:62:ed:e7:
84:6c:53:95:5e:18:f5:a3:2e:d9:01:c3:9e:fb:c9:
f5:d9:51:cc:27:06:40:82:3b:ef:40:56:93:0d:41:
df:ca:a7:d4:13:b7:81:66:1e:ee:0d:80:ab:0c:52:
c8:94:ff:46:5a:c3:00:25:01:4f:14:56:e0:64:23:
2a:f2:05:3d:ae:f4:6c:13:90:30:11:09:84:a9:6e:
47:09:4c:3f:59:27:a0:6e:34:d2:32:1e:ac:0e:72:
29:fa:3a:5f:e1:12:bf:6a:be:ac:1e:23:2d:d7:d4:
d1:5d:ca:5e:fd:4e:49:4f:26:61:1d:d7:8f:b4:f7:
b1:12:38:e1:c0:b7:af:db:50:b0:61:19:72:f2:50:
28:64:68:e5:39:87:aa:4b:35:41:78:42:ad:e4:0d:
9e:10:2e:ea:e6:1b:6b:a8:f9:f1:0a:3c:ba:0d:af:
10:82:08:6b:16:61:56:ce:59:f9:7d:41:de:bf:6b:
b3:fd:76:6d:2d:4c:66:9b:99:88:5c:b6:10:b4:8c:
32:6a:05:22:67:84:84:a6:ad:48:1d:1b:1c:fc:02:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:56:5F:D4:2D:36:A0:86:9D:ED:C0:BD:DB:93:0A:F4:49:11:A2
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2aBWX9QtNqCGne3AvduTCvRJEaI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.50.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ed:34:6a:ae:95:7f:0e:7a:7e:29:93:c1:2f:e3:07:26:b3:
af:7d:48:39:39:e9:fd:dd:ea:c7:9d:29:cf:be:ac:e1:cb:7d:
09:d8:99:14:c9:30:be:83:03:3e:ac:99:db:63:d0:42:5f:78:
20:30:95:f9:3e:bf:7e:5b:06:b1:19:1a:24:cc:d1:70:d2:b3:
1a:08:5b:71:23:b7:7b:0c:ba:a3:59:05:11:39:4d:b3:56:2c:
b5:6d:7e:37:7b:9d:32:7c:9d:4f:52:ec:03:62:e3:68:0f:fc:
dc:92:a7:e9:61:3c:c4:92:b4:f8:8a:2f:6e:db:ed:66:7e:fc:
c5:1e:a6:50:fe:c7:d1:21:0f:cd:e6:99:24:f3:7b:16:15:cd:
38:ba:51:01:76:26:c5:97:d1:26:60:60:4a:20:a0:8a:d3:7a:
a1:cb:b0:b9:51:7e:4b:22:fe:9b:97:45:17:48:c8:58:6d:06:
ed:12:e8:c0:75:01:a7:f5:33:43:0b:ea:d0:e5:a9:fd:1c:93:
f7:59:bf:40:ca:25:99:b2:c5:91:a3:ab:68:19:f3:dc:02:e3:
83:e9:cd:ff:f9:d4:53:9b:ff:91:a2:d9:2c:db:f6:e7:22:bd:
1f:7b:94:df:82:2c:55:9e:1c:c1:82:2e:32:86:8c:3d:17:54:
7b:89:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org