Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4kzimZsY5kQsIAZkrw2xldpNB88.roa
File: 4kzimZsY5kQsIAZkrw2xldpNB88.roa (raw, json)
Hash identifier: oQ7tDD34wIHVCH3yvNRafInpTJqFsaRkf79CYYbZc70=
Subject key identifier: E2:4C:E2:99:9B:18:E6:44:2C:20:06:64:AF:0D:B1:95:DA:4D:07:CF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4kzimZsY5kQsIAZkrw2xldpNB88.roa
Signing time: Thu 15 Sep 2022 02:46:56 +0000
ROA not before: Thu 15 Sep 2022 02:46:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17213
IP address blocks: 60.198.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E24CE2999B18E6442C200664AF0DB195DA4D07CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:9c:7c:26:e0:37:dd:b6:e1:4a:61:1c:8b:
1c:cc:62:99:c1:00:1e:3f:d1:2d:65:a1:2f:bf:de:
e1:de:1c:06:a4:59:c2:d9:29:97:27:26:a6:eb:40:
3d:5e:dd:a7:d8:d5:8e:33:7d:a6:fb:bc:36:ae:08:
ce:00:41:31:23:e4:e9:49:bc:77:ff:9b:58:e6:ce:
fd:c1:bc:b5:8c:2e:7d:da:5d:a4:fd:32:19:30:ed:
1e:7b:db:74:f4:1e:8f:a7:31:dd:38:45:19:f7:9f:
55:a7:c7:5e:6c:41:fd:c1:37:89:c8:5a:ae:41:b8:
93:c2:65:96:60:55:94:46:e0:a3:58:49:11:73:d3:
fe:b9:23:91:d1:e0:89:ad:bc:5b:4d:39:e3:a1:c0:
94:fe:d8:4c:59:af:02:66:5b:5c:d7:ff:1d:9c:e3:
be:a9:95:b3:7c:48:0f:cd:81:c4:cd:ae:de:7f:6c:
01:bb:79:ee:94:90:b0:95:a6:cd:a8:fb:64:1d:28:
e7:6c:3a:b7:00:ac:89:11:aa:f0:e3:2b:9f:6d:ee:
ae:89:52:5d:e7:21:d2:51:8f:67:10:c1:4a:e8:87:
cf:87:88:40:3c:63:8f:28:c2:d0:3b:b9:d9:01:3a:
62:28:0c:c2:58:96:d2:0b:0a:e6:4e:63:bc:cc:6b:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:E2:99:9B:18:E6:44:2C:20:06:64:AF:0D:B1:95:DA:4D:07:CF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4kzimZsY5kQsIAZkrw2xldpNB88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.152.0/24
Signature Algorithm: sha256WithRSAEncryption
10:29:b7:9a:ef:8a:e0:af:52:b4:3c:e6:fa:3c:9e:39:f9:fe:
08:ad:2e:05:05:a6:bf:aa:2c:98:99:44:3c:6d:7c:01:af:43:
b6:b6:1f:e8:bd:8f:fb:62:f3:8d:42:fd:75:2e:05:22:95:76:
db:6b:da:54:71:ef:50:f2:d9:76:f5:db:1f:f8:f9:0b:c6:e2:
63:2f:2e:49:3b:f7:6b:fd:68:33:3a:4f:9c:29:75:d5:77:c6:
49:8b:77:40:e9:9f:a1:d9:93:31:35:c3:40:e5:ee:72:e4:9d:
18:f5:b2:9f:ff:03:41:d5:f3:33:c0:5b:3e:f5:1a:cd:95:f9:
e9:bc:59:68:e4:8e:29:68:65:86:33:f2:4f:3e:5c:6b:62:72:
5e:fa:61:26:61:29:fd:50:04:16:66:09:e9:53:57:5c:4f:c5:
08:7d:be:81:c1:c0:34:ff:9f:8c:9e:d1:8b:1f:4b:4d:2d:2f:
53:e7:4f:43:95:ee:ab:a5:8b:f7:1b:3d:b1:62:de:73:77:48:
8a:39:da:af:67:43:c0:bf:98:16:dc:14:0a:2b:d4:e8:83:be:
af:5a:f9:c0:7a:d5:19:dc:2f:d6:54:6f:2a:f7:dc:15:9e:39:
d5:41:e4:6d:5f:56:8d:0d:6b:fe:01:66:30:41:12:8a:aa:2d:
4c:d5:38:db
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ2NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUyNENFMjk5OUIxOEU2
NDQyQzIwMDY2NEFGMERCMTk1REE0RDA3Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKJ5x8JuA33bbhSmEcixzMYpnBAB4/0S1loS+/3uHeHAakWcLZ
KZcnJqbrQD1e3afY1Y4zfab7vDauCM4AQTEj5OlJvHf/m1jmzv3BvLWMLn3aXaT9
Mhkw7R5723T0Ho+nMd04RRn3n1Wnx15sQf3BN4nIWq5BuJPCZZZgVZRG4KNYSRFz
0/65I5HR4ImtvFtNOeOhwJT+2ExZrwJmW1zX/x2c476plbN8SA/NgcTNrt5/bAG7
ee6UkLCVps2o+2QdKOdsOrcArIkRqvDjK59t7q6JUl3nIdJRj2cQwUroh8+HiEA8
Y48owtA7udkBOmIoDMJYltILCuZOY7zMayPzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4kzimZsY5kQsIAZkrw2xldpNB88wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNGt6aW1ac1k1a1FzSUFa
a3J3MnhsZHBOQjg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzGmDANBgkqhkiG9w0BAQsFAAOCAQEAECm3mu+K4K9StDzm+jyeOfn+CK0uBQWm
v6osmJlEPG18Aa9DtrYf6L2P+2LzjUL9dS4FIpV222vaVHHvUPLZdvXbH/j5C8bi
Yy8uSTv3a/1oMzpPnCl11XfGSYt3QOmfodmTMTXDQOXucuSdGPWyn/8DQdXzM8Bb
PvUazZX56bxZaOSOKWhlhjPyTz5ca2JyXvphJmEp/VAEFmYJ6VNXXE/FCH2+gcHA
NP+fjJ7Rix9LTS0vU+dPQ5Xuq6WL9xs9sWLec3dIijnar2dDwL+YFtwUCivU6IO+
r1r5wHrVGdwv1lRvKvfcFZ451UHkbV9WjQ1r/gFmMEESiqotTNU42w==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:49 2023 by rpki-client on console-ams.rpki-client.org