Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa
File: 4zQtYvZbynG9FpdsqMCeFTvbozc.roa (raw, json)
Hash identifier: 0AlpqIGcJIBZuGhWmcwMTLaxihDzaZSbgFNC4wkKhx0=
Subject key identifier: E3:34:2D:62:F6:5B:CA:71:BD:16:97:6C:A8:C0:9E:15:3B:DB:A3:37
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11D5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa
Signing time: Mon 26 Aug 2024 05:24:25 +0000
ROA not before: Mon 26 Aug 2024 05:24:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 219.80.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4565 (0x11d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:25 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E3342D62F65BCA71BD16976CA8C09E153BDBA337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:50:a5:a3:20:f1:0b:36:ba:8c:66:b3:d2:
74:cb:41:f5:ec:c8:4c:b1:15:d0:e4:0c:a1:b9:9e:
5e:6f:3e:94:cf:31:04:a6:e4:08:c4:93:74:1a:2c:
7f:76:1e:3c:e6:65:5b:9d:1c:75:57:00:76:51:b7:
f0:09:94:e6:23:04:df:9f:81:96:55:ec:d5:2e:31:
70:e1:ac:f5:13:34:f2:d4:90:4d:12:a6:e1:06:38:
c9:7d:64:64:78:ca:2e:50:79:de:e7:f2:50:34:bc:
fc:71:9c:eb:13:80:a9:8a:8b:80:44:21:5e:28:bd:
44:79:dc:e6:21:c1:27:3a:e0:2b:1a:22:01:33:f6:
47:98:7f:25:48:d0:c8:a1:ec:4e:8e:42:ba:41:48:
39:c1:bd:02:4a:52:a4:c9:17:4f:33:3c:cc:e9:bb:
46:74:d3:be:c2:b7:1b:69:ab:ad:af:5b:cd:42:70:
7f:fc:6b:f3:66:59:c9:ba:f6:4d:fe:39:9e:40:43:
d7:58:63:eb:fe:61:a4:42:29:de:d4:98:44:04:cd:
f0:f2:66:73:dd:1c:8c:cb:c3:96:58:45:7c:76:83:
c1:82:62:b4:cc:56:97:f0:29:a0:98:53:6a:86:2d:
a5:31:3e:79:67:81:80:1c:07:a0:f2:c1:be:c1:6f:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:2D:62:F6:5B:CA:71:BD:16:97:6C:A8:C0:9E:15:3B:DB:A3:37
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:28:5b:e8:34:91:cb:74:13:ad:80:37:51:3b:44:3b:d2:9b:
1f:9f:cc:26:0e:62:db:b7:73:c4:4c:31:e1:22:29:9c:5c:49:
fa:c1:5d:79:23:23:38:3a:8e:3a:ca:16:5e:55:de:3f:2d:80:
1b:dd:a1:af:e7:74:95:f3:7c:fe:12:47:a7:43:f0:26:3f:cb:
d1:85:a6:72:80:3d:d7:c3:07:9b:d7:ec:13:b7:6f:99:d7:1c:
a2:da:26:3c:2f:83:fe:11:55:e3:4c:99:31:dd:f2:3a:18:e4:
ea:67:b4:e5:b5:c5:99:7b:0d:f1:3b:7b:19:e5:6b:22:12:f9:
c2:a5:50:3b:2c:cd:eb:66:c5:ee:80:43:73:dd:64:dc:bf:dc:
86:df:ab:a2:6e:89:6d:82:84:14:f9:26:77:1a:62:dd:ce:82:
17:2a:98:c6:72:2a:c7:34:38:0d:57:f4:a4:1b:8d:4e:27:bf:
03:b7:4b:fc:e2:55:27:b3:d1:88:2a:50:b7:c4:2e:6f:f6:25:
01:c4:4b:61:ea:85:17:e1:02:66:c5:ca:dc:77:be:f2:0e:bd:
57:9d:f7:8e:09:21:c8:b3:c6:ec:56:9c:04:65:dc:d1:13:ad:
6e:75:1a:97:37:1e:bc:1e:1b:60:24:c8:50:9f:90:93:53:df:
30:fb:d2:c7
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzMzQyRDYyRjY1QkNB
NzFCRDE2OTc2Q0E4QzA5RTE1M0JEQkEzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWVFCloyDxCza6jGaz0nTLQfXsyEyxFdDkDKG5nl5vPpTPMQSm
5AjEk3QaLH92HjzmZVudHHVXAHZRt/AJlOYjBN+fgZZV7NUuMXDhrPUTNPLUkE0S
puEGOMl9ZGR4yi5Qed7n8lA0vPxxnOsTgKmKi4BEIV4ovUR53OYhwSc64CsaIgEz
9keYfyVI0Mih7E6OQrpBSDnBvQJKUqTJF08zPMzpu0Z0077Ctxtpq62vW81CcH/8
a/NmWcm69k3+OZ5AQ9dYY+v+YaRCKd7UmEQEzfDyZnPdHIzLw5ZYRXx2g8GCYrTM
VpfwKaCYU2qGLaUxPnlngYAcB6Dywb7Bb00jAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU4zQtYvZbynG9FpdsqMCeFTvbozcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNHpRdFl2WmJ5bkc5RnBk
c3FNQ2VGVHZib3pjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANtQMA0GCSqGSIb3DQEBCwUAA4IBAQBXKFvoNJHLdBOtgDdRO0Q70psfn8wmDmLb
t3PETDHhIimcXEn6wV15IyM4Oo46yhZeVd4/LYAb3aGv53SV83z+EkenQ/AmP8vR
haZygD3Xwweb1+wTt2+Z1xyi2iY8L4P+EVXjTJkx3fI6GOTqZ7TltcWZew3xO3sZ
5WsiEvnCpVA7LM3rZsXugENz3WTcv9yG36uiboltgoQU+SZ3GmLdzoIXKpjGcirH
NDgNV/SkG41OJ78Dt0v84lUns9GIKlC3xC5v9iUBxEth6oUX4QJmxcrcd77yDr1X
nfeOCSHIs8bsVpwEZdzRE61udRqXNx68HhtgJMhQn5CTU98w+9LH
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:27 2025 by rpki-client