Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
File: 8Ocv37KKNqWxAID1gD21rSxjoZs.roa (raw, json)
Hash identifier: +Apyr+n0z5S7GZUifryl3x4fuLXVHQLiON/bSmd3kjM=
Subject key identifier: F0:E7:2F:DF:B2:8A:36:A5:B1:00:80:F5:80:3D:B5:AD:2C:63:A1:9B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
Signing time: Thu 15 Sep 2022 02:47:34 +0000
ROA not before: Thu 15 Sep 2022 02:47:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.63.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0E72FDFB28A36A5B10080F5803DB5AD2C63A19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:59:57:57:2d:84:f1:2c:31:65:92:b0:67:
5c:3b:7a:b7:9d:1f:b4:c0:70:f3:61:3c:19:15:43:
7d:d8:42:94:27:80:07:d9:0f:06:df:80:c6:99:15:
31:5a:a8:2c:3b:ae:0e:20:f2:ad:fc:33:e6:51:42:
72:6f:86:a6:70:c0:c9:2f:ae:46:84:9b:ca:4d:4d:
ed:42:77:4c:8a:24:36:df:fe:61:d1:2f:3c:50:d4:
2f:7c:cf:06:4c:50:f7:52:33:07:d1:72:57:8e:b9:
fc:25:2e:cc:ce:c8:f6:fb:61:4c:a0:58:2c:e1:b0:
15:de:0a:a6:6b:f0:48:2f:24:d9:3d:9a:01:b7:8f:
e7:aa:b5:4d:04:00:93:c5:53:0f:04:09:97:13:8e:
f7:6f:0a:f9:67:49:8a:58:d5:a2:47:c7:62:49:95:
94:d0:ce:57:94:85:7c:be:1c:70:12:8d:cd:0f:d9:
80:25:ba:6b:62:69:1a:f4:cf:b4:2f:6a:2d:56:b0:
44:14:ec:11:90:40:61:9f:12:ae:70:c3:18:65:5c:
3a:ef:32:53:2e:82:95:f5:ce:a1:36:b5:fd:e4:a4:
3d:2b:14:14:cb:03:40:30:b5:37:19:1b:fd:50:94:
ca:81:00:ca:f3:f4:26:35:4b:ad:9d:d9:e6:82:b4:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:2F:DF:B2:8A:36:A5:B1:00:80:F5:80:3D:B5:AD:2C:63:A1:9B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8Ocv37KKNqWxAID1gD21rSxjoZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.160.0/19
Signature Algorithm: sha256WithRSAEncryption
69:72:66:fe:01:63:e5:bb:d5:84:3a:8f:34:47:43:32:29:8e:
28:df:00:58:09:79:e6:8c:7b:62:b7:00:09:e0:e1:0d:65:ff:
7f:54:07:56:43:c4:e9:9f:91:9f:31:66:e8:5c:c6:52:9e:70:
3e:df:cd:ea:b4:77:bb:99:34:4f:c5:4c:75:f5:60:2b:8e:2d:
bd:b6:bd:55:50:0d:48:2c:4c:5b:08:ee:33:63:ad:38:ac:ed:
b4:7c:79:c1:62:e5:1f:16:8e:c7:8c:80:4e:b1:57:28:46:3e:
9e:3c:bc:a2:b5:ae:69:d2:c3:d6:75:44:85:ec:0c:31:30:44:
22:b7:f3:f5:e8:0f:f8:f4:a1:64:6d:4f:83:92:97:39:6c:05:
b8:ee:ca:6d:ea:e3:24:7c:a9:a8:00:42:76:a8:77:64:e0:9f:
38:db:a9:5a:30:6a:60:11:d9:e0:55:ea:3c:57:e8:c1:dc:d4:
e2:58:54:c1:f0:c1:45:f6:e5:fc:97:c4:45:6a:ab:ad:92:f8:
34:f4:7a:23:76:25:df:65:b7:36:89:f5:4d:f2:08:7f:7e:40:
bf:9f:f9:62:83:a5:49:38:a4:cb:0d:6f:c5:76:b1:99:0f:61:
57:f8:a1:ce:2d:52:81:66:ca:db:f9:6b:ee:65:b2:35:2f:25:
fa:07:e3:f5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYwRTcyRkRGQjI4QTM2
QTVCMTAwODBGNTgwM0RCNUFEMkM2M0ExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2e1lXVy2E8SwxZZKwZ1w7eredH7TAcPNhPBkVQ33YQpQngAfZ
DwbfgMaZFTFaqCw7rg4g8q38M+ZRQnJvhqZwwMkvrkaEm8pNTe1Cd0yKJDbf/mHR
LzxQ1C98zwZMUPdSMwfRcleOufwlLszOyPb7YUygWCzhsBXeCqZr8EgvJNk9mgG3
j+eqtU0EAJPFUw8ECZcTjvdvCvlnSYpY1aJHx2JJlZTQzleUhXy+HHASjc0P2YAl
umtiaRr0z7Qvai1WsEQU7BGQQGGfEq5wwxhlXDrvMlMugpX1zqE2tf3kpD0rFBTL
A0AwtTcZG/1QlMqBAMrz9CY1S62d2eaCtIGPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8Ocv37KKNqWxAID1gD21rSxjoZswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvOE9jdjM3S0tOcVd4QUlE
MWdEMjFyU3hqb1pzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdI/oDANBgkqhkiG9w0BAQsFAAOCAQEAaXJm/gFj5bvVhDqPNEdDMimOKN8AWAl5
5ox7YrcACeDhDWX/f1QHVkPE6Z+RnzFm6FzGUp5wPt/N6rR3u5k0T8VMdfVgK44t
vba9VVANSCxMWwjuM2OtOKzttHx5wWLlHxaOx4yATrFXKEY+njy8orWuadLD1nVE
hewMMTBEIrfz9egP+PShZG1Pg5KXOWwFuO7KberjJHypqABCdqh3ZOCfONupWjBq
YBHZ4FXqPFfowdzU4lhUwfDBRfbl/JfERWqrrZL4NPR6I3Yl32W3Non1TfIIf35A
v5/5YoOlSTikyw1vxXaxmQ9hV/ihzi1SgWbK2/lr7mWyNS8l+gfj9Q==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:49 2023 by rpki-client on console-ams.rpki-client.org