Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C5iMS1DgZqpuGUCNoatD3nr-8cs.roa
File: C5iMS1DgZqpuGUCNoatD3nr-8cs.roa (raw, json)
Hash identifier: d1VqzYP36ZUieE8uYVfI5Sq5ytzv013MAuSP4SuxcgI=
Subject key identifier: 0B:98:8C:4B:50:E0:66:AA:6E:19:40:8D:A1:AB:43:DE:7A:FE:F1:CB
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1033
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C5iMS1DgZqpuGUCNoatD3nr-8cs.roa
Signing time: Thu 19 Oct 2023 03:31:42 +0000
ROA not before: Thu 19 Oct 2023 03:31:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18106
IP address blocks: 219.86.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Oct 2023 07:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Oct 19 03:31:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0B988C4B50E066AA6E19408DA1AB43DE7AFEF1CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:3c:8b:2b:9e:9a:94:11:19:3d:13:06:b5:
f0:1c:4d:76:22:d8:cd:7b:7a:de:bf:b9:68:44:79:
c0:52:45:3c:d4:82:08:27:a1:21:1a:da:1e:38:9b:
02:00:70:dc:2e:8d:0a:1b:66:d7:b0:79:aa:e2:62:
eb:62:68:85:1d:70:06:ae:ad:51:7b:19:13:17:18:
05:08:2d:39:46:20:c6:57:76:de:bd:15:23:f9:f4:
8d:da:cd:d2:95:5d:66:f0:3c:17:38:29:36:85:eb:
55:15:88:c1:b9:74:8f:2a:c7:59:df:e8:48:27:7a:
c1:fa:4b:df:ad:a4:88:3e:f7:01:c1:a2:d7:40:f1:
a8:3f:1f:e2:53:75:df:f7:a5:35:dd:6c:40:9d:13:
7a:d8:13:9c:d1:c6:6a:02:dc:95:4e:fe:d0:98:a2:
3b:b3:88:fa:94:0c:e8:09:71:20:be:bc:f5:4c:b1:
fc:88:71:6d:95:87:1f:ea:92:20:58:17:5e:03:30:
05:e1:47:23:4e:93:a3:36:2d:79:11:28:fb:29:ea:
a5:42:dc:f7:27:65:3e:ee:d5:dc:c4:cd:3c:e2:07:
28:78:ef:8d:f5:be:39:eb:95:5d:ed:54:86:b6:10:
f8:93:a0:ec:77:cb:8b:6f:77:e5:1c:49:d9:80:65:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:8C:4B:50:E0:66:AA:6E:19:40:8D:A1:AB:43:DE:7A:FE:F1:CB
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/C5iMS1DgZqpuGUCNoatD3nr-8cs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
91:49:68:a4:75:1a:80:82:84:f2:d0:90:5a:ae:9b:6f:25:cc:
95:9f:93:2b:73:22:15:b1:a8:10:f5:b3:23:ce:bd:10:b2:88:
ff:8c:fe:4e:da:e2:d4:a5:3d:c2:81:02:65:ab:a3:99:7b:59:
71:56:4b:d6:0e:28:90:10:3f:d9:cd:c5:c7:7a:c5:9b:8c:d3:
64:ed:5a:78:70:27:29:76:90:46:d4:52:a0:2a:83:43:3a:f4:
1a:b0:39:3a:06:7e:d5:46:47:20:d8:10:03:6f:bd:2b:af:ae:
1d:14:58:d5:5c:96:7e:e8:9c:e2:a5:ad:d7:cf:89:07:63:6b:
60:dd:6c:ec:8e:a3:32:3a:3d:9d:c6:37:61:0c:49:9d:53:74:
53:5e:a2:c9:72:91:ce:84:1e:e7:63:93:6f:c9:12:f6:22:8b:
97:19:97:7a:80:31:e7:4a:df:e6:61:17:60:16:e2:dd:f9:7c:
8f:40:2b:b2:91:7f:73:a9:ea:58:5b:ae:f1:9e:4d:aa:4f:cf:
ef:df:01:0f:2f:18:7e:02:2f:62:50:b1:f3:0e:61:06:25:ff:
03:5d:22:46:71:b3:7d:b3:0a:92:05:a7:c6:29:87:b9:8d:c6:
d2:e0:13:15:cb:d4:c4:9b:5a:a0:a7:32:dc:c8:54:68:1b:a2:
c8:1f:a7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org