Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DRSTxU8Kpu0cYDtxbTel5YPDGr8.roa
File: DRSTxU8Kpu0cYDtxbTel5YPDGr8.roa (raw, json)
Hash identifier: +aAMRNGiSxBVweWq3M6yXrIVwBFlckbf1r6wANvCXGc=
Subject key identifier: 0D:14:93:C5:4F:0A:A6:ED:1C:60:3B:71:6D:37:A5:E5:83:C3:1A:BF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1226
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DRSTxU8Kpu0cYDtxbTel5YPDGr8.roa
Signing time: Mon 26 Aug 2024 05:24:44 +0000
ROA not before: Mon 26 Aug 2024 05:24:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24163
IP address blocks: 60.198.32.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4646 (0x1226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D1493C54F0AA6ED1C603B716D37A5E583C31ABF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:b8:b6:7d:df:33:f7:ce:cd:41:5e:ec:45:
9e:3b:a0:b5:af:11:04:51:0e:22:fb:b8:fc:2a:4a:
66:f3:1b:96:53:8a:60:63:40:92:6b:20:bf:38:58:
ed:a2:58:0a:ea:8b:65:23:89:35:46:c8:78:b9:3f:
59:57:5c:f2:da:24:ee:22:22:56:95:44:ad:38:4a:
85:12:08:77:7a:11:15:ae:93:10:31:73:28:92:84:
3d:0b:d2:35:9e:09:d3:8a:78:d2:79:1c:19:45:cd:
45:62:cb:42:e3:73:0e:9f:ef:26:d0:cc:d3:21:7b:
b1:fb:1a:c3:07:cf:92:bc:c2:88:fc:8d:c5:75:a6:
cc:5c:0b:21:37:10:11:cf:7e:27:f3:b3:ae:49:5f:
ae:f1:72:7d:9c:92:3e:27:79:0f:51:4b:7a:be:45:
e3:8d:35:c5:76:b8:00:58:ba:51:74:a2:d1:5e:50:
43:83:8a:29:7b:d7:04:8c:74:41:af:69:5d:5b:e1:
49:97:61:99:f2:01:98:3c:98:0d:21:9e:d4:f7:7b:
cb:55:19:89:ec:09:53:96:d3:d1:b7:f8:2b:50:8b:
6d:60:77:e6:78:e4:e2:f4:7c:5e:96:00:5e:c6:b4:
25:b8:e9:72:91:f5:8b:02:c8:11:86:2d:b3:8f:bb:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:14:93:C5:4F:0A:A6:ED:1C:60:3B:71:6D:37:A5:E5:83:C3:1A:BF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/DRSTxU8Kpu0cYDtxbTel5YPDGr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.32.0/23
Signature Algorithm: sha256WithRSAEncryption
39:99:60:77:15:24:9b:59:a2:65:39:b9:79:0a:96:ee:05:8e:
46:96:2b:e5:c0:8b:71:3d:45:11:05:d2:30:32:57:4a:88:07:
93:f7:aa:44:09:a4:a6:b4:37:1b:5e:a9:06:e1:8d:d4:7c:6d:
bd:c3:7f:7a:53:9d:83:39:22:46:a1:af:26:d8:00:00:3d:d9:
73:b9:bd:89:7e:e1:69:a6:c9:55:6a:5c:5b:c8:4c:26:8c:2e:
64:14:84:41:7c:50:6b:93:cc:31:17:bb:d0:fd:a8:6f:51:05:
88:85:10:6d:3d:94:82:68:76:ec:d2:35:0f:80:1c:3b:54:2a:
9d:30:f9:a3:43:50:f7:d3:20:20:ff:60:c3:0b:2c:e7:8f:5d:
09:13:7e:75:33:6b:e3:b4:fd:81:6e:09:88:d5:0b:33:e6:7c:
81:26:cd:ae:fe:d5:f0:1f:87:9b:d2:cc:3b:65:c2:15:b7:16:
e5:11:ce:38:1c:d1:36:7b:3c:49:59:1e:f6:72:0f:c4:0e:72:
06:53:5d:ee:43:b7:78:0f:71:c9:fd:e8:a6:42:41:d4:f4:05:
cc:e4:1e:08:ac:aa:4a:f2:87:cd:1d:ce:85:31:59:07:04:9f:
e3:5f:e8:2b:82:28:5e:44:19:1b:90:a5:1d:22:a9:fa:0a:eb:
e4:95:e7:df
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEMTQ5M0M1NEYwQUE2
RUQxQzYwM0I3MTZEMzdBNUU1ODNDMzFBQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZS7i2fd8z987NQV7sRZ47oLWvEQRRDiL7uPwqSmbzG5ZTimBj
QJJrIL84WO2iWArqi2UjiTVGyHi5P1lXXPLaJO4iIlaVRK04SoUSCHd6ERWukxAx
cyiShD0L0jWeCdOKeNJ5HBlFzUViy0Ljcw6f7ybQzNMhe7H7GsMHz5K8woj8jcV1
psxcCyE3EBHPfifzs65JX67xcn2ckj4neQ9RS3q+ReONNcV2uABYulF0otFeUEOD
iil71wSMdEGvaV1b4UmXYZnyAZg8mA0hntT3e8tVGYnsCVOW09G3+CtQi21gd+Z4
5OL0fF6WAF7GtCW46XKR9YsCyBGGLbOPu089AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUDRSTxU8Kpu0cYDtxbTel5YPDGr8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRFJTVHhVOEtwdTBjWUR0
eGJUZWw1WVBER3I4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ATzGIDANBgkqhkiG9w0BAQsFAAOCAQEAOZlgdxUkm1miZTm5eQqW7gWORpYr5cCL
cT1FEQXSMDJXSogHk/eqRAmkprQ3G16pBuGN1HxtvcN/elOdgzkiRqGvJtgAAD3Z
c7m9iX7haabJVWpcW8hMJowuZBSEQXxQa5PMMRe70P2ob1EFiIUQbT2Ugmh27NI1
D4AcO1QqnTD5o0NQ99MgIP9gwwss549dCRN+dTNr47T9gW4JiNULM+Z8gSbNrv7V
8B+Hm9LMO2XCFbcW5RHOOBzRNns8SVke9nIPxA5yBlNd7kO3eA9xyf3opkJB1PQF
zOQeCKyqSvKHzR3OhTFZBwSf41/oK4IoXkQZG5ClHSKp+grr5JXn3w==
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:56:37 2025 by rpki-client