Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GIJS8XcSSAh-RQLy1nbltFrH5R8.roa
File: GIJS8XcSSAh-RQLy1nbltFrH5R8.roa (raw, json)
Hash identifier: GurKT4ZmQnXQl/IyFGPNV7ZeKJ5Hww6x+2akD5HgBFQ=
Subject key identifier: 18:82:52:F1:77:12:48:08:7E:45:02:F2:D6:76:E5:B4:5A:C7:E5:1F
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GIJS8XcSSAh-RQLy1nbltFrH5R8.roa
Signing time: Thu 15 Sep 2022 02:47:22 +0000
ROA not before: Thu 15 Sep 2022 02:47:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 49.214.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=188252F1771248087E4502F2D676E5B45AC7E51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:21:bc:e3:8a:9e:b1:57:86:fa:e4:72:ac:
3c:93:7a:0f:59:69:9d:a2:dc:b5:a7:8d:7f:7d:48:
94:7c:cb:a8:57:d1:3b:66:b4:2b:df:e7:e7:a8:f2:
de:97:84:d8:ac:59:5f:fd:f9:db:89:10:e5:56:2a:
5b:de:a7:6f:dd:e5:54:4f:1e:21:a4:72:48:d7:fa:
c0:f1:1b:1f:4b:9b:93:20:c2:5e:13:9e:c1:b5:9a:
98:c0:5e:95:9e:c9:18:c8:db:19:ed:0c:c8:79:82:
e5:bd:60:30:af:95:d6:80:67:cf:72:ec:2c:bc:8c:
9e:d3:9f:b5:d9:74:99:95:82:0f:19:01:1c:31:92:
67:5d:23:58:ef:bf:14:e7:6c:19:78:7b:60:a5:ba:
4e:42:7c:75:9e:1a:30:7f:7e:08:5e:b2:d7:05:b4:
af:1b:a6:ea:1c:2d:85:04:52:58:ed:54:04:67:74:
68:e9:a0:4f:3e:bd:27:37:8d:e9:44:3e:b7:2d:f8:
e4:5b:d5:b2:4c:45:93:38:87:d2:c0:3f:8b:4e:bd:
fd:54:3e:2a:cf:9a:65:50:34:91:91:4d:a7:de:9a:
b8:01:bb:7f:6c:94:c5:24:ba:bb:ca:1b:25:fa:13:
9f:43:85:ca:80:42:e9:7f:e1:45:30:8e:a1:d0:e9:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:52:F1:77:12:48:08:7E:45:02:F2:D6:76:E5:B4:5A:C7:E5:1F
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GIJS8XcSSAh-RQLy1nbltFrH5R8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
65:65:1e:a1:4d:cb:df:5a:b5:ec:68:f0:10:dd:70:51:45:7d:
27:ee:b7:50:94:74:54:b1:f9:8f:cd:de:60:fa:63:23:26:83:
4d:06:71:3e:3e:32:f2:f0:4b:9e:79:4a:1d:df:ae:f9:ae:a2:
ec:bd:4b:6c:d1:97:5b:78:8c:f2:43:cf:13:85:bf:84:be:ac:
b7:f9:27:6f:e2:92:a9:84:d9:9e:c5:26:54:66:4c:1c:bd:b4:
bb:f4:66:78:fb:bf:1a:a5:34:7b:9e:51:ed:39:bd:f3:69:e8:
da:04:b6:5f:7e:51:72:a0:20:25:ce:47:68:2d:d7:a3:02:ec:
61:c9:47:23:1a:ff:a0:b2:3a:06:73:c3:70:da:16:0d:b5:e3:
d3:21:43:5a:17:06:de:41:23:46:c5:01:bd:26:11:86:b0:80:
79:32:c6:19:f8:28:35:e4:a1:49:13:ce:82:0b:10:02:35:95:
63:75:61:0e:ea:7c:45:37:a9:98:0c:d0:fe:2d:81:20:4d:58:
c8:b6:bf:95:24:7d:cd:43:34:9b:cc:25:e6:0b:62:0a:2f:1c:
28:34:55:d5:5e:a1:86:71:ea:d4:5a:0a:42:a8:f4:34:5b:75:
15:0e:79:22:f3:ee:df:fc:8e:70:ed:54:00:15:17:94:ea:57:
2f:72:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:49 2023 by rpki-client on console-ams.rpki-client.org