Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I01Rz_hUqxgo7oSp4S6Rcf1gG9g.roa
File: I01Rz_hUqxgo7oSp4S6Rcf1gG9g.roa (raw, json)
Hash identifier: JkUqPEcsLTVbUeEWY4u/aaSRWUyjL7YEF8KyOYmHfc0=
Subject key identifier: 23:4D:51:CF:F8:54:AB:18:28:EE:84:A9:E1:2E:91:71:FD:60:1B:D8
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11CD
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I01Rz_hUqxgo7oSp4S6Rcf1gG9g.roa
Signing time: Mon 26 Aug 2024 05:24:23 +0000
ROA not before: Mon 26 Aug 2024 05:24:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.67.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4557 (0x11cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=234D51CFF854AB1828EE84A9E12E9171FD601BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:33:2f:a1:53:ec:e9:e4:d2:d9:61:99:d8:
7e:d7:58:ed:16:2f:04:de:17:f0:58:9e:d8:e7:23:
df:5d:20:5f:b3:52:4c:c0:a0:38:0d:df:e8:91:71:
24:fc:eb:a1:fb:dd:8c:99:cf:83:96:f9:8e:4a:9e:
3f:70:1c:63:eb:2f:f2:9f:6a:39:aa:c8:09:c3:32:
3b:6b:78:80:88:e1:20:76:c2:f3:3d:01:a3:36:74:
3d:74:6d:f6:fa:e1:c2:08:50:2e:ae:0c:5b:1a:68:
d7:3a:0b:a5:22:c7:ef:89:99:ed:7b:9a:d9:81:9c:
b5:53:99:83:f1:ee:f3:58:d9:c1:19:56:a9:cf:df:
3e:58:8c:4d:0f:10:f1:e8:d0:77:9f:26:6c:00:3d:
f4:80:5b:0e:51:e9:fe:98:98:77:88:0e:0b:12:b9:
45:f6:a0:c7:87:f5:1b:96:8b:4b:32:34:15:54:bc:
ac:27:18:fa:d9:3f:48:2e:59:e8:eb:0f:89:0a:2a:
c4:47:da:ca:6f:90:49:c2:b6:d6:c2:83:0e:d1:96:
b2:b6:94:f0:30:2f:14:39:f7:40:06:f6:6c:20:0e:
1f:40:61:72:f5:98:e3:2f:84:0e:00:f7:24:4f:fd:
ff:fb:12:a6:4f:5c:5d:27:e8:4c:df:04:23:f9:5f:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:51:CF:F8:54:AB:18:28:EE:84:A9:E1:2E:91:71:FD:60:1B:D8
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I01Rz_hUqxgo7oSp4S6Rcf1gG9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.208.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:a0:bd:78:1a:30:31:44:e4:c5:29:9b:a5:e2:3d:b5:c3:8d:
59:7a:a1:cd:b6:df:3d:7d:07:b8:be:e2:b6:64:9d:f6:33:5e:
51:7b:7d:56:4f:32:91:8c:e5:ab:ff:ed:eb:b2:e9:67:9b:45:
86:37:69:88:1a:f6:12:99:32:65:de:60:e2:3c:f7:b2:99:35:
a4:df:56:24:86:fe:a4:67:3d:c4:77:ac:94:e5:6d:ee:ef:ce:
23:2c:a0:16:e6:66:5a:4f:8d:14:cc:14:6f:0b:38:22:d7:2d:
31:25:26:f6:35:44:5e:80:81:fb:88:3c:c8:d1:d3:54:27:67:
8e:3a:4b:a9:04:55:4c:cd:e1:e0:1d:47:ac:23:66:b2:ad:59:
88:94:61:00:97:1b:ff:f3:c1:04:88:35:47:55:48:0a:c1:09:
ba:29:7b:ae:05:f8:6c:5d:b8:8f:e3:f5:00:8c:a9:61:8f:87:
a7:ba:d2:01:b1:79:34:34:68:17:28:a5:23:ac:f4:2e:8a:6d:
c7:f1:f2:b0:4a:4f:79:d5:6f:e1:2a:a1:61:a5:4e:5b:4c:34:
c8:70:f4:e5:c8:93:74:4f:01:c0:de:ae:1b:d2:ac:aa:89:0e:
26:12:50:b9:bb:71:57:d9:d3:da:e0:1a:76:f1:4f:fb:06:28:
88:fa:f2:3a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEc0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzNEQ1MUNGRjg1NEFC
MTgyOEVFODRBOUUxMkU5MTcxRkQ2MDFCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6cTMvoVPs6eTS2WGZ2H7XWO0WLwTeF/BYntjnI99dIF+zUkzA
oDgN3+iRcST866H73YyZz4OW+Y5Knj9wHGPrL/KfajmqyAnDMjtreICI4SB2wvM9
AaM2dD10bfb64cIIUC6uDFsaaNc6C6Uix++Jme17mtmBnLVTmYPx7vNY2cEZVqnP
3z5YjE0PEPHo0HefJmwAPfSAWw5R6f6YmHeIDgsSuUX2oMeH9RuWi0syNBVUvKwn
GPrZP0guWejrD4kKKsRH2spvkEnCttbCgw7RlrK2lPAwLxQ590AG9mwgDh9AYXL1
mOMvhA4A9yRP/f/7EqZPXF0n6EzfBCP5X9tLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUI01Rz/hUqxgo7oSp4S6Rcf1gG9gwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSTAxUnpfaFVxeGdvN29T
cDRTNlJjZjFnRzlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BNJD0DANBgkqhkiG9w0BAQsFAAOCAQEAO6C9eBowMUTkxSmbpeI9tcONWXqhzbbf
PX0HuL7itmSd9jNeUXt9Vk8ykYzlq//t67LpZ5tFhjdpiBr2EpkyZd5g4jz3spk1
pN9WJIb+pGc9xHeslOVt7u/OIyygFuZmWk+NFMwUbws4ItctMSUm9jVEXoCB+4g8
yNHTVCdnjjpLqQRVTM3h4B1HrCNmsq1ZiJRhAJcb//PBBIg1R1VICsEJuil7rgX4
bF24j+P1AIypYY+Hp7rSAbF5NDRoFyilI6z0Loptx/HysEpPedVv4SqhYaVOW0w0
yHD05ciTdE8BwN6uG9KsqokOJhJQubtxV9nT2uAadvFP+wYoiPryOg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:54 2025 by rpki-client