Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JWmLYzjrnNvATThzMoVwvSgJDBg.roa
File: JWmLYzjrnNvATThzMoVwvSgJDBg.roa (raw, json)
Hash identifier: YI4zwdbpe4nCsWbICA0A/Mn36E9YTpZ1Up3RyCj5CDs=
Subject key identifier: 25:69:8B:63:38:EB:9C:DB:C0:4D:38:73:32:85:70:BD:28:09:0C:18
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JWmLYzjrnNvATThzMoVwvSgJDBg.roa
Signing time: Thu 15 Sep 2022 02:47:10 +0000
ROA not before: Thu 15 Sep 2022 02:47:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 2001:4540::/27 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=25698B6338EB9CDBC04D3873328570BD28090C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:44:6a:69:66:7f:b9:38:31:c7:93:25:e6:
37:94:f8:a4:c8:ee:24:92:ea:7f:b2:ec:f8:82:df:
bd:9c:f3:90:d3:ef:48:d2:01:90:d3:8c:dd:cb:cc:
f4:4c:ee:90:a5:a5:0f:d2:76:28:ab:7e:27:bf:80:
2e:98:02:56:c7:f5:d0:e3:27:e0:fa:9d:77:33:11:
14:5b:fa:a7:12:b1:d0:7a:67:7a:b3:4d:d3:01:d8:
81:e9:1a:2e:43:55:04:4d:b1:28:d8:14:17:49:42:
4d:7d:af:4a:fb:fd:a1:64:10:1c:46:88:48:a0:25:
7e:f6:5c:99:c0:fb:82:40:f1:dc:7b:2f:d6:cb:91:
35:b7:ad:c5:c2:9b:e5:d5:93:0b:b9:2f:35:a0:3a:
27:d0:8f:fb:26:16:03:94:86:c0:a8:f0:f6:74:84:
16:65:69:f1:4b:b8:09:02:00:54:4b:7a:53:97:1d:
70:0b:cd:f5:49:25:c0:29:e6:32:c3:95:42:8b:23:
53:ca:ec:11:2b:a2:3a:04:64:60:89:e7:51:fe:d9:
84:74:06:07:e6:01:3b:53:3f:e4:f9:44:7d:0f:42:
25:33:bf:ee:ce:7b:38:28:44:c5:b2:7b:74:9f:4c:
47:4e:c7:3b:17:c9:a1:7a:5a:2c:89:b9:7c:c9:66:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:8B:63:38:EB:9C:DB:C0:4D:38:73:32:85:70:BD:28:09:0C:18
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JWmLYzjrnNvATThzMoVwvSgJDBg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4540::/27
Signature Algorithm: sha256WithRSAEncryption
3a:79:3a:f8:8e:ec:99:c4:30:ed:58:e0:b5:f6:fe:61:62:5e:
45:58:39:38:ce:5c:a6:aa:6b:38:d6:e7:98:80:6f:ee:08:1a:
82:5b:3f:ad:ce:7f:6b:8f:de:b0:19:38:3a:3e:7a:63:90:78:
68:0f:cf:59:12:94:a5:4b:1e:06:d4:86:de:ed:ac:9d:2e:c0:
bc:68:6f:68:b4:d8:6d:d5:99:82:98:58:f6:c3:70:a9:af:dd:
9c:d0:d4:2c:bf:47:03:c9:d1:6d:73:3b:4f:ac:0b:31:d2:53:
7e:80:ab:8f:0a:4f:fb:0e:7a:25:a7:bf:d2:63:a2:fa:f1:cb:
fa:ff:32:e7:b1:2e:5b:af:87:3d:d2:46:9c:36:93:78:20:fc:
ae:b4:4f:63:49:c8:db:31:62:90:d0:fa:19:87:61:45:60:6a:
d0:c7:3a:75:14:eb:8c:56:6d:9a:a7:a5:c0:4e:62:16:18:3b:
54:29:75:80:35:33:fc:c4:13:39:86:e3:c4:f6:1c:b0:13:95:
4a:68:22:5a:2e:2d:92:a2:e0:55:3a:65:35:57:b2:22:11:62:
ae:ca:89:78:aa:d7:29:2f:f6:74:eb:65:9b:a4:4c:75:b6:b5:
d5:7a:ca:12:ce:21:48:3a:4f:a1:d9:8a:83:d5:bd:00:dc:d7:
6a:19:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org