Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KgQbuDOWiOX5fw8o6ayzt3wfn8g.roa
File: KgQbuDOWiOX5fw8o6ayzt3wfn8g.roa (raw, json)
Hash identifier: IscK6KRDq3XguLsxrhzR1cVllV9+DE4IeJB8lXgh3Dw=
Subject key identifier: 2A:04:1B:B8:33:96:88:E5:F9:7F:0F:28:E9:AC:B3:B7:7C:1F:9F:C8
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KgQbuDOWiOX5fw8o6ayzt3wfn8g.roa
Signing time: Thu 15 Sep 2022 02:46:53 +0000
ROA not before: Thu 15 Sep 2022 02:46:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24158
IP address blocks: 203.105.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A041BB8339688E5F97F0F28E9ACB3B77C1F9FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:30:07:cb:57:7c:1d:59:47:ce:46:a1:3b:
c8:fe:24:79:93:40:44:fc:6a:90:22:be:30:39:25:
52:81:19:d6:47:38:f2:6d:03:61:3c:f2:2d:6f:1b:
6c:0c:78:ba:7c:ca:13:76:9d:0e:e5:2e:aa:77:82:
54:71:7b:a7:78:40:f1:f8:c3:b7:cd:a5:e5:0e:0f:
58:af:ab:19:7d:e6:c3:2d:db:05:53:15:71:5c:6e:
44:55:78:28:69:f5:ea:3c:16:a2:7f:92:ff:55:d7:
4a:bd:42:2a:37:99:64:82:2e:87:de:0d:3f:28:98:
87:3f:cf:fd:fd:8d:76:0b:7f:3a:39:b8:29:eb:0c:
e6:d8:b1:45:3b:31:b7:e4:b8:54:9f:45:3a:83:92:
1f:90:d4:8b:75:26:5a:f1:54:d3:49:98:1e:94:5b:
ef:c0:ca:8d:a4:b8:a3:a7:98:fb:95:d4:31:89:c8:
b5:95:9e:ef:a7:2f:4a:fe:99:29:3d:22:b0:96:3b:
5a:5f:91:57:b8:4f:2b:8a:e5:50:81:5e:1f:d2:98:
57:6d:ca:94:63:10:41:33:94:d7:c7:a5:8b:b9:72:
f6:a0:d7:d0:b3:67:57:fc:9c:7c:de:1b:e8:9c:2a:
60:7d:b3:cc:3e:2a:7f:89:6e:c1:17:86:8a:fc:fb:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:04:1B:B8:33:96:88:E5:F9:7F:0F:28:E9:AC:B3:B7:7C:1F:9F:C8
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KgQbuDOWiOX5fw8o6ayzt3wfn8g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.239.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b9:74:9e:48:8f:46:12:20:1a:1b:87:a7:0a:30:6d:6c:ed:
67:88:5f:7f:39:ad:de:87:7a:f0:16:7f:44:3d:93:7b:91:4d:
35:60:85:2a:a3:1b:c9:22:e8:12:21:8d:32:fd:09:94:11:e2:
83:aa:a0:62:b0:91:c7:85:d2:b0:ca:cd:96:55:46:cd:74:7d:
e6:5a:50:b8:37:66:a0:c1:61:6d:3a:ee:7d:30:a4:45:19:70:
b8:6d:79:73:9c:cb:9e:83:b3:dc:3a:7f:ea:c2:b7:75:fb:89:
1a:a4:a3:72:c5:4f:9b:e2:49:d2:1d:c5:9e:6b:1a:75:0d:dc:
b0:ff:91:31:48:e4:94:3c:9a:bf:7a:31:0b:7f:ec:3e:40:d8:
e9:b0:e0:54:59:26:60:0b:b6:60:c7:44:50:5a:3b:7f:f1:57:
3c:cf:f7:8a:6c:ae:31:62:65:d6:7b:62:55:05:ed:fc:e4:10:
04:52:0f:e5:74:2c:d2:12:ce:ed:fe:1c:85:61:6e:2b:ea:b2:
ff:db:6c:a7:52:0b:72:23:ff:e2:63:fc:9c:c0:ef:31:8c:0e:
32:9b:0f:91:ac:da:1e:80:46:c3:95:82:1e:59:5a:ac:06:60:
be:4f:c6:00:7d:49:be:2a:fd:e8:f6:2f:6c:46:5b:5d:8d:81:
29:2a:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:49 2023 by rpki-client on console-ams.rpki-client.org