Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa
File: OyjCcm7SKQmxUdj1-lKjmayhz44.roa (raw, json)
Hash identifier: U81BvuI2DyZ550cCRAVUj9EAoTMzzFkzMzSvZH4cMAs=
Subject key identifier: 3B:28:C2:72:6E:D2:29:09:B1:51:D8:F5:FA:52:A3:99:AC:A1:CF:8E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11CE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa
Signing time: Mon 26 Aug 2024 05:24:24 +0000
ROA not before: Mon 26 Aug 2024 05:24:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4558 (0x11ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:24 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3B28C2726ED22909B151D8F5FA52A399ACA1CF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:2b:28:a9:ee:34:47:f3:3b:cd:bb:82:5f:
02:bc:33:3f:09:1b:f4:b9:88:13:b7:0f:81:57:09:
7d:56:a1:f6:52:75:26:bb:e6:53:32:a0:e3:de:46:
85:9d:a2:f3:a6:59:3e:60:33:f3:f0:a4:1f:1e:98:
11:56:77:2f:81:a5:a8:4f:9c:61:1c:b3:ef:d0:98:
c6:48:ef:3c:3f:cc:06:23:c2:33:30:14:62:d9:24:
c1:f4:1a:a4:c7:f2:bc:db:53:62:c9:34:9c:c9:08:
ba:95:96:ae:e6:65:4b:41:c1:df:58:80:99:cc:a2:
6d:6b:ab:37:2b:06:a5:95:47:62:e9:56:08:ef:65:
08:54:ee:0d:57:90:a2:f3:2e:d4:c5:da:f7:0b:e5:
5c:d4:5d:2b:7c:54:8f:d5:72:59:0f:3e:24:9b:16:
9e:fd:e6:23:13:90:c5:e3:c6:b7:19:55:d5:c3:50:
89:07:0e:0a:2c:c9:27:16:e8:e1:ca:ee:03:af:dc:
bf:66:0b:e0:59:66:e2:d7:9f:79:8c:7a:e7:38:b2:
38:93:15:67:40:9f:de:31:4c:09:a9:c2:69:7e:85:
89:2c:29:7a:c9:60:08:ef:b7:72:90:17:50:6a:c2:
76:50:9c:e2:b7:64:d1:0c:dc:db:11:b2:51:8a:2f:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:28:C2:72:6E:D2:29:09:B1:51:D8:F5:FA:52:A3:99:AC:A1:CF:8E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:4a:29:7a:bc:e2:2e:a2:46:1c:2d:1b:eb:c5:ab:f6:0b:22:
b7:df:46:93:71:f2:dc:da:fe:fb:47:54:13:ca:40:bc:cf:33:
75:e6:b3:5e:57:36:02:1e:65:45:e3:cd:2f:34:57:7e:7a:d3:
cc:d5:29:73:a0:d1:ec:24:78:9a:34:49:f0:9f:d0:4b:03:2d:
59:b9:bc:7a:b8:fd:0d:21:d9:e5:16:f8:53:43:b9:17:9f:27:
4c:0c:35:06:ed:22:16:b0:87:b4:7f:46:fb:cc:d3:c7:b2:c2:
ff:62:a3:c5:33:e7:05:c5:2c:11:ec:ab:c9:7e:cc:34:0f:36:
a7:01:4f:eb:3b:68:e3:91:02:49:3c:cd:ff:67:8e:f3:50:7b:
45:e1:ad:ba:5c:cb:ad:12:04:76:41:0e:01:8b:6e:cf:a8:e9:
4a:37:f7:41:37:94:4e:50:be:ca:a8:a3:2b:b5:2a:0d:b2:fa:
fd:68:71:bf:cf:95:02:01:04:9a:ea:64:e0:18:6d:d0:d5:f4:
78:0b:15:0a:57:5f:f4:fe:cf:cc:97:2b:7c:86:26:37:9c:35:
95:b5:36:5e:6e:e5:86:9a:b1:b9:2e:a3:da:e9:e4:c9:a4:fb:
be:43:f7:99:1b:a6:75:fd:90:e3:83:3c:0f:43:9f:00:b6:fd:
4b:eb:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:33:03 2025 by rpki-client