Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa
File: PKohzl-5SRMt7CARnmTmjb7zyZY.roa (raw, json)
Hash identifier: pWjiG6lvQ44jKvFT89miKYwX+zg4PmGht4bhYPXGOys=
Subject key identifier: 3C:AA:21:CE:5F:B9:49:13:2D:EC:20:11:9E:64:E6:8D:BE:F3:C9:96
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 122C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa
Signing time: Mon 26 Aug 2024 05:24:45 +0000
ROA not before: Mon 26 Aug 2024 05:24:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4652 (0x122c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3CAA21CE5FB949132DEC20119E64E68DBEF3C996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:f5:86:95:ff:e9:02:91:54:4d:ee:57:9c:
bc:c1:d4:ce:b9:29:dd:8f:ff:a5:8a:c4:79:57:3c:
6a:98:a9:2a:43:17:da:31:26:f7:09:11:c5:e5:f7:
18:44:db:c1:68:f3:61:e4:a3:a3:04:10:46:2f:d8:
e3:6f:5e:7e:2b:7d:82:45:2a:6b:65:66:5c:87:9f:
09:47:a1:31:51:ae:00:f6:e7:67:33:d5:97:13:b5:
a4:0a:89:0d:ba:fb:f4:e2:0d:d3:e4:13:9a:21:65:
73:cc:f8:6d:1e:ee:b3:86:b8:df:59:26:67:9a:3a:
ae:a5:96:ce:d0:2d:64:77:e0:46:ba:00:94:09:db:
f6:e6:dc:38:a0:8e:e1:49:43:21:05:c0:07:55:a4:
4f:d3:16:14:87:e2:3c:ed:45:33:37:55:e0:cb:c5:
05:22:06:67:30:54:64:d5:9d:fe:09:1b:df:cf:90:
6c:3a:ea:25:a6:53:a0:d6:a2:d8:46:38:ad:cc:b8:
22:ab:e9:d5:ee:e6:f1:e2:26:73:ba:3f:a9:26:42:
67:ea:35:b7:6e:cd:83:32:6e:97:d1:98:79:af:79:
15:84:46:16:72:76:b3:dd:5f:4a:20:0d:12:8c:dc:
f6:38:2c:a6:ef:70:f6:5c:2d:d4:36:b4:39:d0:38:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AA:21:CE:5F:B9:49:13:2D:EC:20:11:9E:64:E6:8D:BE:F3:C9:96
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.52.0/24
Signature Algorithm: sha256WithRSAEncryption
93:64:a1:fd:07:5c:16:b7:f6:e6:5b:d0:50:ae:06:08:33:7a:
42:78:04:f9:c2:ab:5a:34:25:db:90:53:d7:1c:bf:f9:5a:d8:
1a:76:a6:d4:b6:d2:62:15:07:65:3d:a6:0c:ea:dd:2d:ef:f0:
12:92:2d:2b:e4:37:7b:f5:ed:09:eb:ba:d5:be:ee:c4:65:1c:
89:3a:84:21:3c:e6:15:83:a5:74:2e:33:39:09:1f:07:56:3e:
0a:e9:b8:5c:7b:96:21:ef:ea:08:ca:eb:a0:a1:4f:09:40:66:
d3:8b:ae:a9:96:75:ac:0e:e4:7d:67:79:3e:1c:db:12:8c:85:
3e:f7:e3:ca:d0:aa:b0:53:71:e0:66:06:1e:92:19:d3:9d:82:
b3:be:02:4f:31:15:97:f5:d4:6b:23:b1:3b:42:e8:56:5b:6f:
00:ff:d9:2c:41:d0:b5:aa:2a:c6:4a:e3:38:66:76:15:2e:6a:
97:b6:f0:74:97:f8:1e:d2:d6:1c:ac:bd:f8:d4:56:f8:7f:a3:
53:c7:3b:a0:c4:3b:dd:df:d3:72:35:d9:5c:cc:b0:6d:84:6f:
73:f7:16:91:b5:29:44:a2:d3:2a:a3:bf:28:60:5e:9c:fc:89:
e1:de:2f:cc:f3:29:bf:b4:fa:52:5c:d6:64:90:ce:43:ea:89:
4e:72:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:35:32 2025 by rpki-client