Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQm03pJisZoMP8dAaoaqV-h8SMQ.roa
File: QQm03pJisZoMP8dAaoaqV-h8SMQ.roa (raw, json)
Hash identifier: Jpa4XFYb7X7EY4KWnR5QNogQ/e1xCjqChlwN8NbCD50=
Subject key identifier: 41:09:B4:DE:92:62:B1:9A:0C:3F:C7:40:6A:86:AA:57:E8:7C:48:C4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQm03pJisZoMP8dAaoaqV-h8SMQ.roa
Signing time: Thu 15 Sep 2022 02:47:24 +0000
ROA not before: Thu 15 Sep 2022 02:47:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17213
IP address blocks: 60.198.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4109B4DE9262B19A0C3FC7406A86AA57E87C48C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:60:ca:62:65:b5:47:22:f5:32:df:ee:7a:
b0:ed:86:24:12:7e:43:a7:b5:f9:64:68:c2:67:f8:
68:c7:0a:be:65:eb:c2:e6:49:09:40:fb:e0:67:a3:
ef:85:05:de:6c:b4:0a:61:d2:cb:9e:96:80:93:86:
1d:15:aa:17:fc:f4:5c:af:13:97:0e:72:52:16:86:
83:70:c0:60:9e:bf:ca:24:3e:a2:ff:05:dc:a6:ed:
dc:85:49:8a:e0:63:78:30:b6:60:23:5a:ac:a4:d3:
6b:db:09:4e:b1:de:e0:bb:f9:b8:e6:eb:5a:7b:3c:
55:f0:a3:8f:cd:5b:6d:22:03:a6:b3:cc:3b:f0:7d:
06:9e:da:48:b5:9f:f0:dc:e3:c4:e4:f0:65:02:b7:
a2:6f:9b:55:81:4a:21:3e:c2:fe:db:8e:33:3f:82:
bd:d6:7a:2d:5b:6f:f0:6f:3a:ca:92:18:2c:15:01:
db:1d:12:47:bb:98:48:fd:7c:59:cf:b2:c0:f1:25:
71:16:9a:8b:8b:d0:41:ca:c6:39:ee:94:8a:21:a7:
50:5c:de:33:cb:8c:5f:f1:78:3e:12:71:68:6a:f9:
8b:b1:52:cf:3e:84:38:6d:21:1d:0b:af:c1:cc:eb:
43:46:4d:d6:ec:3a:b8:d3:d8:77:f5:13:b1:18:b5:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:B4:DE:92:62:B1:9A:0C:3F:C7:40:6A:86:AA:57:E8:7C:48:C4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QQm03pJisZoMP8dAaoaqV-h8SMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.159.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f3:77:f4:58:3c:81:3f:84:e3:64:0e:90:86:40:68:2e:72:
0a:a9:02:0f:9f:f8:d4:25:76:45:55:1b:0f:1a:99:17:0c:0f:
ae:cf:1f:b4:18:0f:84:1c:16:b6:f6:a0:30:79:4b:1e:2a:b4:
e6:23:c5:79:d7:dc:c4:e7:30:b3:a0:a1:fd:13:37:07:8a:ed:
5e:e9:c7:28:c3:3b:e4:2c:b4:6c:91:9a:6b:5d:ae:5b:d4:01:
76:18:2e:fa:81:de:d7:dc:a7:48:b9:b8:28:61:82:cd:ef:a1:
bd:f5:2f:14:63:7b:2c:5b:7a:42:8f:9d:30:cd:bc:46:05:07:
8f:c6:4f:0e:cd:cf:3d:14:82:57:02:58:44:4b:d5:91:11:12:
ca:a5:45:2f:91:6d:28:70:e0:53:4e:7a:7f:a2:b6:01:63:4c:
ef:c1:db:24:56:99:82:f8:47:d9:e7:2d:49:71:3f:26:6a:56:
a3:26:93:f5:24:d9:62:92:2a:51:93:5a:ac:0c:e3:f6:d2:b6:
e1:46:bf:aa:64:c0:d6:99:da:d2:57:97:ba:26:17:d2:b0:f2:
fc:7b:f5:8e:0c:0a:34:18:81:05:4b:c0:68:7e:71:58:df:6b:
57:26:27:3a:da:b2:8a:59:70:d8:93:d8:4c:55:a4:a4:85:22:
26:fd:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:49 2023 by rpki-client on console-ams.rpki-client.org