Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R-AX1BiDroHwnRm2QeHh2Dq6fa8.roa
File: R-AX1BiDroHwnRm2QeHh2Dq6fa8.roa (raw, json)
Hash identifier: C/mNf1ra7oiF/CUNZbqREH5J6HYRs6Gc0xGjrNS3/Ys=
Subject key identifier: 47:E0:17:D4:18:83:AE:81:F0:9D:19:B6:41:E1:E1:D8:3A:BA:7D:AF
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R-AX1BiDroHwnRm2QeHh2Dq6fa8.roa
Signing time: Thu 15 Sep 2022 02:47:09 +0000
ROA not before: Thu 15 Sep 2022 02:47:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 60.198.48.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=47E017D41883AE81F09D19B641E1E1D83ABA7DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:03:d8:0a:50:d7:f3:e9:23:5b:3e:69:67:
45:e5:59:29:f8:2d:e3:64:48:c3:2f:d5:38:e9:45:
ae:21:3a:09:a0:f3:17:99:fe:e9:24:1e:05:6e:a4:
06:33:14:6d:c0:1c:c2:cb:74:48:5b:e9:2c:87:75:
52:4b:e2:dd:87:f7:09:69:80:54:a5:cf:37:d9:6a:
59:e9:6d:ea:a8:63:92:40:35:a2:65:76:df:d7:8f:
48:21:4e:f6:f3:5b:66:28:6e:b2:9e:36:8d:23:6e:
51:7a:c0:0e:53:56:7e:77:e5:47:19:5c:15:29:18:
f2:0b:07:8d:69:1b:3e:84:d6:86:e2:79:e5:92:bc:
63:61:d3:1f:87:69:85:d0:8c:51:60:f3:76:21:e7:
e6:9d:72:f3:3f:4f:23:fc:4e:24:94:d8:33:c1:ed:
94:e7:e8:32:d0:e9:92:96:ba:bd:aa:a0:f7:27:29:
fd:c3:3f:30:7d:bf:9d:23:c8:ba:74:77:43:33:06:
88:bb:e5:61:60:d8:72:c4:52:3b:e1:8e:ea:dd:85:
44:25:7d:ba:a2:60:71:b7:85:2d:c5:4f:45:37:bf:
7a:cf:5a:75:6f:ba:15:fc:6b:5d:e3:b5:a5:24:ba:
05:b4:fb:ee:6c:c8:bf:19:04:ab:36:95:c2:6c:2b:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:17:D4:18:83:AE:81:F0:9D:19:B6:41:E1:E1:D8:3A:BA:7D:AF
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R-AX1BiDroHwnRm2QeHh2Dq6fa8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
80:55:31:63:3e:12:2d:ea:a2:6d:cb:0f:02:56:9e:7f:e2:f8:
cc:80:a3:21:92:ab:89:96:dc:d0:70:79:65:46:18:3f:79:d2:
04:b6:18:90:12:85:ee:5b:fd:60:20:1f:fc:71:1e:cc:7e:c9:
79:77:38:dc:4d:78:d8:ad:5b:11:b7:2b:76:2d:4c:8b:ec:84:
e0:8a:b1:52:07:df:0a:12:bd:02:ac:88:cf:42:a2:af:e7:b4:
16:8d:59:b9:39:8e:99:77:05:c4:94:63:42:17:29:d1:3c:6e:
44:99:0a:f8:ef:cd:c6:2b:ca:c1:ab:13:9e:8e:e8:fa:cf:8b:
76:d5:b5:65:ea:c8:65:f9:c4:54:e7:b9:02:d1:59:d5:0a:68:
22:d3:97:11:12:c7:d6:05:e8:67:56:d7:d8:c3:d1:46:5d:fc:
36:9e:46:d2:3a:f6:da:02:86:42:32:ad:4b:c3:57:ca:4b:14:
05:17:b7:d7:82:cc:8d:76:01:d4:3b:ea:12:ac:bb:cd:c0:7c:
0b:eb:76:4d:80:03:c3:a9:37:74:44:a3:2a:60:2a:e2:0f:6c:
85:5f:90:f1:b1:65:4a:7f:87:0d:00:95:74:72:80:82:82:86:
f8:10:6d:ae:48:0a:cc:f0:37:fa:b7:21:2c:2b:d5:10:9c:62:
cc:c5:e9:89
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ3RTAxN0Q0MTg4M0FF
ODFGMDlEMTlCNjQxRTFFMUQ4M0FCQTdEQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC37gPYClDX8+kjWz5pZ0XlWSn4LeNkSMMv1TjpRa4hOgmg8xeZ
/ukkHgVupAYzFG3AHMLLdEhb6SyHdVJL4t2H9wlpgFSlzzfZalnpbeqoY5JANaJl
dt/Xj0ghTvbzW2YobrKeNo0jblF6wA5TVn535UcZXBUpGPILB41pGz6E1obieeWS
vGNh0x+HaYXQjFFg83Yh5+adcvM/TyP8TiSU2DPB7ZTn6DLQ6ZKWur2qoPcnKf3D
PzB9v50jyLp0d0MzBoi75WFg2HLEUjvhjurdhUQlfbqiYHG3hS3FT0U3v3rPWnVv
uhX8a13jtaUkugW0++5syL8ZBKs2lcJsK1WfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUR+AX1BiDroHwnRm2QeHh2Dq6fa8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUi1BWDFCaURyb0h3blJt
MlFlSGgyRHE2ZmE4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BDzGMDANBgkqhkiG9w0BAQsFAAOCAQEAgFUxYz4SLeqibcsPAlaef+L4zICjIZKr
iZbc0HB5ZUYYP3nSBLYYkBKF7lv9YCAf/HEezH7JeXc43E142K1bEbcrdi1Mi+yE
4IqxUgffChK9AqyIz0Kir+e0Fo1ZuTmOmXcFxJRjQhcp0TxuRJkK+O/NxivKwasT
no7o+s+LdtW1ZerIZfnEVOe5AtFZ1QpoItOXERLH1gXoZ1bX2MPRRl38Np5G0jr2
2gKGQjKtS8NXyksUBRe314LMjXYB1DvqEqy7zcB8C+t2TYADw6k3dESjKmAq4g9s
hV+Q8bFlSn+HDQCVdHKAgoKG+BBtrkgKzPA3+rchLCvVEJxizMXpiQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org