Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S5MGPzZFISPR0AyZl3y0H7fuHgY.roa
File: S5MGPzZFISPR0AyZl3y0H7fuHgY.roa (raw, json)
Hash identifier: s/ps/CnP32C/3ZsaZTL76qrgaRHE3cMTsvtjjjUDqDM=
Subject key identifier: 4B:93:06:3F:36:45:21:23:D1:D0:0C:99:97:7C:B4:1F:B7:EE:1E:06
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S5MGPzZFISPR0AyZl3y0H7fuHgY.roa
Signing time: Thu 15 Sep 2022 02:47:05 +0000
ROA not before: Thu 15 Sep 2022 02:47:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131634
IP address blocks: 124.108.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B93063F36452123D1D00C99977CB41FB7EE1E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:34:8e:c7:c6:2a:59:fa:68:6f:5f:78:4b:
32:3e:4d:84:1a:cd:fd:d6:17:70:fd:b8:6f:71:c9:
95:ec:e6:46:46:69:cd:8f:27:3d:07:c7:d0:59:f4:
0a:d5:6d:75:3d:3b:56:3b:5c:e0:6b:57:15:fc:7e:
1a:c9:20:ef:f7:24:16:a2:c9:29:5f:06:dd:eb:1d:
56:db:88:ac:ad:93:ee:51:a2:70:47:a9:c2:01:16:
57:a7:95:2e:47:7f:60:d4:32:29:f9:18:9a:9b:3a:
35:4e:88:de:88:cd:69:a3:4e:85:f7:05:bb:cf:c0:
ce:76:83:01:6a:c6:a6:92:48:51:94:bb:e8:7e:29:
b6:97:85:a0:55:1a:ac:0d:fe:0c:38:20:8e:d2:24:
76:dd:87:17:90:ec:40:37:3d:0c:f0:df:2d:41:a4:
5b:21:29:79:0f:8f:ad:fe:1e:c4:3f:0e:f3:cd:04:
b1:9a:6e:08:a3:5d:b8:d4:62:05:10:b3:e3:97:ca:
8e:f0:49:6b:63:78:07:70:2d:f2:93:6a:98:8a:2f:
a8:bf:97:c8:33:74:e3:30:68:4d:88:6e:b5:16:85:
89:32:46:80:44:df:2f:3f:0a:36:75:6e:55:f5:10:
52:27:f1:92:ef:89:5e:a7:7f:a8:7c:ca:20:9a:a5:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:06:3F:36:45:21:23:D1:D0:0C:99:97:7C:B4:1F:B7:EE:1E:06
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/S5MGPzZFISPR0AyZl3y0H7fuHgY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e6:6b:91:10:61:ff:4a:b9:9a:52:5e:53:38:7d:bb:00:73:
f8:74:8a:1f:84:e9:c3:72:ca:3e:f5:71:76:7e:d2:c7:1d:29:
8e:64:94:21:12:80:1e:56:ce:13:c0:0f:ce:55:52:ee:0f:f1:
b4:b5:3b:5b:8c:a8:54:6b:2c:48:cc:43:d3:d2:b2:8f:34:1f:
13:c4:f0:83:e6:5c:75:ae:67:09:29:92:49:da:9b:23:2c:e3:
a0:4f:88:38:09:58:83:82:41:67:bb:c1:16:40:49:6a:6f:5d:
17:9d:7d:c4:50:f7:9d:18:60:ef:26:49:99:5d:00:81:0f:1b:
99:50:b5:0d:0d:21:45:71:f9:f0:ce:84:7e:3d:6d:39:9c:32:
47:98:a7:e7:d1:6e:8c:ee:3e:6e:94:f9:52:3d:ac:34:d4:9a:
52:37:1f:ee:68:d7:a2:d9:2c:ea:2a:0f:7d:60:4b:58:cb:7b:
de:01:04:f2:09:1c:94:4c:5d:9c:17:c2:11:75:2e:71:6b:7e:
82:23:8e:5a:e3:61:a7:1c:72:f9:3e:5d:5d:17:a4:e5:0a:55:
c9:12:cb:a4:da:de:12:1c:f3:4c:4e:2e:57:2f:29:42:68:b1:
eb:cd:e6:33:07:19:04:82:48:a4:2b:57:4a:42:3d:61:92:47:
7e:53:de:3f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRCOTMwNjNGMzY0NTIx
MjNEMUQwMEM5OTk3N0NCNDFGQjdFRTFFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdCzSOx8YqWfpob194SzI+TYQazf3WF3D9uG9xyZXs5kZGac2P
Jz0Hx9BZ9ArVbXU9O1Y7XOBrVxX8fhrJIO/3JBaiySlfBt3rHVbbiKytk+5RonBH
qcIBFlenlS5Hf2DUMin5GJqbOjVOiN6IzWmjToX3BbvPwM52gwFqxqaSSFGUu+h+
KbaXhaBVGqwN/gw4II7SJHbdhxeQ7EA3PQzw3y1BpFshKXkPj63+HsQ/DvPNBLGa
bgijXbjUYgUQs+OXyo7wSWtjeAdwLfKTapiKL6i/l8gzdOMwaE2IbrUWhYkyRoBE
3y8/CjZ1blX1EFIn8ZLviV6nf6h8yiCapQvpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUS5MGPzZFISPR0AyZl3y0H7fuHgYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUzVNR1B6WkZJU1BSMEF5
WmwzeTBIN2Z1SGdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AnxsiDANBgkqhkiG9w0BAQsFAAOCAQEAP+ZrkRBh/0q5mlJeUzh9uwBz+HSKH4Tp
w3LKPvVxdn7Sxx0pjmSUIRKAHlbOE8APzlVS7g/xtLU7W4yoVGssSMxD09KyjzQf
E8Twg+Zcda5nCSmSSdqbIyzjoE+IOAlYg4JBZ7vBFkBJam9dF519xFD3nRhg7yZJ
mV0AgQ8bmVC1DQ0hRXH58M6Efj1tOZwyR5in59FujO4+bpT5Uj2sNNSaUjcf7mjX
otks6ioPfWBLWMt73gEE8gkclExdnBfCEXUucWt+giOOWuNhpxxy+T5dXRek5QpV
yRLLpNreEhzzTE4uVy8pQmix683mMwcZBIJIpCtXSkI9YZJHflPePw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org