Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UcPq9WZS_NJA8_ryteCBPUIoXls.roa
File: UcPq9WZS_NJA8_ryteCBPUIoXls.roa (raw, json)
Hash identifier: ogWqlUkBbhheOaLmSbIBnH7vFTnP1inRfmhOY/bYpWM=
Subject key identifier: 51:C3:EA:F5:66:52:FC:D2:40:F3:FA:F2:B5:E0:81:3D:42:28:5E:5B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 122A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UcPq9WZS_NJA8_ryteCBPUIoXls.roa
Signing time: Mon 26 Aug 2024 05:24:45 +0000
ROA not before: Mon 26 Aug 2024 05:24:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4650 (0x122a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=51C3EAF56652FCD240F3FAF2B5E0813D42285E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:d8:37:13:d7:01:f8:bc:8d:64:54:cf:01:
42:80:0a:6a:12:8b:45:72:fd:21:b9:14:12:b3:e7:
ab:2f:b2:39:b7:aa:7e:55:59:1d:ff:65:5b:ac:f7:
0e:d5:63:10:6d:3e:4e:98:43:e6:a4:b0:8f:93:64:
b3:ab:74:75:35:20:85:1d:eb:8c:c2:0d:b5:14:e4:
5e:63:2a:70:e3:14:37:0c:3c:da:ab:43:d2:72:7b:
7c:6d:e9:8c:0d:d5:36:27:0a:fa:9f:c5:b6:1b:fb:
ed:d3:39:7f:7e:09:ad:20:e6:ba:8e:a5:a7:b3:4b:
59:81:c9:4c:66:66:96:d6:cb:6c:54:c8:8f:47:95:
a2:39:87:80:17:55:4b:8e:4b:b2:ae:93:70:03:35:
e1:89:dd:97:b3:2a:71:44:77:31:3a:1e:2b:63:5b:
4e:87:e1:90:51:f4:c4:5f:4a:9c:6f:fe:df:69:4a:
d0:37:9d:ed:12:e7:25:ba:61:45:c2:79:e8:9b:a3:
45:de:20:08:91:4b:51:66:6e:45:cc:21:95:11:8b:
65:af:0c:e5:a4:ff:b1:5a:9c:9e:7e:e9:6f:59:e3:
ae:14:d7:9f:3a:94:4e:d1:a6:37:22:fa:03:37:75:
65:cf:5c:d8:6b:18:7f:97:e5:af:e6:21:7b:8d:27:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:EA:F5:66:52:FC:D2:40:F3:FA:F2:B5:E0:81:3D:42:28:5E:5B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UcPq9WZS_NJA8_ryteCBPUIoXls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:21:97:d4:41:1c:64:fa:8a:04:83:2a:3d:28:e6:55:5e:26:
f1:6e:64:9a:d5:db:12:51:36:98:62:76:75:ac:cb:28:fc:ce:
42:bb:24:8e:39:7a:b2:03:c7:ec:f4:bf:d2:95:e2:f3:a2:bb:
d5:f3:19:d9:d2:78:4e:bc:3b:2e:11:41:00:73:bc:93:5a:47:
13:77:3c:9a:42:91:25:db:66:4a:21:64:e3:2f:67:30:33:ab:
00:0e:ad:e5:37:57:c7:01:ed:b9:73:59:d4:eb:26:ba:9a:53:
32:ed:63:ca:ee:19:cd:3b:a0:e3:b4:ca:06:df:ad:bf:c0:94:
8e:5f:fe:a8:c7:b1:e6:70:22:da:50:8a:f1:03:2c:ff:ad:b0:
82:5f:65:03:ed:b8:83:f5:7b:b7:3a:9c:51:46:95:2d:9a:a4:
16:11:b0:f8:47:47:90:30:43:57:16:9b:e5:9d:4c:65:ca:e0:
86:e7:67:4c:a8:56:8f:4c:c6:c8:b3:75:c7:58:56:94:09:53:
35:53:94:82:ee:46:49:e1:b6:2a:e9:98:37:4d:c4:a2:e4:d6:
bc:db:55:7c:13:81:49:f8:48:be:f7:d3:02:c5:bb:ee:a2:e1:
a9:70:2f:98:6b:53:2c:b2:22:c8:e0:cf:57:fd:9d:2b:13:c8:
4b:f5:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:10:46 2025 by rpki-client