Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/We1DR2Wb_Nj8zWPIQPuyedI2v64.roa
File: We1DR2Wb_Nj8zWPIQPuyedI2v64.roa (raw, json)
Hash identifier: qQkx4u8Nqq72o5XikroGfQnpBinXtSaUHlKweQe0XEY=
Subject key identifier: 59:ED:43:47:65:9B:FC:D8:FC:CD:63:C8:40:FB:B2:79:D2:36:BF:AE
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/We1DR2Wb_Nj8zWPIQPuyedI2v64.roa
Signing time: Thu 15 Sep 2022 02:47:21 +0000
ROA not before: Thu 15 Sep 2022 02:47:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 60.198.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=59ED4347659BFCD8FCCD63C840FBB279D236BFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:ab:0a:66:86:60:27:0f:be:d7:75:3e:d4:
cf:25:8d:72:db:da:39:7d:c8:a9:f0:5a:6b:18:8e:
b9:06:6d:ef:2c:f3:10:74:c7:4b:76:81:ff:9c:cd:
c4:a3:ab:15:43:10:2f:15:3b:62:ae:4b:3d:e9:ce:
f6:ec:82:d3:37:61:86:0a:7a:ad:00:69:bc:cf:41:
36:47:5d:45:d4:c1:bb:81:4b:4e:34:b9:d6:e2:76:
67:73:39:5e:cb:00:ad:e7:f8:01:5f:95:80:e6:67:
16:0c:0a:07:70:99:f7:85:bb:3e:73:fa:56:db:c7:
0b:00:79:1c:5b:b0:d3:87:41:57:41:9a:60:a3:5d:
45:b2:27:dc:9f:3b:8b:88:69:d2:aa:72:36:4d:ed:
d8:3f:b8:6e:9b:a6:db:f6:01:65:3c:b3:5b:e0:0f:
57:2c:03:8f:f3:dd:b5:40:35:43:ae:a8:86:68:21:
e7:e7:c4:18:ff:40:1e:8c:df:49:e4:90:af:9a:80:
e7:6b:20:eb:5d:86:5e:06:e6:bc:21:d3:66:07:5d:
62:0a:14:d8:df:a8:a6:72:92:c3:de:c0:bf:5a:df:
5b:64:46:af:a2:b6:77:10:a3:fd:dd:fc:bb:cd:4f:
bb:4a:33:04:cf:48:58:98:c1:97:89:7c:96:0d:77:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:43:47:65:9B:FC:D8:FC:CD:63:C8:40:FB:B2:79:D2:36:BF:AE
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/We1DR2Wb_Nj8zWPIQPuyedI2v64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:33:6d:17:09:16:21:fd:f0:6f:2b:50:cc:eb:50:1a:24:07:
61:2a:48:21:b4:73:af:ea:cf:4c:db:04:73:46:6e:32:a6:87:
e7:71:41:0f:58:98:66:72:af:5b:2e:ac:f1:6e:64:17:0d:4d:
1d:f2:24:7f:4e:bf:ff:22:56:bb:f2:c6:fc:e5:c0:b0:f7:72:
e3:a5:34:37:94:8a:37:a4:f9:5f:0c:f8:d6:5b:57:79:ad:0b:
d5:98:e2:b4:3d:3c:63:d0:fa:af:20:c7:0b:1e:51:b1:23:ab:
26:b7:34:96:70:ec:21:5a:63:8e:70:75:e7:36:91:5b:56:a4:
19:e6:7d:cd:80:79:87:a1:86:4a:f2:01:cf:b1:5c:ad:84:bb:
17:35:d6:37:eb:c4:ff:fa:b2:af:95:53:6b:aa:15:e3:1e:8b:
fa:d3:78:81:0b:8e:33:78:21:6f:d8:90:8d:5a:2d:1f:23:4c:
c2:65:3a:3b:79:78:19:e6:40:35:33:5d:d1:57:99:f2:a4:05:
22:aa:c0:2d:b7:c0:aa:dc:50:93:dd:99:21:d5:90:07:cd:44:
46:7a:b9:b9:a1:46:ad:78:d0:29:84:74:29:e4:9c:df:da:82:
52:6f:4f:10:b5:0f:30:7b:f4:69:64:c5:ec:31:f9:ea:e4:b2:
bd:a2:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org