Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa
File: ZBlJOYaEzahvooEARFrVzca8YrU.roa (raw, json)
Hash identifier: qLkSROpqbnQYADMECalwf35ae7KoMWMN3wTuSUsMjSI=
Subject key identifier: 64:19:49:39:86:84:CD:A8:6F:A2:81:00:44:5A:D5:CD:C6:BC:62:B5
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11E0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa
Signing time: Mon 26 Aug 2024 05:24:29 +0000
ROA not before: Mon 26 Aug 2024 05:24:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24158
IP address blocks: 175.97.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4576 (0x11e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=641949398684CDA86FA28100445AD5CDC6BC62B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:8c:52:3e:f9:0f:1f:dc:8f:6a:1c:a9:32:
88:5f:d7:3e:31:58:a5:ba:58:6c:cb:01:fa:23:7f:
78:1d:db:b1:cd:39:ae:39:c6:09:47:ef:f6:b1:d8:
12:1e:b8:02:cd:09:28:b1:39:a5:bb:45:eb:6f:20:
bd:f1:dd:ec:34:cc:a9:0c:9d:1b:e8:4b:38:1a:e3:
56:e7:4f:d3:92:06:fe:6f:fa:da:01:52:7f:6c:16:
08:c6:8d:c6:85:ff:b1:bc:1d:68:46:69:32:72:c9:
70:57:01:46:1e:ae:cc:d1:eb:69:3a:b0:c7:ad:25:
10:38:8d:14:c9:12:32:14:d5:a8:66:8f:06:14:68:
69:06:49:4e:0e:01:df:1f:19:6a:46:f5:bb:61:be:
fb:36:cf:fe:23:5b:d9:a4:ee:23:bc:ff:41:af:25:
1e:f7:d0:d1:1b:3e:17:bd:f5:86:6a:4b:a8:46:d5:
68:a4:a5:c8:17:1b:24:5c:87:40:ea:4f:67:bc:d2:
6c:e5:8d:33:5a:08:4b:35:2b:a2:0f:dd:06:a4:1f:
bf:ce:7d:f4:b5:54:a7:a6:90:b8:77:f6:4e:73:4c:
78:7f:4f:9e:99:cc:a0:b2:1e:74:98:23:31:ab:8e:
53:96:b2:6d:9c:f6:46:d0:b3:0b:ff:e1:19:3a:a1:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:19:49:39:86:84:CD:A8:6F:A2:81:00:44:5A:D5:CD:C6:BC:62:B5
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:e9:b0:48:7c:2d:24:89:15:ea:f3:0d:fd:fd:7c:1f:5b:da:
46:d8:7a:48:df:f7:6d:8e:5b:3a:b2:83:df:81:d0:3f:93:d7:
f1:5b:92:da:10:3a:a3:4f:61:05:68:cf:1c:dc:50:c1:ae:89:
d9:c9:37:5f:d2:44:00:e6:c5:57:68:64:5b:45:fb:9b:4f:ba:
0b:f1:a4:71:37:2c:0d:cf:9c:3a:fa:2e:29:7f:3e:bc:4b:04:
e6:b5:30:14:2e:db:b4:24:2a:d2:21:2a:bc:e0:66:8a:e9:bf:
04:87:3e:aa:b3:26:a6:a1:8e:6d:1f:0e:c2:60:76:18:0b:f3:
7c:95:40:61:3f:3a:44:4f:0d:23:de:3c:82:6e:92:dc:29:8b:
ab:95:fa:a2:43:fc:37:d4:be:f9:98:78:90:6a:0a:12:96:b9:
ce:ed:d2:65:b8:77:a4:f0:80:fa:05:64:91:37:02:af:e3:6a:
ed:b9:b3:39:fd:e9:29:f7:0c:70:a1:7f:18:7c:f7:2d:72:6d:
59:74:89:b1:18:c8:c2:14:2c:a4:0a:14:2f:25:30:3d:c9:a4:
21:cd:de:2b:9f:13:31:64:3b:cb:44:07:95:60:ca:85:d3:93:
eb:a7:c2:e4:76:66:61:3e:12:e8:6a:2a:6a:53:c0:5e:da:52:
61:6c:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:06 2025 by rpki-client