Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_1stEVQcjbqAAMNFOZQgfUukfCI.roa
File: _1stEVQcjbqAAMNFOZQgfUukfCI.roa (raw, json)
Hash identifier: 3pf9xlqZseCfz2X2u9ioH6ibQyH7XpzkQRPoBOxke3M=
Subject key identifier: FF:5B:2D:11:54:1C:8D:BA:80:00:C3:45:39:94:20:7D:4B:A4:7C:22
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_1stEVQcjbqAAMNFOZQgfUukfCI.roa
Signing time: Thu 15 Sep 2022 02:46:50 +0000
ROA not before: Thu 15 Sep 2022 02:46:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131634
IP address blocks: 60.199.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FF5B2D11541C8DBA8000C3453994207D4BA47C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:db:a9:07:48:ad:09:3b:82:ad:08:54:93:
ff:f5:bd:c2:00:f7:5e:0e:c5:70:4f:5a:da:96:85:
f5:13:3a:69:bb:24:04:b5:fc:8e:0f:61:47:75:4c:
8c:cc:30:08:90:9c:6c:13:d8:e9:30:ea:0c:42:68:
75:83:4a:ca:f5:59:4d:9c:e5:08:09:38:7b:bd:fd:
cc:79:01:50:d8:7f:5f:7e:2e:72:47:8b:ee:b5:76:
cc:77:30:27:1b:ca:5d:8d:83:10:d4:37:f8:ce:a1:
6e:4e:cb:64:10:d4:d9:72:42:19:d7:e1:1e:10:f8:
da:80:4b:ae:d9:19:4c:f6:45:c5:75:12:09:23:43:
ec:f5:9a:68:9e:36:a0:0f:51:2c:39:1d:e9:f8:fb:
66:e6:48:be:03:1f:cd:24:76:b9:20:0e:a4:9c:d0:
9e:30:68:b8:f5:fa:61:df:36:8b:da:73:99:01:d9:
27:ca:53:10:b0:33:ce:7e:52:4e:fc:09:a1:7a:34:
f4:08:d6:c5:a2:e3:43:7b:55:41:ad:85:dc:68:1a:
5e:77:b9:87:a8:c1:4e:0b:de:51:9c:04:03:33:56:
8a:d3:7a:6d:86:28:b3:f6:f8:07:32:c5:61:a4:b6:
8f:36:ba:cf:06:e7:82:5e:4c:df:b6:9b:4a:d0:96:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:2D:11:54:1C:8D:BA:80:00:C3:45:39:94:20:7D:4B:A4:7C:22
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/_1stEVQcjbqAAMNFOZQgfUukfCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.50.0/24
Signature Algorithm: sha256WithRSAEncryption
38:18:3f:e4:71:e2:e4:ed:5e:2c:90:a7:41:cf:99:17:49:ed:
7a:f0:0b:6e:b6:da:a0:94:3a:ad:47:9d:b9:1f:cd:d6:32:6a:
a7:e6:d9:3b:7d:7d:26:ba:34:6d:0f:53:11:d2:22:25:0b:4c:
9b:7a:7e:0b:cc:49:55:7d:85:e4:1b:0e:ed:75:1b:c6:46:c5:
33:df:b8:e9:05:32:f5:56:42:65:cc:ef:c4:f8:29:de:75:62:
d3:34:04:12:59:71:9e:4e:ac:40:19:ff:01:86:f4:0a:c6:b4:
be:11:44:d9:ab:8f:c8:b0:28:40:c9:ff:20:b9:26:bc:67:34:
16:0c:6e:e6:c6:9e:36:22:9d:c7:2e:bc:be:a6:79:8e:77:99:
b8:49:f2:5a:a7:58:93:0a:d7:d2:1c:3b:ad:b1:a1:90:5d:72:
90:4b:92:0b:aa:5f:8e:c8:bf:8a:73:fd:dc:9f:1d:73:05:c4:
ef:96:13:8e:11:86:26:71:05:51:5d:24:c1:fb:fd:52:db:cf:
22:4e:48:0d:ef:22:68:e4:8d:50:8f:79:8e:9d:19:42:4b:87:
a4:b6:bd:b1:4a:bb:86:a2:51:b7:17:03:48:7e:0d:5f:c3:fb:
4d:f4:f3:71:74:75:f7:60:7d:67:1e:ac:ae:89:36:c7:bc:20:
ed:66:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:39 2023 by rpki-client on console-fra.rpki-client.org