Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa
File: aX5itu0sQ_VCj5BcgeHFUowp3xk.roa (raw, json)
Hash identifier: AMHBCwQqYg21z9Vsjc/iOmS+Y+wQi436KMBbgckUdjU=
Subject key identifier: 69:7E:62:B6:ED:2C:43:F5:42:8F:90:5C:81:E1:C5:52:8C:29:DF:19
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0FBD
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa
Signing time: Fri 01 Sep 2023 09:37:13 +0000
ROA not before: Fri 01 Sep 2023 09:37:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 60.198.48.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 09:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4029 (0xfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:37:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=697E62B6ED2C43F5428F905C81E1C5528C29DF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:88:76:a5:93:83:d0:2c:cb:9f:d1:8c:78:
aa:41:69:1e:7c:ff:b3:ab:29:64:3c:75:11:10:48:
1d:a9:a0:59:3b:67:23:95:5c:ab:53:f7:ba:3b:1b:
8b:57:b9:bd:4d:6e:f5:5e:d0:cf:c0:91:c2:9f:f7:
48:aa:78:54:3f:0b:33:88:2e:7d:7d:f1:10:96:0b:
19:34:84:ed:30:4b:5b:3d:0d:9d:f5:e9:5e:bd:23:
59:b0:9e:49:41:b2:5f:02:9d:a6:18:9d:8a:00:cf:
7e:cb:4c:d2:0c:9b:4f:b4:56:aa:84:66:e9:9d:bb:
a2:6a:98:b6:25:ec:37:00:a2:fc:44:fe:ed:f2:b4:
c5:f5:a2:e3:8e:be:af:2b:4c:ed:b5:c3:42:51:12:
ab:b2:83:b9:1c:7b:bc:ac:17:66:43:69:0e:87:56:
93:51:af:d6:56:63:c7:1c:a4:2e:45:44:0d:20:c5:
5a:7c:b4:28:4d:57:1c:ae:88:cd:e4:36:9c:80:4c:
33:77:f0:48:4c:f4:e6:52:92:f4:ea:61:87:ba:ec:
00:04:79:9f:aa:00:4f:fc:15:15:ed:08:60:59:e5:
5f:f2:87:20:f8:82:1d:29:77:ce:b2:d1:4b:d8:2b:
c4:d3:ac:45:0e:6a:23:79:d9:01:66:52:8b:28:72:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:62:B6:ED:2C:43:F5:42:8F:90:5C:81:E1:C5:52:8C:29:DF:19
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:7e:d2:22:db:27:d9:c6:e6:9a:8e:e9:f1:04:02:1b:82:a5:
35:ce:88:12:fa:ac:59:cf:a8:33:4c:d0:ca:b5:db:83:a9:be:
cf:21:86:e3:70:aa:9d:48:15:3b:17:af:e6:f6:a0:52:f3:e1:
8d:6d:97:e8:8b:c9:ce:2e:58:b0:c1:7a:a9:47:2f:65:25:4c:
8a:cf:b0:4b:c9:30:d0:11:83:70:03:e1:96:87:c0:62:30:1c:
c7:3e:10:f2:0b:23:e5:05:af:86:9c:54:a1:fc:1d:91:d7:84:
f4:21:d4:44:c1:cb:1f:1f:7d:55:22:92:92:59:57:90:6b:0f:
06:9c:f9:8e:fa:17:35:05:bb:f9:29:8e:cd:4d:6c:1e:d8:4f:
16:6c:2b:27:5c:5c:e0:95:11:11:64:31:6f:ff:cb:82:39:bd:
f2:5a:57:3c:81:5d:8e:0b:a7:c5:74:45:98:47:22:f8:8c:f1:
00:21:10:cf:c3:5e:67:ba:d5:1c:06:c0:06:90:3c:44:54:24:
74:56:41:4b:59:2b:2d:84:15:89:1c:4c:fc:a3:ec:aa:b9:90:
4d:9b:2c:52:45:d0:70:70:ab:23:bf:6b:e6:1b:63:ba:c2:ca:
fc:7f:a9:b5:34:32:81:e9:bf:f6:4f:99:19:31:f1:8d:f3:02:
17:f9:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:54:21 2024 by rpki-client on console-fra.rpki-client.org