Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/agkR9WPWO44f_DM2tQXJGAzgdZs.roa
File: agkR9WPWO44f_DM2tQXJGAzgdZs.roa (raw, json)
Hash identifier: /UeLGJIffiiiLoHOju5CyeVNF9EUzVvVfTmWsf8mBrc=
Subject key identifier: 6A:09:11:F5:63:D6:3B:8E:1F:FC:33:36:B5:05:C9:18:0C:E0:75:9B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/agkR9WPWO44f_DM2tQXJGAzgdZs.roa
Signing time: Thu 15 Sep 2022 02:46:59 +0000
ROA not before: Thu 15 Sep 2022 02:46:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.17.104.0/21 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A0911F563D63B8E1FFC3336B505C9180CE0759B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:02:bb:96:1d:5a:a2:09:b0:e1:38:17:e3:
3e:21:2f:7b:a0:cc:9e:ca:2b:13:29:0c:c8:1b:15:
f2:b6:75:10:00:15:12:f3:1d:0d:0b:41:e2:89:e5:
0f:12:a4:c5:e7:dc:47:f0:82:df:ae:98:65:a6:d9:
32:a6:35:d3:98:a1:4a:a2:05:39:34:17:db:6b:c3:
b3:f1:24:9c:0a:39:50:bc:95:35:21:a4:96:2f:00:
63:2b:ed:d9:e5:38:b2:27:75:44:d0:8f:c7:00:17:
c6:a9:87:fc:e1:2e:5f:6c:53:13:d0:81:0a:5d:57:
0e:8e:62:ff:60:d8:2b:80:59:69:3f:ab:c1:b0:9c:
de:12:f5:be:b7:85:60:fe:84:dd:bd:5c:38:79:9a:
2e:29:12:c1:75:32:3b:5f:61:79:53:3a:b0:9a:19:
dd:92:23:19:01:6f:93:dd:58:f1:e5:7c:ea:02:56:
8a:2a:b4:fe:d9:21:ae:0f:42:29:18:4e:7d:ff:30:
e5:da:d6:67:4d:8a:82:ab:87:8f:57:e6:c1:a0:9a:
89:53:8c:01:d2:1d:aa:a7:fc:93:95:1a:a1:05:2c:
95:98:85:b4:c2:b8:10:b2:77:85:af:c6:ec:2d:c6:
76:11:22:48:6d:9f:63:0e:a9:79:f6:d6:28:ff:10:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:11:F5:63:D6:3B:8E:1F:FC:33:36:B5:05:C9:18:0C:E0:75:9B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/agkR9WPWO44f_DM2tQXJGAzgdZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.104.0/21
Signature Algorithm: sha256WithRSAEncryption
57:db:12:77:4b:2d:21:36:3a:57:17:d1:58:d5:1b:10:41:e1:
cf:41:26:f4:3a:ac:5c:8f:66:32:37:7f:6d:c5:6b:ff:c3:dd:
d7:2b:f5:e4:72:fa:08:1b:5f:5c:ba:33:5c:01:85:12:2c:b2:
5f:48:99:a7:be:1a:22:e0:37:5d:69:02:0d:10:a9:cf:12:77:
d3:17:5f:49:b7:48:ce:1c:c0:4c:9b:e0:bc:dd:c7:b3:0e:37:
6f:d5:4b:32:f8:16:76:64:3c:e7:50:41:8c:dd:cb:39:4d:6e:
7f:35:f3:77:64:bf:20:f9:21:ce:fe:1c:4f:50:51:31:8a:d5:
41:2e:1e:a1:f8:c6:d8:dc:53:5c:f4:f9:a3:f6:6f:ec:e1:7c:
26:6e:e3:18:6b:1c:4a:e0:e1:bd:09:3b:fa:ee:04:76:9b:f8:
0b:de:76:03:b8:bc:f7:f9:88:eb:b3:1a:cf:d9:95:89:06:42:
25:34:f4:5e:da:88:00:0f:8a:31:04:48:30:97:cb:20:74:24:
c4:93:15:0c:e7:5f:62:2c:f2:05:38:9a:34:83:7a:9e:d8:8b:
1f:77:56:1c:04:30:70:31:40:4c:99:9f:7f:d5:85:4f:96:a2:
56:22:ef:15:80:03:e3:a0:a1:be:64:a7:de:30:5a:24:b8:e0:
49:b9:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org