Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akcQNcXT3xNHEwMT4oHZDk80z7s.roa
File: akcQNcXT3xNHEwMT4oHZDk80z7s.roa (raw, json)
Hash identifier: CUw38tIG3b4mAr4i89EaX/71duJkgFoZ+d00Ws+0Ao4=
Subject key identifier: 6A:47:10:35:C5:D3:DF:13:47:13:03:13:E2:81:D9:0E:4F:34:CF:BB
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akcQNcXT3xNHEwMT4oHZDk80z7s.roa
Signing time: Thu 15 Sep 2022 02:47:31 +0000
ROA not before: Thu 15 Sep 2022 02:47:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131628
IP address blocks: 175.97.192.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A471035C5D3DF1347130313E281D90E4F34CFBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:91:2c:ad:56:4d:da:9d:b2:88:7b:51:ed:
f9:42:c2:9b:1c:1c:69:2c:68:05:4a:6b:e4:60:25:
31:99:ea:e1:aa:78:05:6e:cd:6f:05:9b:12:ed:49:
1f:94:4f:e6:87:bd:90:72:2f:0f:f7:c3:50:9f:3e:
36:9a:e5:ae:18:25:82:98:d7:6e:20:34:12:58:60:
ea:9a:3c:32:2d:76:c8:13:97:fb:01:a3:49:d0:e4:
be:c0:88:d7:b4:9d:77:40:70:a0:42:dd:ed:da:5c:
14:ec:bf:6e:6b:31:9f:d3:ce:f7:67:03:76:a4:e2:
1d:00:fb:c2:c5:86:27:09:a7:05:14:3c:8c:c3:0b:
76:ef:05:7d:4f:5f:07:81:d4:91:6c:27:66:ae:61:
d1:1a:8e:fb:1d:f7:84:a1:24:ed:6e:5a:98:9c:ab:
03:5e:83:cf:48:aa:55:54:07:aa:12:7d:e3:c7:c0:
c8:02:6b:c2:7f:87:8a:a6:b1:eb:f8:e4:5a:77:cc:
e5:66:f2:57:27:e4:75:e2:04:0e:ef:26:32:7a:94:
51:92:d0:d3:e0:82:c3:91:75:f8:27:26:3d:17:8b:
a2:b0:92:f9:68:25:29:e5:26:76:41:0b:b8:97:44:
78:3a:79:50:94:da:8c:df:60:7c:6a:81:38:d1:a6:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:10:35:C5:D3:DF:13:47:13:03:13:E2:81:D9:0E:4F:34:CF:BB
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akcQNcXT3xNHEwMT4oHZDk80z7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.97.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:1e:27:d2:00:9e:08:36:4e:81:5a:28:d7:2a:e1:9e:9b:15:
e0:60:27:88:53:09:5c:b7:b5:8f:97:de:ea:1f:b0:07:cb:1e:
3a:44:f2:fc:48:d6:c7:ad:3c:4f:c7:35:e4:b4:1f:eb:23:64:
ed:84:f9:f0:a0:49:96:d1:e3:f1:15:cf:85:1e:74:ec:7c:90:
6f:97:0d:77:47:4b:fc:57:f8:b3:f4:00:c1:47:53:b1:34:f3:
9d:b0:af:ec:ec:c2:68:b5:36:05:d9:37:59:d2:0f:5e:21:ee:
c1:10:85:f6:4e:a3:bd:5c:b9:33:a1:1f:48:b4:5a:df:8c:b4:
85:c3:c5:50:e4:8c:e5:61:ad:70:67:f3:59:f7:b8:43:67:5d:
52:c7:5d:98:ae:f2:9b:8a:d5:54:45:09:52:0d:b6:38:6b:56:
e7:e9:b8:4c:40:59:5b:5a:10:cd:c6:1d:58:ba:82:87:ea:ab:
cc:38:6e:7e:66:18:42:21:b7:24:ef:ac:34:1d:a2:e9:98:d4:
e1:99:50:0b:8f:fc:9a:d0:b0:ab:fa:c9:30:0c:09:1d:4a:41:
76:46:b0:f1:c5:1e:b3:1c:f7:71:c7:74:b9:b0:50:32:d6:de:
2c:ac:1a:66:29:6d:07:d1:dd:52:56:72:88:ba:77:fa:b2:92:
0e:7e:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org