Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa
File: cAgTlpOSdcnifHI8AjaIMknY6MA.roa (raw, json)
Hash identifier: 8DFq4gSVIxb5IPQE4scpFjqieSDs/N/X5qMNJuyMtlA=
Subject key identifier: 70:08:13:96:93:92:75:C9:E2:7C:72:3C:02:36:88:32:49:D8:E8:C0
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0F76
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa
Signing time: Fri 01 Sep 2023 09:36:52 +0000
ROA not before: Fri 01 Sep 2023 09:36:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 219.86.64.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3958 (0xf76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 1 09:36:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=70081396939275C9E27C723C0236883249D8E8C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ca:db:a6:bb:66:1e:2d:2c:0b:c0:18:30:b6:
f5:87:cd:52:7f:ba:90:0a:03:03:5f:b2:45:51:7f:
2c:4c:79:26:1a:22:52:71:02:f0:dd:df:06:f0:d8:
4d:24:f5:4f:96:1c:66:3c:3f:e7:d0:90:7f:c3:4e:
23:7c:3b:6f:2a:35:de:34:e0:6d:04:33:b5:ed:f4:
1e:ab:86:37:d6:cc:71:f7:4b:3b:85:e4:7f:fe:2d:
a1:34:be:09:40:07:9e:cb:4f:f2:05:27:19:84:a4:
a4:0c:2f:5b:11:30:2f:c6:8a:72:e1:84:eb:76:ca:
dc:9e:ca:d6:d5:52:11:ab:25:bb:ab:a1:d1:5f:c5:
a7:2e:b2:2b:05:7c:1a:67:35:e4:59:9c:de:dd:1e:
b3:7e:42:ef:ac:9e:5c:44:68:6a:5b:0e:50:4a:ca:
94:3b:9f:3a:97:ca:02:a0:5b:54:8c:3f:de:7d:f4:
83:6a:6d:ba:ac:1b:d7:00:e0:3f:ec:f8:d9:56:28:
12:ac:3c:8c:b4:f6:36:20:52:5d:a8:4a:e9:d8:e3:
28:05:d7:2e:70:9e:72:ce:e6:29:40:75:6f:c6:f4:
05:0f:e2:03:cc:54:63:fb:69:57:32:26:da:aa:4a:
e5:8e:da:3c:66:f4:d4:b8:2d:e6:13:ec:71:35:b7:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:13:96:93:92:75:C9:E2:7C:72:3C:02:36:88:32:49:D8:E8:C0
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.86.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:82:16:38:84:ff:82:5f:32:71:66:01:d8:ff:f1:fa:9f:c8:
63:bb:5a:21:29:3d:8f:3a:82:5b:d3:e2:a5:5b:f5:41:4a:d2:
7d:af:bc:02:85:af:fe:50:0b:cb:96:53:4a:27:d3:62:1e:ea:
a9:09:eb:0f:cd:24:6e:4d:fb:4f:34:c4:6d:c5:37:7f:fc:9c:
99:6a:10:f3:d0:fd:37:24:5c:e7:51:33:2c:ef:15:a0:c8:9f:
88:77:59:da:57:5b:ce:85:32:32:77:b9:3f:c5:52:7f:6b:f5:
16:d4:53:98:9f:58:b4:c1:a4:ba:92:df:67:fe:87:d4:87:e1:
bf:b2:02:6c:71:47:29:e5:86:64:4e:00:ac:4c:1c:60:f1:e8:
1d:80:b8:80:7c:b8:d7:ed:eb:3d:07:25:b5:57:9b:c4:d3:2d:
97:e6:38:aa:1f:10:87:79:1a:53:6d:58:a6:5b:12:75:5c:e4:
ec:61:4b:6b:66:df:76:d0:28:99:27:f5:a7:1d:af:3d:9b:5b:
0e:59:5c:88:c5:e8:f9:9e:ab:83:e5:69:e2:be:03:91:dc:c3:
91:25:71:de:00:5e:0a:81:a4:63:f3:4a:44:b3:ba:bb:0d:ac:
f0:47:bb:2b:2e:a1:28:93:82:8d:2b:96:fb:86:b5:ff:81:0d:
b1:42:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:54:21 2024 by rpki-client on console-fra.rpki-client.org