Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ejjdklYCQUscoHOMc2er_iI3TSM.roa
File: ejjdklYCQUscoHOMc2er_iI3TSM.roa (raw, json)
Hash identifier: SxVzabYsD5wJX+UgYgcnT7sQmwm+R7RRnl8qfjjdAiE=
Subject key identifier: 7A:38:DD:92:56:02:41:4B:1C:A0:73:8C:73:67:AB:FE:22:37:4D:23
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 124B
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ejjdklYCQUscoHOMc2er_iI3TSM.roa
Signing time: Mon 26 Aug 2024 05:24:52 +0000
ROA not before: Mon 26 Aug 2024 05:24:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 203.77.64.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:52 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7A38DD925602414B1CA0738C7367ABFE22374D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:62:87:9f:2f:7a:36:49:10:71:fa:d8:5e:
26:04:4d:ca:26:ba:6f:3b:af:a0:0a:b4:de:d1:f0:
b5:fc:44:8c:27:a8:52:13:4c:e0:f4:21:92:31:8d:
9c:28:4a:63:bb:91:bb:ec:bf:ea:73:bd:11:78:51:
69:8c:9f:dd:22:da:66:28:4a:6e:f2:dd:98:4c:be:
22:12:43:dc:28:86:fa:0d:8b:bd:1d:1c:1f:76:fb:
23:b5:6b:05:86:a7:37:26:f7:b7:e2:22:97:41:7c:
43:f3:d8:4d:74:24:fa:d6:ba:f3:cf:ce:2e:cb:d0:
85:dd:54:59:2e:f4:ab:e0:63:4a:a4:11:3a:50:7b:
b0:ad:17:1c:f0:b2:e3:8a:66:ca:0e:ff:fb:64:a3:
42:30:bd:78:bd:f6:82:1a:52:66:fd:0c:0b:2d:2f:
97:b6:d9:c9:f3:57:81:41:7d:91:d1:de:f7:23:f7:
2b:9c:ef:7f:84:75:3f:49:71:20:2b:4a:1d:80:4a:
0c:f3:39:33:00:46:4b:e3:97:6c:04:c1:28:4f:cb:
f3:31:85:26:18:0c:36:53:ee:15:36:c3:09:a3:4b:
d3:92:9e:af:f5:06:d0:ed:d2:5e:e9:bc:3c:18:2d:
b9:35:b7:52:09:7f:04:7d:40:3e:b8:80:ca:75:d3:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:DD:92:56:02:41:4B:1C:A0:73:8C:73:67:AB:FE:22:37:4D:23
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ejjdklYCQUscoHOMc2er_iI3TSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:84:7b:6a:cf:91:ff:43:71:2d:78:d7:a5:7f:f5:8c:68:f1:
50:89:56:fa:39:cc:19:ae:27:d5:c7:57:a7:d2:40:0d:ce:07:
37:b1:3c:59:e8:09:89:86:8e:a8:6a:28:0f:33:7a:55:e9:21:
8a:6f:cf:c8:e2:fd:64:12:4d:3c:35:2e:38:47:19:52:72:eb:
f0:9e:35:63:1d:3c:89:48:ee:da:2f:4f:01:8a:48:58:48:d2:
f8:21:ea:73:a3:7d:74:68:1c:d2:7d:19:6f:7f:2c:d6:8f:72:
2f:12:a9:3d:ab:77:42:70:b8:8e:05:7c:87:9e:21:4f:c1:15:
66:52:c7:7d:3c:5b:3b:cf:e7:79:a2:57:1d:ce:1d:78:d8:44:
2c:2b:1c:c8:a0:2a:15:e3:92:56:11:10:00:ac:96:5f:4d:9a:
be:1e:79:34:ad:13:71:f0:a4:2c:02:08:c5:06:8c:6c:3a:14:
0d:fa:23:3f:f3:1c:3c:e4:43:6b:ec:87:08:d8:e5:cd:02:7a:
77:ea:63:54:1b:0f:ae:e5:7c:62:9f:08:e5:00:4d:a2:43:c8:
2c:70:a2:47:cf:fe:6b:05:22:92:69:be:53:fa:44:93:4b:1b:
d9:e0:7c:68:cd:0d:47:03:9a:26:86:28:3a:ea:e3:12:bb:c0:
27:70:8b:6a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw
NTI0NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdBMzhERDkyNTYwMjQx
NEIxQ0EwNzM4QzczNjdBQkZFMjIzNzREMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLM2KHny96NkkQcfrYXiYETcomum87r6AKtN7R8LX8RIwnqFIT
TOD0IZIxjZwoSmO7kbvsv+pzvRF4UWmMn90i2mYoSm7y3ZhMviISQ9wohvoNi70d
HB92+yO1awWGpzcm97fiIpdBfEPz2E10JPrWuvPPzi7L0IXdVFku9KvgY0qkETpQ
e7CtFxzwsuOKZsoO//tko0IwvXi99oIaUmb9DAstL5e22cnzV4FBfZHR3vcj9yuc
73+EdT9JcSArSh2ASgzzOTMARkvjl2wEwShPy/MxhSYYDDZT7hU2wwmjS9OSnq/1
BtDt0l7pvDwYLbk1t1IJfwR9QD64gMp10zuzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUejjdklYCQUscoHOMc2er/iI3TSMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZWpqZGtsWUNRVXNjb0hP
TWMyZXJfaUkzVFNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BstNQDANBgkqhkiG9w0BAQsFAAOCAQEAMoR7as+R/0NxLXjXpX/1jGjxUIlW+jnM
Ga4n1cdXp9JADc4HN7E8WegJiYaOqGooDzN6Vekhim/PyOL9ZBJNPDUuOEcZUnLr
8J41Yx08iUju2i9PAYpIWEjS+CHqc6N9dGgc0n0Zb38s1o9yLxKpPat3QnC4jgV8
h54hT8EVZlLHfTxbO8/neaJXHc4deNhELCscyKAqFeOSVhEQAKyWX02avh55NK0T
cfCkLAIIxQaMbDoUDfojP/McPORDa+yHCNjlzQJ6d+pjVBsPruV8Yp8I5QBNokPI
LHCiR8/+awUikmm+U/pEk0sb2eB8aM0NRwOaJoYoOurjErvAJ3CLag==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:46 2025 by rpki-client