Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fApykMFs3kuL4-EaGzQNy36SgZc.roa
File: fApykMFs3kuL4-EaGzQNy36SgZc.roa (raw, json)
Hash identifier: ycmjGxhwbH/Lp3qK9fr9Rwaazm3flbBNPXZANTVT5Ck=
Subject key identifier: 7C:0A:72:90:C1:6C:DE:4B:8B:E3:E1:1A:1B:34:0D:CB:7E:92:81:97
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11C6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fApykMFs3kuL4-EaGzQNy36SgZc.roa
Signing time: Mon 26 Aug 2024 05:24:22 +0000
ROA not before: Mon 26 Aug 2024 05:24:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.0.0/19 maxlen: 20
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4550 (0x11c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7C0A7290C16CDE4B8BE3E11A1B340DCB7E928197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:fa:55:47:96:6a:57:a0:82:f9:cf:f0:b8:
9f:ab:46:7a:7e:6d:8b:13:ea:eb:6d:99:57:1c:2f:
b4:a1:fa:e0:fc:3c:a4:2a:b4:2d:9e:f8:c4:7d:4f:
61:3c:4a:7c:6f:ed:de:ae:9c:f6:d9:66:2a:8e:4f:
c5:c0:e6:33:4f:43:06:77:86:fa:a6:22:45:73:a4:
bf:ad:55:ad:b2:26:b9:71:4e:ad:8d:87:5a:0f:e2:
86:22:69:6e:df:50:2b:18:55:ac:45:d2:cb:f8:89:
b6:8d:6a:9a:ad:ea:30:2a:f8:a7:ec:56:94:7a:59:
3d:3b:e7:c9:4a:cd:82:65:88:3e:63:d1:dc:8c:a4:
3f:91:92:82:69:11:45:56:57:b4:87:2b:56:42:a8:
eb:4b:73:1d:cf:4a:01:21:f2:91:51:d2:db:29:2c:
cd:19:30:b3:52:92:34:b6:bc:12:cb:45:ca:ea:b1:
35:ab:94:9f:4b:49:f7:86:3b:72:1e:bf:22:1c:db:
34:41:33:90:ec:d3:2c:f5:d3:8d:22:ec:0c:29:60:
01:6e:fc:f5:ea:e0:33:fc:1e:d2:70:76:63:a2:fa:
cb:01:86:32:72:82:b7:5d:83:0d:a9:72:d2:92:20:
96:bd:1b:60:6e:e8:c1:c9:ab:d0:df:53:c5:ca:dd:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:72:90:C1:6C:DE:4B:8B:E3:E1:1A:1B:34:0D:CB:7E:92:81:97
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fApykMFs3kuL4-EaGzQNy36SgZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.0.0/19
Signature Algorithm: sha256WithRSAEncryption
24:cd:b5:00:5d:27:8f:0a:ba:7a:b8:fd:16:69:dd:15:9b:85:
68:aa:ca:84:18:ec:a8:07:c0:ec:cb:b4:7b:ca:f8:aa:a6:88:
13:3a:d5:42:55:a1:7e:fa:35:5e:3c:21:5e:2e:d6:b0:62:61:
94:1e:f7:e4:60:37:4e:45:1e:08:1a:42:aa:1d:cd:42:4b:a2:
69:2a:1c:33:d6:f4:87:20:74:7e:94:71:15:f2:91:cc:75:9a:
18:5e:3e:52:c4:a6:11:d4:36:e8:ad:a3:c6:da:13:b9:fb:bc:
3c:40:f8:d9:fd:d6:ce:ce:a5:ff:7e:b6:61:68:b0:b7:9b:cf:
b8:c9:44:8e:d9:1f:a8:1e:39:09:37:db:e7:b2:bf:4f:3d:84:
2b:b2:f0:a2:1b:e6:ad:49:32:d3:d0:ac:cd:fa:80:5f:f2:b0:
c3:6d:3f:1f:58:4d:f5:5e:f9:4c:10:2d:ed:d5:a9:5f:7a:c2:
7d:fb:a4:26:ee:8f:62:e3:7e:31:43:3e:13:de:11:20:33:44:
8e:8b:c6:9a:65:31:b1:c8:ab:23:9f:5e:f7:1c:d6:91:64:ef:
0e:b6:48:12:40:aa:55:83:72:db:a0:17:cf:e9:e6:4e:75:6d:
e5:aa:8d:7a:d6:09:37:80:aa:6a:55:bc:3e:d2:a9:85:4b:cd:
27:5e:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:41 2025 by rpki-client