Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jAc_wGYgqfzVvvWMVRAwLWik_X4.roa
File: jAc_wGYgqfzVvvWMVRAwLWik_X4.roa (raw, json)
Hash identifier: f9uHIznZQqdrq9xlnmSFf/W0pdvJcpgsMnLEEG2xfU0=
Subject key identifier: 8C:07:3F:C0:66:20:A9:FC:D5:BE:F5:8C:55:10:30:2D:68:A4:FD:7E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jAc_wGYgqfzVvvWMVRAwLWik_X4.roa
Signing time: Thu 15 Sep 2022 02:47:02 +0000
ROA not before: Thu 15 Sep 2022 02:47:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 203.65.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C073FC06620A9FCD5BEF58C5510302D68A4FD7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:74:56:31:5e:66:d7:1c:d3:ac:58:b5:55:
40:00:34:ba:3e:76:c5:54:43:05:90:df:f9:04:0d:
bc:9e:ff:3b:c6:c9:50:73:d1:42:19:a4:57:83:bd:
3b:7a:30:2a:8e:13:d8:1b:25:1e:6d:5b:5a:36:a4:
66:3b:ae:3c:a8:3b:37:ea:6c:c8:59:0c:5f:37:31:
ed:ad:96:d6:09:5a:13:e1:72:ae:7a:38:f4:0f:e0:
d6:12:24:40:e8:00:23:12:eb:3a:fd:af:17:04:e2:
fc:9e:b7:d9:0b:c5:c3:86:5f:15:41:0a:50:d3:49:
7e:06:08:0b:c4:e4:ff:ac:13:e9:6b:bf:e1:eb:44:
37:9c:c8:ac:26:6d:58:ea:a4:07:ca:dd:3f:30:cf:
88:b6:be:a8:0d:4f:fc:86:05:5f:95:6b:e4:5c:90:
6f:52:e3:33:68:85:bc:fb:3f:98:19:f4:5c:0a:fa:
54:47:90:ee:40:4a:da:97:59:55:01:26:5c:2a:a0:
35:f1:bd:73:d3:a2:de:b0:8e:4b:35:4b:f0:47:98:
0e:c8:5f:5e:c8:e3:b9:3c:f3:99:ab:9c:33:51:66:
19:3b:6b:7a:1b:ab:72:ea:51:c1:6b:ed:21:57:d7:
d2:e7:74:24:6c:9c:17:c2:37:b2:0f:d3:b4:c7:67:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:3F:C0:66:20:A9:FC:D5:BE:F5:8C:55:10:30:2D:68:A4:FD:7E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/jAc_wGYgqfzVvvWMVRAwLWik_X4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.160.0/19
Signature Algorithm: sha256WithRSAEncryption
84:b0:14:97:ee:95:aa:ca:4b:0c:9f:68:57:02:45:f8:08:c2:
1b:e4:13:3e:3d:9a:cb:cb:cd:88:cd:1b:79:2d:ec:e2:98:32:
cc:9f:e7:c0:08:75:d5:3d:3a:34:51:0e:db:c0:1f:d9:28:75:
c8:e9:5b:fb:a0:55:8f:0f:c9:c7:fa:79:71:d7:d3:a4:59:c0:
3f:5b:bd:7f:bb:13:d7:5c:0d:f7:26:d6:96:b9:c7:59:05:05:
61:2c:4b:00:cc:06:79:67:88:8b:d2:d0:9e:aa:06:8c:f6:62:
7e:be:48:f6:26:71:4a:ab:60:26:26:9a:8c:8a:fa:f0:1a:f6:
5f:4f:68:15:b1:47:7d:ad:2b:e7:01:a1:a4:74:07:40:21:35:
94:f7:24:6a:15:50:aa:fe:26:74:d0:f7:2c:2d:c0:ed:57:9e:
8e:9e:8e:90:a6:1f:ac:2b:b7:45:0c:10:bc:88:8d:ec:12:14:
87:69:42:74:bf:21:a1:2b:cc:2d:eb:c5:13:79:82:15:49:69:
f3:58:36:26:57:a7:c1:5f:ec:fc:a4:cd:d0:f1:c3:18:55:51:
0f:64:a6:86:10:8c:9a:23:d6:c2:38:d1:e4:39:d0:65:84:1c:
88:f6:d2:a7:c5:2c:af:99:21:cc:89:a0:ee:b7:3b:50:21:a7:
ba:d3:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org