Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kP676d5yxCRSkTrSHCwELSu3Swo.roa
File: kP676d5yxCRSkTrSHCwELSu3Swo.roa (raw, json)
Hash identifier: /lgyMyRxuSigjo4qOAROPPgabTPSSQUpqtfAN2fypec=
Subject key identifier: 90:FE:BB:E9:DE:72:C4:24:52:91:3A:D2:1C:2C:04:2D:2B:B7:4B:0A
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1215
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kP676d5yxCRSkTrSHCwELSu3Swo.roa
Signing time: Mon 26 Aug 2024 05:24:40 +0000
ROA not before: Mon 26 Aug 2024 05:24:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 210.192.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=90FEBBE9DE72C42452913AD21C2C042D2BB74B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:47:0f:d7:21:cd:ac:6d:45:1a:29:0f:6e:
46:4e:ec:3e:53:69:56:e8:8c:16:b4:cf:0b:25:e4:
7f:37:a3:d6:f0:fe:ff:9e:53:a0:bf:b6:89:76:bb:
41:24:68:0e:f4:6a:77:68:91:ff:19:07:29:ca:6f:
a0:70:21:43:af:0b:65:60:82:48:43:3b:2c:48:34:
e4:ba:e8:c7:1e:aa:72:27:2b:fe:0b:59:0f:36:b4:
d4:ce:55:aa:53:2e:96:40:d9:2d:b3:1d:57:a6:39:
80:2b:ed:b1:f0:50:c2:db:30:f9:37:b6:c1:87:74:
c2:b8:e7:22:9e:73:da:e3:b2:af:5b:09:67:b8:f1:
b9:df:38:a8:bd:9e:f4:1f:6f:37:65:f0:06:71:1f:
2f:e2:07:ed:e5:ef:d1:fd:4a:87:33:62:3f:31:09:
0c:4f:bb:85:e2:f2:5a:63:31:d9:05:c9:5d:6f:6a:
85:f7:f9:0f:c9:ef:5b:cb:50:99:03:22:8e:5c:6e:
df:e1:f2:95:ae:77:d4:9e:5a:1a:65:f8:8a:87:bc:
3b:9b:17:4c:fa:79:e3:f3:67:64:b9:08:dd:dd:f5:
86:97:5f:59:c8:73:8a:64:d1:0c:de:98:fe:14:1d:
2b:47:41:82:d0:f9:f4:29:9b:37:88:3e:58:86:b3:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:BB:E9:DE:72:C4:24:52:91:3A:D2:1C:2C:04:2D:2B:B7:4B:0A
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kP676d5yxCRSkTrSHCwELSu3Swo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.192.0.0/18
Signature Algorithm: sha256WithRSAEncryption
72:dd:3c:c0:cd:8c:75:7a:0e:40:9d:96:de:55:4a:df:65:2e:
3a:9e:e5:ea:f5:4b:32:f6:27:bd:31:f6:4e:e7:27:80:c6:1f:
ee:cc:d8:73:0c:7d:44:4f:7f:fa:97:99:4f:1a:aa:3d:d3:e4:
a6:47:73:94:4f:c4:1a:57:0c:72:4c:98:8f:75:55:5d:b2:b5:
e2:b2:0c:96:df:f6:28:7b:07:f6:f6:8e:e4:05:a2:5e:59:e1:
18:a5:86:6d:7c:4a:a2:d9:14:07:66:34:bd:9a:3e:d8:a2:fe:
c1:69:4f:96:eb:80:02:8f:98:b3:9c:2a:71:d2:a6:a3:d5:28:
b7:81:25:d4:33:33:75:38:ca:46:5a:ff:f1:7e:0d:94:c8:3b:
c7:24:12:59:83:53:1c:13:21:17:22:65:1f:c7:2a:a3:5b:80:
7a:5a:65:b9:0d:05:e4:8c:c4:48:21:9d:14:5a:2c:ef:d6:87:
70:71:95:6b:d8:a8:4f:3d:12:c5:eb:95:53:ca:ce:0f:7b:46:
fe:80:aa:26:f3:a8:fb:06:7a:96:c1:a4:22:c4:b5:78:83:cf:
b8:d8:26:d9:b0:12:02:0f:55:a6:aa:9f:23:51:fd:90:03:d5:
f9:8c:33:6e:46:ec:7f:3f:8e:7b:81:c2:88:f1:e7:58:fb:52:
86:f3:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:58 2025 by rpki-client