Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lcKy0mZE-gH2CDrAFiol8C92Y6o.roa
File: lcKy0mZE-gH2CDrAFiol8C92Y6o.roa (raw, json)
Hash identifier: nWF1zZ7qtYIay1veso9V1JniOsD88rVB3SvWp2QKQ3k=
Subject key identifier: 95:C2:B2:D2:66:44:FA:01:F6:08:3A:C0:16:2A:25:F0:2F:76:63:AA
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lcKy0mZE-gH2CDrAFiol8C92Y6o.roa
Signing time: Thu 15 Sep 2022 02:47:12 +0000
ROA not before: Thu 15 Sep 2022 02:47:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 60.199.212.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=95C2B2D26644FA01F6083AC0162A25F02F7663AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:61:4f:5f:60:32:5b:44:dc:40:a2:c7:43:
b2:43:cf:44:0c:dc:72:eb:f1:17:d7:53:59:32:73:
1d:e7:94:b5:d1:cb:42:7e:1b:2a:2a:13:9d:6c:9a:
60:9b:9d:a6:ab:90:e0:b4:0d:3e:93:f1:ca:96:a5:
51:50:df:29:48:19:f9:93:0e:ee:a6:2f:81:cf:93:
61:df:09:69:5c:1c:81:df:36:c0:90:ce:11:9e:61:
d5:52:80:f6:90:73:a1:6a:fa:37:ad:3b:f7:76:00:
bc:59:8f:67:e6:1a:77:21:79:93:74:b2:9c:92:05:
f6:79:e7:33:f8:c0:a6:f0:f1:15:1f:88:e8:9e:a4:
6b:86:38:e2:0c:ec:fd:36:2f:d5:f0:4a:97:b3:69:
5d:4d:b3:74:13:04:63:c2:ed:e1:92:58:13:04:79:
36:7c:83:7f:8b:6f:8e:27:54:c0:d5:27:08:3b:54:
7a:88:4c:55:ff:7d:7e:6c:de:c8:71:ee:c5:de:59:
db:0b:ff:9d:70:fa:59:d1:54:9c:d7:de:e4:5b:67:
a1:89:77:0e:58:c9:d6:89:70:b8:3d:96:41:4b:44:
d8:ea:c5:9a:37:38:96:1e:b6:0f:04:2b:f6:2a:6e:
b7:06:86:d2:cf:fa:bd:5c:97:70:a9:2d:4a:75:d3:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:B2:D2:66:44:FA:01:F6:08:3A:C0:16:2A:25:F0:2F:76:63:AA
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lcKy0mZE-gH2CDrAFiol8C92Y6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.212.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a2:26:8f:44:24:42:0c:47:c7:b3:b1:04:1c:af:4b:40:4f:
d4:22:ce:fb:3e:d8:f2:77:6a:53:d7:59:0e:05:da:4c:5c:ad:
26:d8:a1:a4:98:0d:cf:9d:90:b8:13:a6:83:6b:02:0a:8f:f8:
ac:a9:32:03:0f:2f:e5:96:44:32:d4:b2:fe:f9:df:18:5f:87:
b4:fb:f4:a3:8f:9e:9b:b6:9d:e8:f7:b7:dc:0e:e4:91:52:da:
0e:a1:12:01:f6:58:af:7e:ed:1d:74:cb:4c:a9:94:17:2c:97:
98:b6:87:e6:70:4c:aa:91:50:31:2a:d5:d0:0e:65:71:4b:f2:
5f:dc:b0:70:46:44:2a:df:dc:8e:eb:fc:65:33:0b:b7:cd:cc:
bf:14:02:25:b4:ca:86:b2:de:33:fc:aa:30:bb:5e:be:62:85:
49:9f:0f:97:66:b1:60:8c:45:92:a3:39:75:23:d2:35:69:48:
3d:1d:2d:e9:49:2d:5e:d9:b5:38:93:d6:10:d1:0a:2e:85:81:
07:e9:83:eb:eb:e0:13:6e:57:b2:3c:b9:c1:d1:8a:6c:c4:cc:
70:a1:fc:6a:b2:7a:7f:c7:8e:96:76:73:10:d5:2a:4f:b2:7e:
32:67:5f:14:75:6c:29:66:f8:0d:6f:c4:b2:03:43:27:76:66:
7e:81:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org