Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lnP-iaJliwL0-Qe3FfA20mddAbc.roa
File: lnP-iaJliwL0-Qe3FfA20mddAbc.roa (raw, json)
Hash identifier: nQmkEXeN6vmP2RokFkGTXAkdYMc3zD6V64Y2dEqbh5Q=
Subject key identifier: 96:73:FE:89:A2:65:8B:02:F4:F9:07:B7:15:F0:36:D2:67:5D:01:B7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 12AB
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lnP-iaJliwL0-Qe3FfA20mddAbc.roa
Signing time: Tue 10 Dec 2024 14:48:41 +0000
ROA not before: Tue 10 Dec 2024 14:48:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 05:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4779 (0x12ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 10 14:48:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9673FE89A2658B02F4F907B715F036D2675D01B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:a0:d2:2f:cb:fc:95:08:93:15:b3:aa:c3:
d4:ae:14:6f:ee:5e:74:e6:8a:51:34:b0:67:20:21:
35:1d:79:4a:bd:3c:fe:d6:c7:10:48:28:77:7f:df:
97:49:a1:7d:54:b9:c6:df:08:04:b2:b7:a2:c7:a4:
3c:0f:7f:2a:0f:81:bd:24:52:6c:bb:35:f8:2e:74:
8a:c7:93:f1:cf:b3:1b:9f:92:44:6b:25:89:13:51:
48:29:0d:97:84:dc:e6:0a:94:7e:b2:d3:6d:79:55:
df:af:4a:ba:2c:7f:fb:36:23:96:03:c5:c3:48:3d:
b9:92:1c:d8:28:0a:c1:6c:e9:2b:a4:72:69:43:6b:
2a:5e:3a:1f:1c:b8:f4:d0:09:dd:58:f8:19:21:7a:
8c:82:05:b7:1f:15:4b:87:94:eb:87:33:c8:59:ef:
a8:db:c6:85:c4:3f:e9:b0:74:a5:b5:7b:94:6e:a3:
3a:2c:5a:8c:18:cf:8d:d4:cb:51:76:c6:64:fd:fe:
0e:f1:fa:7a:bf:5e:4a:f3:a7:2a:af:90:af:dd:e7:
60:c9:9f:0e:38:5f:44:c5:42:19:86:54:e2:00:f2:
9c:56:4f:bd:10:6b:f6:ae:e6:48:03:56:ed:1d:13:
a9:2d:7f:f7:7c:6f:7e:6b:e6:52:66:0b:da:f0:6d:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:FE:89:A2:65:8B:02:F4:F9:07:B7:15:F0:36:D2:67:5D:01:B7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/lnP-iaJliwL0-Qe3FfA20mddAbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:e3:9d:0c:3e:70:b1:32:c0:da:66:45:df:65:fa:a9:f5:2e:
54:4a:4e:a5:d1:3d:b5:f7:27:25:c6:10:c2:c2:cb:55:da:a7:
2f:f9:78:cf:d8:a9:6d:cc:7d:64:30:c6:b3:fa:5b:79:3a:72:
87:ef:8c:b0:e3:c7:7c:4f:a5:68:b2:72:38:f1:fd:2e:45:c5:
01:2f:bd:93:b9:ea:96:4d:ab:6b:61:84:cc:86:33:09:21:3a:
47:aa:42:7f:0c:24:18:88:b7:fb:5e:52:68:a1:ef:e9:54:31:
6e:b1:84:26:87:af:f2:f6:94:ef:ea:9d:d3:34:ac:18:f7:f6:
8a:cf:bc:c9:55:c4:94:6b:7c:2e:6d:a3:15:cc:b6:a3:0b:68:
0e:c1:36:60:cc:70:c2:01:3d:a2:da:0b:6b:ae:61:14:8f:86:
86:f0:d5:5a:9c:b5:e3:6c:0d:4e:77:2a:41:c7:69:2a:2a:8a:
60:fe:cc:c0:58:7a:20:de:25:9e:42:3e:5c:d1:98:b7:17:ec:
eb:88:4a:d6:72:3a:85:b1:7d:7d:ba:61:18:37:eb:6f:fd:b9:
ec:0e:87:bf:b3:43:74:54:18:39:20:22:7a:46:98:6a:7b:5b:
ce:be:b3:c9:21:30:a8:a3:7a:50:44:ed:7e:6a:1b:fb:78:1d:
bf:a7:89:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:04:59 2025 by rpki-client