Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mBwUka3niewRKZZeHIs3jUe_v6U.roa
File: mBwUka3niewRKZZeHIs3jUe_v6U.roa (raw, json)
Hash identifier: Es3lYPN2v54WcQPHzCrrMGTsFYLJaabR2Rw/rvP69rA=
Subject key identifier: 98:1C:14:91:AD:E7:89:EC:11:29:96:5E:1C:8B:37:8D:47:BF:BF:A5
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mBwUka3niewRKZZeHIs3jUe_v6U.roa
Signing time: Thu 15 Sep 2022 02:46:57 +0000
ROA not before: Thu 15 Sep 2022 02:46:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131634
IP address blocks: 124.108.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=981C1491ADE789EC1129965E1C8B378D47BFBFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:e3:ff:e0:4b:53:c0:e0:ba:43:07:12:26:
8c:1e:b1:73:4a:6b:37:32:99:80:e8:29:a2:b8:53:
25:ae:f3:43:a5:56:b0:3f:b1:a7:f0:e2:57:09:32:
a9:c8:d6:50:c9:3b:70:65:95:1e:34:1b:8e:e4:94:
9e:50:64:24:d0:77:c3:e2:fb:a6:47:8b:5b:a7:28:
bd:38:1a:74:87:eb:d4:6c:b3:5a:55:91:8d:33:2a:
7a:a5:71:d0:27:14:cf:1f:c8:ba:5b:69:b1:5f:af:
7a:de:72:db:97:6c:28:26:f0:37:5e:a6:b1:cd:e6:
b7:7f:93:29:a3:6d:c5:0d:bf:07:ee:2f:5e:a0:96:
d7:22:2a:a4:a5:cd:35:7b:fd:7d:f7:34:45:f8:55:
5e:e3:78:63:b9:04:67:c3:85:c5:c8:13:db:4a:eb:
e9:8e:17:c7:66:92:1b:a5:25:eb:13:b7:21:da:3c:
a7:b4:3b:a8:fb:ff:44:3f:1a:3d:f4:60:91:4a:2f:
01:04:68:d8:b0:3e:51:74:6b:b0:1e:bf:3c:4d:15:
27:91:d3:51:85:14:15:f4:22:8a:bc:15:8c:fe:98:
9b:93:58:51:ff:53:6a:6a:3d:26:bb:e2:06:14:0a:
ee:88:5d:39:0d:1c:4f:95:4f:2d:60:2e:6c:dd:51:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:14:91:AD:E7:89:EC:11:29:96:5E:1C:8B:37:8D:47:BF:BF:A5
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mBwUka3niewRKZZeHIs3jUe_v6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:01:cb:85:22:d4:24:14:ed:3b:7f:5f:46:00:09:94:14:35:
88:c7:fb:8f:1d:d3:69:9f:e4:8d:38:c4:fb:75:7c:29:ec:40:
c9:56:fe:20:0d:a1:96:cd:09:d9:25:5c:39:fa:2e:b8:ba:23:
f6:73:ee:2f:f9:10:5c:3c:4e:d1:5b:f3:fe:35:5a:f8:8a:91:
af:bb:84:fe:c6:aa:f0:b0:34:35:dd:0f:1c:64:99:eb:11:c0:
53:8f:94:0f:89:ff:08:96:fb:b3:95:7d:db:ce:4c:5d:d7:46:
05:a1:79:59:ae:aa:63:d5:f1:29:82:8f:c1:fc:3d:96:bf:6e:
e6:29:10:b6:71:47:df:e5:3c:bf:75:99:75:40:db:3e:ca:bb:
c2:4a:0f:89:3b:ba:5c:bf:ef:36:3e:8d:a2:17:7c:7a:2a:0c:
98:bf:d5:88:78:dd:65:92:76:14:b8:a4:a3:b4:88:55:35:e2:
10:11:e3:1c:f1:c7:ff:7c:76:e6:68:bd:2b:93:6e:07:33:98:
ae:5f:14:08:11:0c:1a:39:f5:d0:98:a7:7a:70:6d:d3:f1:b7:
96:03:c7:39:9f:94:4a:52:e5:02:4f:5f:59:37:d5:f2:aa:cd:
37:ac:9f:15:ea:a6:2f:55:ff:eb:d5:d6:9d:e8:fe:3f:33:98:
6d:1e:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org