Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oUUupCYxvfK62Iqj88XrvzUGdSs.roa
File: oUUupCYxvfK62Iqj88XrvzUGdSs.roa (raw, json)
Hash identifier: a70Ahxmn9zVcpfZxR9RuItG9i2fy+kPAprbxXmFxLxo=
Subject key identifier: A1:45:2E:A4:26:31:BD:F2:BA:D8:8A:A3:F3:C5:EB:BF:35:06:75:2B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oUUupCYxvfK62Iqj88XrvzUGdSs.roa
Signing time: Thu 15 Sep 2022 02:47:33 +0000
ROA not before: Thu 15 Sep 2022 02:47:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 203.77.44.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A1452EA42631BDF2BAD88AA3F3C5EBBF3506752B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:29:9e:5c:f4:6e:d3:45:b1:9b:99:d5:e9:
01:1a:e9:9e:12:b3:4f:64:6b:2f:9a:14:64:ae:46:
6d:fc:96:db:98:48:fe:09:ea:d8:6d:55:0d:dd:fb:
ad:e8:53:40:30:4f:03:04:f2:4d:f0:56:2f:d9:ae:
d4:69:49:85:55:1f:2f:0b:9c:ca:03:05:26:e6:86:
e5:89:1d:6c:0e:d8:ea:06:aa:7c:2b:18:26:a9:44:
24:09:16:1b:8f:9e:b1:b3:36:6f:57:2d:7b:31:df:
50:a1:56:ab:15:35:21:ef:fc:7e:84:44:29:2f:9f:
1f:58:0b:0f:7e:35:be:e7:88:43:b7:ee:2f:4c:c7:
bc:85:36:aa:d5:d3:dc:b1:d7:ed:52:80:7a:18:7e:
2a:0c:c7:2d:33:5c:23:c9:65:f4:72:d4:e4:74:53:
6b:0a:69:a9:e6:be:e5:73:a7:04:65:fa:0d:74:ac:
5d:0d:b7:60:fb:a9:e7:85:04:17:3e:c9:10:43:a2:
cd:4f:f5:af:e8:97:95:27:b1:07:b0:86:15:97:33:
8c:83:82:b7:94:a6:7f:26:9c:6d:42:74:0d:98:8e:
9a:26:ad:46:f6:c8:6b:ce:9b:f4:fc:e2:8d:de:4f:
e4:1d:71:b7:90:51:92:18:3a:8a:b7:b9:a1:d3:1d:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:2E:A4:26:31:BD:F2:BA:D8:8A:A3:F3:C5:EB:BF:35:06:75:2B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oUUupCYxvfK62Iqj88XrvzUGdSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.44.0/22
Signature Algorithm: sha256WithRSAEncryption
51:45:ed:ab:98:d3:0b:53:5b:43:51:bf:5b:ec:f4:7f:08:3b:
79:76:35:38:82:05:4d:5b:4a:c4:78:8a:3a:2c:45:54:9e:1b:
6c:af:17:a2:49:32:bd:7b:6d:d3:e7:be:61:39:47:0c:00:ca:
7e:1c:33:b2:e4:d2:0d:93:a6:03:30:17:d3:d0:aa:94:fa:ca:
72:06:47:6f:69:12:d2:b9:e1:54:c7:79:bd:9a:2e:4b:3d:4e:
ba:ea:81:f3:9f:d5:d1:3a:95:bb:02:c0:25:28:88:8a:45:32:
9f:85:8a:93:58:93:c2:1f:fd:26:ed:04:83:fc:86:97:05:ef:
f7:7d:9f:0e:f7:e2:bc:b5:d4:2c:5d:09:13:34:4f:27:f9:b1:
a4:de:a1:83:20:fb:3e:4d:70:c1:47:ee:21:35:2c:79:62:41:
1c:55:77:ec:54:0e:d1:7d:88:c4:a1:bb:14:7f:36:4b:14:a8:
ee:b8:7d:52:34:3d:21:42:12:ce:c4:6b:b6:b8:fc:f9:63:20:
b5:70:f5:fc:46:46:88:c8:2d:96:ac:f0:c6:09:f5:6e:92:2a:
48:3e:cb:5f:66:31:1d:9d:1a:51:9b:86:42:f7:c9:b6:6a:7c:
12:86:48:01:f0:c9:84:ce:4f:57:41:21:34:7e:07:22:6d:a5:
c0:cd:c6:59
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMjA5MTUw
MjQ3MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEExNDUyRUE0MjYzMUJE
RjJCQUQ4OEFBM0YzQzVFQkJGMzUwNjc1MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt7CmeXPRu00Wxm5nV6QEa6Z4Ss09kay+aFGSuRm38ltuYSP4J
6thtVQ3d+63oU0AwTwME8k3wVi/ZrtRpSYVVHy8LnMoDBSbmhuWJHWwO2OoGqnwr
GCapRCQJFhuPnrGzNm9XLXsx31ChVqsVNSHv/H6ERCkvnx9YCw9+Nb7niEO37i9M
x7yFNqrV09yx1+1SgHoYfioMxy0zXCPJZfRy1OR0U2sKaanmvuVzpwRl+g10rF0N
t2D7qeeFBBc+yRBDos1P9a/ol5UnsQewhhWXM4yDgreUpn8mnG1CdA2YjpomrUb2
yGvOm/T84o3eT+QdcbeQUZIYOoq3uaHTHYRfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUoUUupCYxvfK62Iqj88XrvzUGdSswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvb1VVdXBDWXh2Zks2Mklx
ajg4WHJ2elVHZFNzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AstNLDANBgkqhkiG9w0BAQsFAAOCAQEAUUXtq5jTC1NbQ1G/W+z0fwg7eXY1OIIF
TVtKxHiKOixFVJ4bbK8XokkyvXtt0+e+YTlHDADKfhwzsuTSDZOmAzAX09CqlPrK
cgZHb2kS0rnhVMd5vZouSz1OuuqB85/V0TqVuwLAJSiIikUyn4WKk1iTwh/9Ju0E
g/yGlwXv932fDvfivLXULF0JEzRPJ/mxpN6hgyD7Pk1wwUfuITUseWJBHFV37FQO
0X2IxKG7FH82SxSo7rh9UjQ9IUISzsRrtrj8+WMgtXD1/EZGiMgtlqzwxgn1bpIq
SD7LX2YxHZ0aUZuGQvfJtmp8EoZIAfDJhM5PV0EhNH4HIm2lwM3GWQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org