Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q1AI89tIvDeATXAP_6BRkqWustQ.roa
File: q1AI89tIvDeATXAP_6BRkqWustQ.roa (raw, json)
Hash identifier: LNzd8S80T9anbE+2CZY8Jn/APOGEIFE5wNZ1/aCk0O0=
Subject key identifier: AB:50:08:F3:DB:48:BC:37:80:4D:70:0F:FF:A0:51:92:A5:AE:B2:D4
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q1AI89tIvDeATXAP_6BRkqWustQ.roa
Signing time: Thu 15 Sep 2022 02:47:09 +0000
ROA not before: Thu 15 Sep 2022 02:47:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.62.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB5008F3DB48BC37804D700FFFA05192A5AEB2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:c1:35:a4:89:91:29:c1:c3:bc:71:f6:ae:
7e:43:71:81:cd:79:91:80:8a:54:18:38:ba:56:10:
25:7c:81:27:43:95:c8:0c:04:e4:95:25:91:b5:4b:
cd:6b:6d:ab:c1:71:3a:86:2b:28:87:22:99:c2:9f:
c5:ac:73:58:8b:25:cf:a5:d7:ac:06:d2:d4:a3:4a:
27:fa:80:cc:18:b4:c2:59:eb:23:b8:d9:c3:c5:c9:
93:1d:fb:7e:6c:d2:5c:f2:47:1d:7c:2a:fb:79:31:
5e:f7:05:85:73:7e:6f:0d:09:bf:74:a4:97:6c:5a:
54:27:04:08:a1:19:29:ec:9c:b5:a2:20:03:9a:cd:
5e:69:dc:18:51:13:a3:86:b3:f4:de:72:4c:b9:06:
72:62:fb:0f:2a:1a:23:00:95:d7:e7:82:38:16:b0:
8f:8a:75:71:13:59:c7:43:d4:a8:84:1c:9a:53:95:
27:61:b9:94:61:c6:c7:c3:67:59:84:63:c5:0d:ad:
b1:52:45:09:b8:54:27:21:42:61:22:fe:87:16:d0:
64:61:89:c1:c4:67:7e:dd:14:ed:a0:78:0f:25:ec:
d7:b1:b8:20:65:a2:b8:9c:1f:69:b1:20:cc:fd:b4:
d8:95:13:4e:74:ef:b1:ea:52:c4:c9:e2:41:0a:f4:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:50:08:F3:DB:48:BC:37:80:4D:70:0F:FF:A0:51:92:A5:AE:B2:D4
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q1AI89tIvDeATXAP_6BRkqWustQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.32.0/19
Signature Algorithm: sha256WithRSAEncryption
25:9c:3e:86:93:de:64:ff:8c:1f:fe:88:7b:af:34:0d:22:d2:
10:49:9c:e6:96:a8:e4:af:8c:3f:1e:10:87:72:fc:a7:b9:d9:
e6:04:50:58:89:25:d3:56:b2:bf:e3:2f:ab:53:e3:62:e7:36:
88:fe:41:0f:be:c4:33:c1:87:76:3f:73:77:88:c1:70:7b:a3:
d2:e6:c5:5c:91:b3:42:f5:25:95:67:77:b0:e6:75:2a:17:de:
79:29:c0:1f:e2:90:ec:70:39:99:1f:ec:c3:18:7d:b4:85:a3:
81:a0:d8:59:bd:2b:f0:02:1c:6a:ef:d4:16:e8:a1:0c:98:d7:
47:b1:40:4e:6b:09:bc:15:16:4f:63:b0:1f:06:fd:02:bd:b4:
c0:69:93:ed:de:02:54:48:6a:2a:cb:e8:b0:0e:d5:7d:3a:a6:
ea:ba:62:20:62:41:ef:8a:bc:03:57:c8:ca:f7:bd:6c:70:d5:
fd:c7:6e:2e:00:20:f6:e1:e3:a1:d9:3d:6a:c3:f2:a1:78:60:
8a:01:50:ef:16:50:33:e5:da:5c:35:18:51:93:f2:49:eb:2a:
57:5d:dc:b7:0d:6e:dd:4f:41:3e:46:63:5c:ca:8d:cd:8d:14:
3f:30:52:86:f3:55:16:3f:ae:50:ad:32:0b:ce:32:22:53:40:
82:93:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org