Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rT4CrX4M5rVe4fbe7izFkWIFfHg.roa
File: rT4CrX4M5rVe4fbe7izFkWIFfHg.roa (raw, json)
Hash identifier: tt6iGMoWcExPFynY1ZEmwx298idbDs52rDTWMvnYIME=
Subject key identifier: AD:3E:02:AD:7E:0C:E6:B5:5E:E1:F6:DE:EE:2C:C5:91:62:05:7C:78
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rT4CrX4M5rVe4fbe7izFkWIFfHg.roa
Signing time: Thu 15 Sep 2022 02:47:08 +0000
ROA not before: Thu 15 Sep 2022 02:47:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.78.208.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:47:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AD3E02AD7E0CE6B55EE1F6DEEE2CC59162057C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:39:e1:80:7b:fd:9f:70:33:d6:66:b9:14:
6a:36:1c:d2:b6:3f:4a:5a:ed:59:3f:d7:ac:11:c9:
9e:b3:29:35:29:d3:cf:52:7d:4f:d8:6d:48:6c:ce:
7a:c1:a2:a2:53:00:2b:1f:be:63:cb:9a:bc:42:82:
b0:64:f7:a7:4e:70:89:e1:fd:b3:21:4d:15:c5:f4:
69:17:49:67:77:ca:7c:53:96:b0:18:9e:b2:00:e6:
84:30:cc:e1:25:cf:ae:4d:28:ad:4c:3a:3d:33:8e:
df:0c:18:45:c1:fb:c8:c3:0e:28:4b:0c:ca:9a:30:
7a:9e:b2:27:30:59:ab:05:58:2c:52:68:59:3f:c2:
06:f5:04:10:9b:df:1b:e6:20:0c:9f:e1:bc:78:54:
56:0f:43:be:d1:16:b5:a9:96:30:9a:41:01:02:4d:
6c:ff:e6:3c:5c:a8:fd:a4:e9:17:aa:05:f0:1e:25:
96:76:47:94:60:b2:54:da:24:20:5c:65:6a:b1:54:
1b:2d:a7:8a:56:bf:53:b5:af:18:67:33:8a:5e:43:
29:71:62:2e:47:d7:61:25:f7:84:f4:00:5d:f9:31:
58:e2:36:6f:60:e8:ad:cd:c0:dc:87:92:44:56:53:
a0:fc:20:bc:26:e7:d9:d9:b7:d6:8d:89:0c:95:fa:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:02:AD:7E:0C:E6:B5:5E:E1:F6:DE:EE:2C:C5:91:62:05:7C:78
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rT4CrX4M5rVe4fbe7izFkWIFfHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:ef:83:73:2a:f4:a8:99:4f:2f:4d:16:21:70:6e:c2:b6:d8:
be:e4:ee:2e:a2:4a:0d:05:4b:bc:77:8d:7d:05:68:f8:f7:6b:
78:9d:ba:b9:24:9d:18:89:97:54:41:52:bd:af:5c:b3:52:22:
29:f5:84:fb:e0:21:b1:fa:56:df:99:12:e6:0e:27:1c:b2:e4:
b5:7e:1b:57:84:c4:15:49:61:ee:f3:f8:db:29:30:54:a8:a3:
0d:32:e2:6d:ee:53:da:c7:cb:12:2e:ab:85:66:5b:42:63:75:
55:86:38:4b:b2:76:ab:7c:33:1e:cb:6c:02:69:41:4f:81:87:
0f:7e:c1:4c:ab:e4:27:d6:c1:05:30:52:cf:0c:d6:20:ee:0d:
9b:25:a2:04:9b:80:b3:fd:d5:cb:bc:67:51:88:9f:ff:45:44:
73:0d:9d:b1:e7:3b:8a:00:05:94:e6:0d:91:6b:0c:f4:3e:87:
96:de:9a:3f:8c:85:2b:a3:a9:c8:aa:a3:66:4a:e0:00:c5:7b:
da:65:c6:90:89:c0:67:20:54:f7:bc:59:a7:33:63:cf:a7:4d:
38:00:7b:75:4c:59:d6:80:7b:5b:9b:92:8d:e4:8e:d7:29:e6:
4e:e2:2d:42:e8:b5:10:ff:47:ac:77:f8:d7:27:7a:6d:4f:9d:
8a:95:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org