Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa
File: ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa (raw, json)
Hash identifier: ConnyrFLl1AZF3uHaxCpPWDywB415sEKJn6AqT7Jt10=
Subject key identifier: B2:C4:FD:29:3C:B9:14:3E:8B:B2:5C:09:F1:2C:72:E0:32:B1:EE:87
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 11DE
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa
Signing time: Mon 26 Aug 2024 05:24:28 +0000
ROA not before: Mon 26 Aug 2024 05:24:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24164
IP address blocks: 203.77.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 14:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4574 (0x11de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 26 05:24:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B2C4FD293CB9143E8BB25C09F12C72E032B1EE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:75:40:9a:75:58:62:9b:fe:1d:64:9e:f8:
9d:2d:db:0e:c9:2f:d7:28:80:70:d1:08:68:ca:c5:
45:ad:ac:25:1e:03:0d:9a:62:6e:25:44:2f:d7:46:
cd:97:71:37:b0:56:ad:c1:89:24:85:4e:d9:23:f7:
88:64:6c:22:34:94:fe:64:57:1f:7c:80:bb:8f:b8:
75:63:bc:87:fb:27:a6:fb:11:32:4a:33:35:84:d3:
23:77:23:b0:ab:9e:29:c9:29:87:0b:f9:5f:81:bd:
da:c0:66:28:30:18:52:1a:56:70:ee:29:c5:ea:26:
3f:5d:5d:9c:12:f2:01:28:a3:2f:45:74:e0:41:5e:
a6:4f:4d:38:a4:af:8d:64:43:93:45:78:6b:3a:d3:
2a:65:a9:33:8d:04:52:bf:10:c7:ef:76:18:df:6b:
6b:61:22:8d:72:1d:a6:37:c9:08:4f:0c:96:01:1e:
df:c7:87:27:ef:f1:34:fd:43:a0:ed:ee:2c:56:c1:
82:f8:78:75:71:55:96:bb:31:4a:c4:09:73:25:83:
0d:bd:aa:0f:b1:b8:2a:ff:1d:76:fb:91:a2:f0:48:
72:a7:a3:3f:6c:f6:02:aa:36:85:11:12:90:c8:61:
c8:8e:32:a7:5c:2a:7d:f3:18:ed:d7:3c:39:21:63:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:FD:29:3C:B9:14:3E:8B:B2:5C:09:F1:2C:72:E0:32:B1:EE:87
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f5:23:b6:29:bc:bf:00:5d:ad:32:57:73:25:fe:7f:f6:ac:
25:a5:03:db:cb:10:49:b5:4e:77:3e:28:7a:2c:01:d1:5a:03:
c2:72:74:b4:6f:3b:ef:b2:90:f7:01:a6:91:73:4e:f6:ca:42:
58:e9:d3:ac:4b:db:67:57:bd:be:7b:c7:8f:62:2b:bf:df:07:
07:99:af:e5:27:84:4a:31:c2:93:bf:1f:50:e5:d4:51:f4:ba:
c6:4e:4f:52:91:d3:ef:fd:6a:7b:22:ba:1a:52:04:37:c5:ff:
74:8e:b1:67:bd:e3:da:a0:b4:e4:7c:e1:00:4c:42:0b:00:f3:
c1:7a:65:e9:73:2c:c4:94:86:21:7c:fd:32:21:cb:6f:ea:c7:
0d:57:27:e3:cf:1c:f8:72:d3:e2:dc:c6:aa:60:de:bf:d0:f8:
d6:32:75:6e:ff:74:6f:6d:87:73:e0:bf:84:33:c8:93:52:7b:
a6:9c:4f:0e:e1:7d:d6:42:fa:89:2e:67:63:19:35:5d:b6:f5:
8d:38:ad:94:ba:9b:dd:e8:69:a6:da:38:63:10:a3:c0:9f:0f:
86:af:a3:f1:7f:52:ac:96:c8:7c:0a:dd:56:45:55:98:df:cd:
18:b5:03:84:9a:97:8a:3c:9c:6a:57:28:66:5c:12:08:95:ab:
24:12:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:05:00 2025 by rpki-client