Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yMdrd7i5kZP-XnrMa0QCV04purE.roa
File: yMdrd7i5kZP-XnrMa0QCV04purE.roa (raw, json)
Hash identifier: 65dMlfj6FI0TkDNT6o7HyYwyKljWKBYdrdAsaPizTl4=
Subject key identifier: C8:C7:6B:77:B8:B9:91:93:FE:5E:7A:CC:6B:44:02:57:4E:29:BA:B1
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yMdrd7i5kZP-XnrMa0QCV04purE.roa
Signing time: Thu 15 Sep 2022 02:46:54 +0000
ROA not before: Thu 15 Sep 2022 02:46:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 210.67.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C8C76B77B8B99193FE5E7ACC6B4402574E29BAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:cf:46:be:bd:7c:12:eb:65:74:76:fc:17:
bd:9c:e1:49:4e:40:9d:5a:8f:96:bd:b1:f6:74:c4:
1c:9f:61:c4:30:f1:af:40:85:09:0f:64:76:46:ee:
99:e2:43:aa:bc:1d:27:06:b3:3a:d7:5e:6e:65:b3:
4b:45:35:78:41:0e:02:39:fb:fc:06:dc:ed:b5:c7:
3c:9f:bb:c8:5a:16:f3:20:8c:77:a4:41:01:b4:e1:
c2:4a:3e:e4:1f:99:09:70:e4:65:67:a7:b4:df:89:
8d:dc:e6:68:31:8b:be:3b:8f:3f:8a:9c:9a:92:3a:
f0:17:39:72:4a:99:a7:5a:b8:35:16:a9:ab:6d:82:
61:29:34:73:e2:0b:44:10:37:84:4a:ab:f8:b8:65:
e9:74:53:f2:81:bb:ca:90:0b:ca:dc:f2:a1:ff:34:
15:1a:fb:e0:37:ba:c1:1a:16:fa:0f:f7:eb:e1:46:
22:91:49:f7:e2:51:3f:50:5f:7d:e9:d2:89:f5:14:
87:ef:49:9a:4a:4b:07:49:8c:b4:68:65:47:14:24:
97:4d:f9:22:b8:b1:4c:7d:e5:83:be:27:ea:90:c7:
23:8e:d8:dd:08:c0:36:94:1d:27:07:c9:52:29:0d:
04:e9:31:fa:e0:48:15:1d:4d:6e:e4:d2:5a:e9:5f:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:6B:77:B8:B9:91:93:FE:5E:7A:CC:6B:44:02:57:4E:29:BA:B1
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yMdrd7i5kZP-XnrMa0QCV04purE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:00:65:27:f0:bb:2b:b1:72:d5:ac:47:f4:eb:e7:82:fd:d6:
6d:9f:51:e7:e0:d9:75:1e:fb:04:b8:14:f7:4e:e2:1c:9b:3f:
e2:86:05:ea:bd:67:32:a9:32:6f:2c:cb:ea:93:f5:48:3a:1d:
e3:d6:78:03:38:99:73:10:7d:87:4d:f1:46:1f:a2:cf:2f:4b:
af:60:2f:4b:ef:ee:6f:c7:42:f6:79:28:27:13:9b:77:a8:33:
0c:16:d8:62:05:1a:e7:d2:17:c2:54:96:fc:cc:b8:e7:fc:a7:
31:55:6d:8b:ee:a7:bb:79:d6:ba:d6:9f:63:6a:fb:e4:2f:c6:
5d:9f:bb:5d:d9:80:6c:6c:4e:1c:c0:52:f7:54:74:bc:3e:31:
68:70:8d:da:8b:a1:3f:78:35:6d:99:1b:16:1f:e9:1b:31:13:
d1:48:6c:9f:7b:97:4c:0a:ed:23:35:35:32:58:9b:f7:8b:5f:
ae:4e:7f:53:f4:82:40:33:11:be:f8:db:81:eb:7a:ac:db:34:
36:da:73:d7:6d:f5:b4:e5:d3:15:42:56:2e:9b:32:75:6c:ec:
52:ce:bd:47:21:d6:8f:dc:31:b6:e6:24:bf:b2:0c:e6:c1:1f:
9d:07:ec:5a:09:ea:18:90:9e:90:40:7a:ec:ad:9c:10:7e:4b:
e1:9d:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org