Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zLs_lB0agmE7KV0IMNJoNUmKd-Y.roa
File: zLs_lB0agmE7KV0IMNJoNUmKd-Y.roa (raw, json)
Hash identifier: LyglVldsbQsmHfGKhXdk/R7jmRzcQgHtOh+LLFpeC0w=
Subject key identifier: CC:BB:3F:94:1D:1A:82:61:3B:29:5D:08:30:D2:68:35:49:8A:77:E6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DC9
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zLs_lB0agmE7KV0IMNJoNUmKd-Y.roa
Signing time: Thu 15 Sep 2022 02:46:52 +0000
ROA not before: Thu 15 Sep 2022 02:46:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24158
IP address blocks: 203.105.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 15 02:46:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CCBB3F941D1A82613B295D0830D26835498A77E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:27:9f:00:8a:94:d8:c3:ee:75:65:4c:ee:
63:7f:09:03:57:b5:f0:60:98:74:bb:04:f3:1a:f6:
4a:9c:9c:24:97:c1:e7:d7:83:88:a3:56:c1:9f:01:
8c:35:fb:07:d1:4b:78:9e:70:3b:b6:60:21:3e:82:
6e:3e:cb:09:f9:f3:ee:a7:17:06:16:57:07:96:ad:
a7:d3:1e:3c:5f:70:38:7b:36:95:bf:b4:d6:8e:38:
ae:cb:78:a1:bf:67:9c:94:27:72:54:1e:ef:37:08:
a4:e0:32:34:d3:72:d7:6f:b1:38:0b:9b:f7:64:7b:
bb:ae:36:55:66:db:a0:39:0b:cd:d4:a3:91:a1:b2:
35:76:f8:30:76:a0:c3:83:16:c9:8b:24:d7:42:5e:
96:ce:82:7a:58:f7:e0:dd:2d:dc:49:fe:dc:d0:61:
aa:41:2c:cb:c1:66:af:3a:4c:10:0f:e8:a3:3f:fd:
a2:f0:b0:9a:d9:44:7b:a6:b8:e5:b4:8a:a6:43:6f:
f7:fe:6f:ea:cd:67:1e:56:e9:26:6b:da:0f:9d:9a:
cb:8a:cb:a4:f5:51:97:98:e7:1b:68:b8:7b:11:d0:
5d:36:44:de:06:91:ea:56:30:82:a3:4f:2b:b3:29:
1f:98:97:55:9f:07:8b:4d:88:1f:b6:27:08:64:4a:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:3F:94:1D:1A:82:61:3B:29:5D:08:30:D2:68:35:49:8A:77:E6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zLs_lB0agmE7KV0IMNJoNUmKd-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.224.0/24
Signature Algorithm: sha256WithRSAEncryption
78:02:9b:af:03:39:2f:5d:6a:8c:31:b1:44:7b:95:4e:a0:48:
bf:a2:bf:33:91:74:01:8f:6f:1d:cb:9c:0c:6d:5d:2a:94:48:
63:3d:18:ff:0b:59:1d:1d:ca:7e:9f:d1:70:59:bf:b3:46:85:
5c:de:47:b2:6f:3f:8f:06:c9:6a:84:29:4b:b7:69:07:03:61:
60:87:2c:cb:fd:3b:f7:7b:8d:a2:17:52:8d:3c:f4:5c:0a:d8:
20:3a:f5:1c:8e:60:0c:6d:bb:2f:11:e3:26:58:37:b1:33:61:
17:41:ca:ca:38:94:58:74:c3:8d:76:39:d0:35:2f:1d:5c:b9:
af:5b:0e:4a:3c:b6:15:e2:41:d1:cd:de:fc:05:a0:ef:16:e1:
e4:92:b6:2e:c8:7c:46:c3:26:56:23:4f:b0:49:db:a0:e5:77:
4c:ad:67:33:a8:b5:75:e3:3f:3d:5c:8c:61:13:fb:09:26:9b:
3e:31:fe:e6:04:a7:7e:6b:ed:72:f9:1e:4c:4f:26:bc:d3:5a:
ba:64:41:40:c5:1a:20:61:21:12:00:3f:3d:2a:3e:ae:08:d9:
69:63:2a:cd:0b:01:c6:4b:83:f8:e9:17:bf:50:25:c5:19:26:
77:3c:ed:d6:59:4f:09:f0:7a:31:ea:c1:de:10:ff:6c:ef:86:
e3:55:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org