Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/Ey012H-ECT_YHws3lmeXPFSC6L4.roa
File: Ey012H-ECT_YHws3lmeXPFSC6L4.roa (raw, json)
Hash identifier: GKvuePp+yLUsEx3SvGOlwhWnZtI3Fsqa/WnOgEnqLDs=
Subject key identifier: 13:2D:35:D8:7F:84:09:3F:D8:1F:0B:37:96:67:97:3C:54:82:E8:BE
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 0BDF
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/Ey012H-ECT_YHws3lmeXPFSC6L4.roa
Signing time: Mon 26 Aug 2024 05:20:17 +0000
ROA not before: Mon 26 Aug 2024 05:20:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9676
IP address blocks: 103.123.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 09:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3039 (0xbdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Aug 26 05:20:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=132D35D87F84093FD81F0B379667973C5482E8BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:07:3a:82:6f:c7:81:28:c4:0c:59:5f:0d:
6f:83:3d:bf:ee:a3:23:83:37:0c:c7:d6:67:fb:37:
27:9f:c5:d6:b2:88:38:10:fb:ae:11:91:b3:10:dc:
42:4b:40:87:39:bc:75:5d:3b:8e:39:28:a9:14:00:
7c:8e:79:a7:64:2a:8a:e9:dd:63:d6:77:86:86:34:
b0:51:70:61:e7:f2:38:7c:2f:18:07:f4:8f:2f:bc:
79:b5:2b:16:7c:62:3e:e7:ff:17:a0:04:c3:19:40:
4b:99:f0:2f:88:f7:ed:3e:83:ba:2a:9f:c6:a9:4d:
72:5c:f9:a6:91:c1:f9:14:1e:4f:c5:d3:3c:00:de:
8b:cd:ac:a5:67:56:9e:0b:49:5b:a5:8d:68:60:48:
0e:75:f3:9a:48:28:33:4d:ac:31:e4:e6:85:fe:4e:
27:6c:b9:27:cc:52:c6:d0:27:e6:d7:5e:58:72:8a:
51:8c:7d:22:ec:12:dd:e0:0a:1f:44:ba:99:19:4a:
d6:3e:07:e3:70:a8:df:68:fc:b1:40:bb:dc:c0:bd:
5c:6a:4b:37:26:d1:85:d0:2d:6d:64:79:da:ba:af:
5b:15:ff:c0:2a:84:c6:6e:ea:67:04:27:c2:7b:67:
a0:31:cd:a6:28:12:0f:f5:ca:dd:c3:71:dd:f2:49:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2D:35:D8:7F:84:09:3F:D8:1F:0B:37:96:67:97:3C:54:82:E8:BE
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/Ey012H-ECT_YHws3lmeXPFSC6L4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.0.0/24
Signature Algorithm: sha256WithRSAEncryption
02:04:2b:3d:e6:ad:c2:56:dd:6e:75:1d:ff:b1:74:a7:7a:7a:
4c:ce:87:54:64:c5:ff:44:7c:4e:63:c1:22:d4:94:be:89:db:
61:60:aa:a8:30:40:af:3b:cb:17:5c:2b:b6:41:a4:a9:82:c1:
96:c7:ae:4a:b3:08:7b:7f:ba:8b:aa:45:e5:cb:9b:6f:1c:f1:
d4:0c:ba:0f:45:8c:cd:6c:9d:ac:5d:4a:47:f4:33:88:f7:f5:
00:dd:c2:e7:c6:66:37:9d:8d:04:d0:a0:9c:ce:87:4b:9d:09:
a4:24:6a:d5:10:24:2f:cb:f6:7e:22:cb:d6:8c:5b:f0:45:62:
67:4b:06:9f:f5:93:ba:28:09:13:2b:ce:df:d1:b2:01:63:45:
01:14:3a:30:0f:89:7c:50:e5:2d:92:a3:53:40:6c:19:a9:65:
e1:2b:bc:36:2a:f6:44:ca:15:d4:73:46:cd:f0:8e:91:c0:08:
e9:8c:61:2d:cb:16:12:59:82:3c:c0:ae:53:90:34:f1:f4:36:
6b:55:bb:49:a4:0d:7d:59:44:6b:d7:43:18:80:34:65:c8:af:
1f:fd:6d:a7:29:00:16:2c:1b:01:11:f8:79:75:9a:32:41:74:
75:26:02:db:54:d8:33:21:e2:c3:65:2a:8c:09:a5:f1:9c:d6:
7b:be:55:97
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRURD
MDQ1N0ExNDBCMkQ0MzZDRTdGQUU2N0Q4NDkxQ0ZGQzZFN0YzRTAeFw0yNDA4MjYw
NTIwMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzMkQzNUQ4N0Y4NDA5
M0ZEODFGMEIzNzk2Njc5NzNDNTQ4MkU4QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpuwc6gm/HgSjEDFlfDW+DPb/uoyODNwzH1mf7NyefxdayiDgQ
+64RkbMQ3EJLQIc5vHVdO445KKkUAHyOeadkKorp3WPWd4aGNLBRcGHn8jh8LxgH
9I8vvHm1KxZ8Yj7n/xegBMMZQEuZ8C+I9+0+g7oqn8apTXJc+aaRwfkUHk/F0zwA
3ovNrKVnVp4LSVuljWhgSA5185pIKDNNrDHk5oX+TidsuSfMUsbQJ+bXXlhyilGM
fSLsEt3gCh9EupkZStY+B+NwqN9o/LFAu9zAvVxqSzcm0YXQLW1kedq6r1sV/8Aq
hMZu6mcEJ8J7Z6AxzaYoEg/1yt3Dcd3ySfM/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUEy012H+ECT/YHws3lmeXPFSC6L4wHwYDVR0jBBgwFoAU7cBFehQLLUNs5/rm
fYSRz/xufz4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVUU1dJ
Ti83Y0JGZWhRTExVTnM1X3JtZllTUnpfeHVmejQuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzdjQkZlaFFMTFVOczVfcm1mWVNSel94dWZ6NC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0xFVFNXSU4vRXkwMTJILUVDVF9ZSHdz
M2xtZVhQRlNDNkw0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd7ADANBgkqhkiG9w0BAQsFAAOCAQEAAgQrPeatwlbdbnUd/7F0p3p6TM6HVGTF
/0R8TmPBItSUvonbYWCqqDBArzvLF1wrtkGkqYLBlseuSrMIe3+6i6pF5cubbxzx
1Ay6D0WMzWydrF1KR/QziPf1AN3C58ZmN52NBNCgnM6HS50JpCRq1RAkL8v2fiLL
1oxb8EViZ0sGn/WTuigJEyvO39GyAWNFARQ6MA+JfFDlLZKjU0BsGall4Su8Nir2
RMoV1HNGzfCOkcAI6YxhLcsWElmCPMCuU5A08fQ2a1W7SaQNfVlEa9dDGIA0Zciv
H/1tpykAFiwbARH4eXWaMkF0dSYC21TYMyHiw2UqjAml8ZzWe75Vlw==
-----END CERTIFICATE-----
Generated at Mon Oct 14 11:33:27 2024 by rpki-client on console-fra.rpki-client.org