Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TvmKyqmF_svaJvHaJPH3NqBAWbM.roa
File: TvmKyqmF_svaJvHaJPH3NqBAWbM.roa (raw, json)
Hash identifier: pEMJGBwE2BvsmHcWk6v2GTyuRLJsL4fdkYG6Y+5oPNU=
Subject key identifier: 4E:F9:8A:CA:A9:85:FE:CB:DA:26:F1:DA:24:F1:F7:36:A0:40:59:B3
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 0BDE
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TvmKyqmF_svaJvHaJPH3NqBAWbM.roa
Signing time: Mon 26 Aug 2024 05:20:16 +0000
ROA not before: Mon 26 Aug 2024 05:20:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9676
IP address blocks: 103.123.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 09:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Aug 26 05:20:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EF98ACAA985FECBDA26F1DA24F1F736A04059B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:19:64:d9:8c:10:82:ab:e7:a5:c7:d7:54:
7c:d0:b7:e2:92:be:c8:19:7d:93:de:6b:94:db:05:
12:87:36:4a:cf:9d:5a:8e:fb:0f:de:0d:91:2c:a3:
d1:89:7d:7d:4b:e4:06:05:5b:94:b0:36:08:4c:0d:
de:8e:41:53:a8:ed:b3:0a:51:79:bd:02:74:97:40:
2c:71:67:7d:8d:e6:b2:df:54:ed:f7:2a:3a:a0:51:
d4:5e:87:dc:d3:74:b1:63:c6:e1:f0:2f:00:a5:df:
bb:52:10:02:6f:ba:c0:a1:6e:79:2e:b1:15:f5:e1:
63:7f:f6:90:f6:2d:b7:6f:ec:d2:63:b9:e2:7a:95:
e9:01:1b:49:21:9f:4b:a7:82:29:93:ab:d3:bf:53:
56:7b:cd:90:73:75:00:43:5e:67:aa:08:ec:12:60:
d5:5a:a4:88:ad:fc:03:e3:cf:8f:20:3a:b8:1e:58:
13:9d:14:91:59:bc:b4:a5:29:72:63:47:d0:81:3f:
b7:0a:69:a7:39:ff:14:37:a4:3e:2c:70:f4:15:d0:
c9:98:b9:91:85:93:3f:6d:e6:30:bf:99:c6:93:d1:
55:63:1d:34:5d:e3:9c:1e:ed:d1:35:0d:f7:62:78:
a5:2d:2e:f4:c0:5b:21:23:c4:7f:a5:e1:6e:41:ac:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:8A:CA:A9:85:FE:CB:DA:26:F1:DA:24:F1:F7:36:A0:40:59:B3
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TvmKyqmF_svaJvHaJPH3NqBAWbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b9:a9:c0:e4:4e:b4:80:ae:89:1b:31:d6:75:85:87:57:82:
ea:a6:6f:a7:cf:75:90:17:00:92:16:20:3d:93:63:01:db:75:
6b:4a:65:64:49:6a:58:4f:47:37:02:67:70:68:43:48:7a:6e:
94:b0:cb:5b:bf:ce:e7:d5:47:36:5e:dc:99:4c:e6:3f:02:29:
7c:38:30:74:55:31:67:c5:d6:1f:89:63:2e:c2:62:a6:37:9d:
cc:25:4c:23:16:1e:92:80:22:f8:af:13:e6:6c:e4:7f:90:4a:
ae:f5:6e:29:4a:7e:cf:36:4e:9e:d2:05:bc:73:91:8f:d7:7f:
8a:05:e2:9d:00:d6:c1:58:8b:48:ad:0e:4e:c6:34:6c:49:e7:
51:db:3d:fb:b3:46:f3:c2:b4:ba:33:37:85:fc:1f:5d:65:04:
4a:92:a0:79:4a:28:70:45:aa:53:d1:86:a1:f3:c3:eb:f0:66:
3e:42:1c:71:d4:00:7f:34:8e:87:57:0e:89:cc:98:f7:ba:a9:
c2:3c:f6:f0:37:53:af:dd:8c:33:bb:f9:d1:fe:72:d1:4e:a1:
f7:aa:63:f7:ef:76:e6:3d:7b:85:0b:6a:dc:30:8a:53:fa:07:
da:a3:c3:c1:39:06:65:fd:ff:d8:a6:7e:9c:a9:1c:d4:8c:58:
95:53:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 11:30:53 2024 by rpki-client on console-ams.rpki-client.org