Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/eS_SX780kiUdrGyqCeKPc-xTI1s.roa
File: eS_SX780kiUdrGyqCeKPc-xTI1s.roa (raw, json)
Hash identifier: CZfqLxYhxmcokTyhytO6CBrztQODru18v/mKon19NEk=
Subject key identifier: 79:2F:D2:5F:BF:34:92:25:1D:AC:6C:AA:09:E2:8F:73:EC:53:23:5B
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 09C1
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/eS_SX780kiUdrGyqCeKPc-xTI1s.roa
Signing time: Wed 06 Jul 2022 07:02:54 +0000
ROA not before: Wed 06 Jul 2022 07:02:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9676
IP address blocks: 103.123.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Jul 6 07:02:54 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=792FD25FBF3492251DAC6CAA09E28F73EC53235B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:10:1e:71:8a:86:6a:72:db:2a:63:79:5f:
29:b6:8c:90:ae:4a:3c:63:1f:72:0e:ab:f2:7c:c7:
aa:8e:bd:a4:08:47:18:6e:a9:53:88:12:52:f1:08:
e5:29:d9:f8:5e:27:ad:bc:e1:ba:2c:27:ac:22:b5:
1f:fd:db:61:aa:d0:73:bb:bd:24:a5:e7:f5:52:99:
ba:c9:6c:21:f0:bc:b4:71:de:94:7e:3b:f9:65:74:
f7:f4:da:86:23:b6:80:15:8f:1e:bc:bd:9e:17:0c:
d6:1d:64:87:7c:ec:25:3b:02:2a:f7:60:48:d1:a6:
5c:9c:96:7d:1d:ac:89:d9:99:b1:7d:85:b8:6e:89:
0f:02:b8:2f:80:1d:c3:75:ec:b4:9c:1d:1c:5e:3f:
cd:22:62:05:fb:29:a4:26:6e:3b:51:f9:1e:41:9c:
7e:4c:cb:aa:0e:5a:ca:b5:3d:98:b5:07:9c:6d:cb:
5f:30:20:33:2b:4c:c9:d8:76:91:40:ba:a3:ec:2e:
8d:00:31:0f:1e:11:e2:c5:91:38:7a:71:03:03:3a:
d0:25:db:d6:6c:c3:1d:c6:2a:1d:1c:ee:76:e0:2c:
20:70:94:d6:a7:cf:9a:9c:50:75:47:a8:7d:7e:c3:
68:28:92:a2:34:73:b7:67:0f:16:29:24:11:d9:ad:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:D2:5F:BF:34:92:25:1D:AC:6C:AA:09:E2:8F:73:EC:53:23:5B
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/eS_SX780kiUdrGyqCeKPc-xTI1s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.3.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ee:89:3a:a5:78:6a:c8:41:ba:99:ee:d3:0e:cd:8c:eb:22:
ad:b3:dd:bc:30:d3:1d:48:47:8a:1a:80:9d:fc:24:04:e2:44:
64:d5:37:bb:8c:e8:6b:ac:d0:55:be:aa:3f:06:c9:31:77:be:
a9:62:ce:de:16:5a:86:9b:62:b2:76:15:cc:ef:99:18:4e:c2:
02:6d:1f:ef:5e:6c:7a:c8:f3:48:ad:ac:9f:52:9f:4a:30:9f:
e5:57:a1:9b:ec:6d:a4:76:ad:96:ce:d7:65:47:82:8b:39:9a:
65:58:90:68:e4:c4:bd:af:3b:f7:78:d2:67:0a:75:56:2b:46:
1a:e3:be:0b:d3:ce:54:e1:77:2a:4a:b8:71:16:c2:19:22:d1:
98:65:ca:47:29:e4:57:58:f3:87:46:4f:13:d4:38:b1:fa:a7:
53:f7:94:2b:2b:02:43:6d:47:d0:87:d3:40:1d:a8:41:c5:c2:
d9:89:fd:94:b4:f4:60:d1:40:d0:73:ab:82:c2:d2:56:a5:ea:
ab:b9:f3:58:2e:97:1a:94:da:8f:de:d4:09:c4:87:39:6c:5a:
93:be:2e:24:18:27:32:84:69:c2:30:81:c6:79:c7:d9:12:79:
27:2f:f3:c6:2a:88:83:8f:5c:a3:c3:af:e1:0d:c5:ea:58:3f:
78:1a:3b:6a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRURD
MDQ1N0ExNDBCMkQ0MzZDRTdGQUU2N0Q4NDkxQ0ZGQzZFN0YzRTAeFw0yMjA3MDYw
NzAyNTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc5MkZEMjVGQkYzNDky
MjUxREFDNkNBQTA5RTI4RjczRUM1MzIzNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnbBAecYqGanLbKmN5Xym2jJCuSjxjH3IOq/J8x6qOvaQIRxhu
qVOIElLxCOUp2fheJ6284bosJ6witR/922Gq0HO7vSSl5/VSmbrJbCHwvLRx3pR+
O/lldPf02oYjtoAVjx68vZ4XDNYdZId87CU7Air3YEjRplycln0drInZmbF9hbhu
iQ8CuC+AHcN17LScHRxeP80iYgX7KaQmbjtR+R5BnH5My6oOWsq1PZi1B5xty18w
IDMrTMnYdpFAuqPsLo0AMQ8eEeLFkTh6cQMDOtAl29Zswx3GKh0c7nbgLCBwlNan
z5qcUHVHqH1+w2gokqI0c7dnDxYpJBHZrQ7XAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUeS/SX780kiUdrGyqCeKPc+xTI1swHwYDVR0jBBgwFoAU7cBFehQLLUNs5/rm
fYSRz/xufz4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVUU1dJ
Ti83Y0JGZWhRTExVTnM1X3JtZllTUnpfeHVmejQuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzdjQkZlaFFMTFVOczVfcm1mWVNSel94dWZ6NC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0xFVFNXSU4vZVNfU1g3ODBraVVkckd5
cUNlS1BjLXhUSTFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd7AzANBgkqhkiG9w0BAQsFAAOCAQEAiO6JOqV4ashBupnu0w7NjOsirbPdvDDT
HUhHihqAnfwkBOJEZNU3u4zoa6zQVb6qPwbJMXe+qWLO3hZahptisnYVzO+ZGE7C
Am0f715sesjzSK2sn1KfSjCf5Vehm+xtpHatls7XZUeCizmaZViQaOTEva8793jS
Zwp1VitGGuO+C9POVOF3Kkq4cRbCGSLRmGXKRynkV1jzh0ZPE9Q4sfqnU/eUKysC
Q21H0IfTQB2oQcXC2Yn9lLT0YNFA0HOrgsLSVqXqq7nzWC6XGpTaj97UCcSHOWxa
k74uJBgnMoRpwjCBxnnH2RJ5Jy/zxiqIg49co8Ov4Q3F6lg/eBo7ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org