Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa
File: 4SmXbPaKP4zEgURZomCUFJLyF2o.roa (raw, json)
Hash identifier: nafQ1/1ErKGHaxnLp2N8WoBjsjmeaINLk3VlkN/F4BQ=
Subject key identifier: E1:29:97:6C:F6:8A:3F:8C:C4:81:44:59:A2:60:94:14:92:F2:17:6A
Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial: 0231
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa
Signing time: Mon 26 Aug 2024 05:13:40 +0000
ROA not before: Mon 26 Aug 2024 05:13:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38136
IP address blocks: 103.160.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Validity
Not Before: Aug 26 05:13:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E129976CF68A3F8CC4814459A260941492F2176A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:41:27:fe:d2:c4:60:65:4a:cc:2a:d6:a4:
19:8a:da:55:db:e8:ec:45:42:95:93:9e:38:a7:79:
19:49:a8:9c:80:1b:07:01:2f:f3:c6:93:41:44:d7:
09:ce:c0:37:fc:d2:d9:af:52:a7:0f:93:36:6a:99:
86:4d:7b:af:b5:c0:e4:79:a9:fd:dd:2e:69:91:31:
39:58:6b:57:59:14:a3:9a:ed:48:74:b0:fe:67:66:
2a:a8:12:f0:af:1c:91:89:93:a8:bc:66:44:99:38:
19:4a:9a:a9:ee:f5:f6:77:ea:6d:28:53:e2:ed:73:
91:7a:24:e7:f4:30:56:75:15:a5:1b:3f:c8:6a:46:
f0:a8:5c:4d:4c:5b:fb:3c:1c:c3:27:76:32:b2:b6:
6a:3c:50:b5:56:8d:43:62:01:46:d0:a7:31:e5:1b:
39:90:f6:d0:b9:72:f7:a3:ea:9d:9c:00:4d:c6:e7:
23:d6:3b:38:b9:45:e4:b2:e1:7f:42:44:19:ef:a9:
81:0e:50:d8:e6:40:d8:82:c6:03:1a:71:b4:3f:31:
26:f3:e3:c9:19:87:8f:92:a5:ba:d6:85:ac:54:0e:
5e:62:27:a4:3b:1b:87:7e:83:bf:33:51:d9:00:65:
88:6b:cf:35:bd:43:55:db:26:ef:93:8c:ac:cc:13:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:97:6C:F6:8A:3F:8C:C4:81:44:59:A2:60:94:14:92:F2:17:6A
X509v3 Authority Key Identifier:
keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.180.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:a0:97:eb:77:30:7e:f7:0a:8c:b8:d7:df:48:36:e0:81:ec:
f2:11:ee:a2:f9:34:fe:58:10:c5:0f:fe:a5:c2:e9:dc:6b:5f:
45:28:34:b3:5a:92:50:83:74:a7:3e:cc:2e:e8:e2:d0:09:34:
1e:c5:d6:46:c0:71:11:b1:a6:48:5f:d7:7e:83:a7:45:75:0c:
c9:e9:32:97:77:8b:58:2b:2d:61:cc:8a:c1:0a:57:82:c2:3f:
3d:fb:1d:41:e1:b8:c7:ad:3a:ff:4a:36:47:1b:64:0a:84:96:
93:02:fa:60:37:e9:a0:94:76:80:db:d5:f8:cf:b2:4a:89:7e:
7e:06:55:91:56:b5:2d:34:82:95:76:89:5e:8f:05:6b:6b:a2:
47:ab:6c:8e:dc:c8:56:e7:27:3b:f0:63:87:c7:7e:92:33:ab:
b7:4f:35:25:fe:43:d5:1a:08:02:e0:78:6c:36:d0:87:61:06:
80:3f:3b:a1:43:50:ec:4c:af:c1:89:f4:98:cd:c3:0a:a5:56:
d1:67:4e:ab:b1:dd:0f:ab:0e:ab:38:1a:38:a6:19:ff:9e:b7:
99:3f:c0:3c:76:30:45:1c:5e:a2:86:56:97:e2:b4:a7:e5:31:
6b:38:3e:ed:94:92:a0:11:d4:3a:63:a4:d8:82:e2:23:b4:0d:
83:6e:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:52:58 2025 by rpki-client