Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa
File: zlbTOz3OwHjL_3l71p2kAqYWrhM.roa (raw, json)
Hash identifier: M1x6RFccxNEmSFzivBh5veMXtaLa7zBAxUc0nA76WwI=
Subject key identifier: CE:56:D3:3B:3D:CE:C0:78:CB:FF:79:7B:D6:9D:A4:02:A6:16:AE:13
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10BC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa
Signing time: Mon 26 Aug 2024 05:16:44 +0000
ROA not before: Mon 26 Aug 2024 05:16:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131591
IP address blocks: 103.231.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4284 (0x10bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE56D33B3DCEC078CBFF797BD69DA402A616AE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:a0:62:df:ac:78:c3:2f:bb:e9:ba:63:25:
74:57:7f:68:44:1c:00:ca:fd:31:a1:a1:fd:bf:4e:
df:7f:d4:14:ea:cb:b3:38:b2:7c:2b:48:53:68:d1:
e2:c7:a6:65:94:f8:81:97:0e:11:9a:47:0e:09:46:
90:f0:bf:02:da:30:a8:26:95:14:f6:67:1b:90:e5:
49:81:de:91:de:eb:54:97:56:6d:46:4c:f2:03:04:
82:5a:09:4a:54:2d:c9:9d:70:dd:b5:8a:92:06:d1:
9c:3f:83:f2:3a:c3:ed:a9:5c:e2:5a:34:61:6d:ad:
03:bd:b3:f6:8d:ec:5b:03:2e:94:51:3b:27:98:3f:
54:d6:39:e7:c2:ff:57:e0:1e:cd:33:e0:a3:82:68:
ca:7c:92:0d:46:9d:6d:d1:67:a7:62:34:e5:38:da:
79:9a:6a:45:09:69:35:9c:83:7a:42:14:ac:56:fa:
a8:01:04:cd:01:96:b7:e0:4a:1a:dd:24:69:40:9e:
a8:c9:2d:e0:82:7f:4a:49:3a:46:1b:66:36:07:b6:
12:25:1a:bf:4f:92:2b:ac:0b:c0:63:3b:9a:7b:cd:
e7:5b:8e:2b:17:bc:a7:04:a8:25:52:3d:80:fa:2c:
85:f7:1f:7e:e9:4d:dc:0d:de:52:2a:c0:33:05:c6:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:D3:3B:3D:CE:C0:78:CB:FF:79:7B:D6:9D:A4:02:A6:16:AE:13
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.48.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:ae:93:a8:61:e6:25:cc:ce:32:5e:60:ce:b0:f9:ae:21:
38:31:50:bd:29:9c:38:1a:33:f4:5d:70:17:7f:45:a2:08:a2:
be:2f:e1:ee:14:a9:4b:e0:69:e7:53:d5:66:6d:ec:39:0f:5d:
7b:30:6d:95:23:3d:df:c6:ca:f5:18:e2:c2:76:9c:05:bd:43:
83:28:8c:67:70:f1:f3:9e:e4:a6:84:11:6a:a5:b5:b6:6e:d7:
4b:d2:17:20:24:4e:97:86:0c:49:68:a1:7b:9c:2a:32:a8:9f:
67:16:a0:bb:ef:a2:f2:d1:50:a5:bc:07:d5:96:ef:e2:21:ac:
35:6a:15:eb:a2:57:2e:9d:e3:e8:17:79:f3:41:c6:fd:1e:0d:
8c:ca:de:cb:5e:c8:eb:ca:8a:b4:8b:69:6f:55:a0:12:32:36:
71:de:5b:f0:63:e7:03:fa:0a:82:a2:48:80:88:a1:9b:f4:f8:
7a:90:f4:4f:11:26:1b:d2:34:b1:ad:bb:39:45:ff:0d:96:47:
84:43:26:4a:13:23:8a:c0:97:33:2a:af:6c:da:6f:37:27:b0:
4a:b5:45:98:69:8e:3f:a4:86:a8:54:87:56:f0:52:d6:12:97:
c0:f3:3e:a3:7f:28:ca:f4:00:ee:95:f7:f0:22:ab:17:e4:04:
1f:4d:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:28 2025 by rpki-client