Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/61-3O6x6ua_O2eZiY1Tqyl8Myvw.roa
File: 61-3O6x6ua_O2eZiY1Tqyl8Myvw.roa (raw, json)
Hash identifier: LM8ST5HulGDHS6ArprZAu+O2zS0Ii2a2b5Rxj/oKSas=
Subject key identifier: EB:5F:B7:3B:AC:7A:B9:AF:CE:D9:E6:62:63:54:EA:CA:5F:0C:CA:FC
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0702
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/61-3O6x6ua_O2eZiY1Tqyl8Myvw.roa
Signing time: Mon 10 Feb 2025 14:22:51 +0000
ROA not before: Mon 10 Feb 2025 14:22:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 103.98.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Feb 10 14:22:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EB5FB73BAC7AB9AFCED9E6626354EACA5F0CCAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:ec:3b:cd:45:29:b3:9c:55:73:7e:6b:da:
11:b7:5b:26:8f:25:c2:a0:06:06:68:76:22:89:79:
b3:c0:31:8b:5c:86:c2:ae:65:f3:77:fc:37:86:24:
0c:3c:86:c8:79:c4:82:4b:62:05:43:3d:46:92:00:
d3:18:a1:dc:66:95:5b:4c:89:ac:5d:c2:e7:87:83:
c8:2b:ce:dc:50:b3:3d:02:77:16:d8:e8:fe:73:2e:
15:32:45:fa:37:be:9c:f5:71:31:93:e0:e0:d0:78:
92:c2:c0:71:c3:d1:40:db:d1:4c:1a:62:22:14:18:
eb:f8:63:13:69:a4:d8:03:d7:a3:af:4c:0a:1b:b6:
f0:58:99:ab:6d:d6:1b:99:44:94:94:fe:22:46:9d:
f8:1d:80:23:03:5d:06:29:2c:75:85:36:26:70:63:
c2:9b:f3:a9:17:5f:73:c8:7f:b2:08:5b:68:fd:0a:
15:d3:14:8e:5c:ce:a6:2d:e8:58:1c:66:61:67:54:
6b:9e:11:59:70:c7:b5:4a:6b:99:de:59:ca:4e:1c:
0a:0b:12:ca:74:fc:9e:75:3a:e2:d8:18:98:0c:6e:
9d:ed:53:d1:58:7b:9b:5e:ee:60:4a:be:92:8c:76:
27:4f:48:90:63:d0:de:8e:f3:49:1e:e1:1e:af:ab:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5F:B7:3B:AC:7A:B9:AF:CE:D9:E6:62:63:54:EA:CA:5F:0C:CA:FC
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/61-3O6x6ua_O2eZiY1Tqyl8Myvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e8:5f:12:6d:1e:53:c1:06:4b:2c:55:18:87:42:0b:17:85:
cd:bb:14:40:35:e8:76:13:7e:7f:3d:d6:fa:1c:c6:68:bb:3b:
0b:96:d1:e3:6c:02:86:f5:ca:05:61:74:05:c6:14:9e:a7:de:
7f:b4:bd:9b:de:e8:41:1d:33:35:c8:4f:9e:ba:7c:38:cb:09:
97:4b:28:7b:88:f6:9f:0e:fe:3d:aa:45:0a:b2:dc:4d:ab:e1:
b5:ab:42:14:1f:9a:ee:37:e6:12:fb:0c:29:fd:a8:6a:1b:3f:
51:49:d3:dc:4a:64:a8:8d:e5:ed:48:dc:d8:9c:99:23:01:5a:
9c:23:be:bd:a0:d6:4a:e1:22:dc:00:4b:67:a1:ad:40:fe:da:
32:1d:7d:3c:d5:38:dd:fc:f0:c8:3a:35:9f:12:27:30:86:81:
ff:37:9c:7f:96:b6:c5:0f:20:03:03:18:3d:d4:8f:81:08:fe:
31:05:f2:96:ad:52:e7:5d:1a:23:8c:92:03:c4:51:3a:a6:f4:
d7:46:3a:65:1f:06:34:8c:28:0d:72:68:e1:ca:b3:f9:63:fe:
49:72:f6:e1:9c:58:47:d4:80:45:fd:5c:79:9f:a7:2b:11:b7:
f6:fc:2e:9c:29:15:7c:d9:ae:aa:bb:f1:f7:21:5d:8f:ba:7f:
17:62:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 01:11:27 2025 by rpki-client