Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/FUqwsRobFWSIj3ElfSgTmUuhfoE.roa
File: FUqwsRobFWSIj3ElfSgTmUuhfoE.roa (raw, json)
Hash identifier: TGrdGK6wVqH26kTSSYD5AkTABxCRbD4ueapDGED7ShA=
Subject key identifier: 15:4A:B0:B1:1A:1B:15:64:88:8F:71:25:7D:28:13:99:4B:A1:7E:81
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0705
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/FUqwsRobFWSIj3ElfSgTmUuhfoE.roa
Signing time: Mon 10 Feb 2025 14:22:52 +0000
ROA not before: Mon 10 Feb 2025 14:22:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 103.98.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Feb 10 14:22:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=154AB0B11A1B1564888F71257D2813994BA17E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:ed:f7:c4:d0:45:af:9a:bc:f8:97:b1:c4:
80:df:6d:d2:28:46:b9:e6:d2:29:c1:bc:98:75:aa:
4a:6e:0f:d1:72:1e:dd:93:26:52:c5:f3:d5:cf:56:
0d:27:34:65:98:06:4c:9c:69:82:38:e9:f2:ef:38:
ff:24:21:4a:d6:56:76:c6:0d:67:18:da:a6:e6:db:
85:f8:04:3c:27:d5:af:91:20:4e:ed:76:99:3c:6f:
0e:c4:d5:5d:1c:9c:fc:e8:70:7d:50:fe:ec:39:f7:
cb:9b:3c:00:36:29:cc:50:ff:69:e6:ce:65:b8:46:
83:0e:c2:de:ff:2b:a4:48:96:df:38:79:21:34:1c:
8b:27:94:01:2f:8d:33:65:81:f2:e7:af:e3:6d:f9:
14:f4:a3:68:a3:8c:07:9f:d4:89:64:6e:05:15:f8:
57:6e:81:9c:60:73:6a:7b:f6:de:35:af:0f:4a:3f:
fa:b0:28:e6:29:91:24:03:de:9e:bc:f2:03:1c:1b:
c2:f1:55:86:b8:6d:bf:ad:11:4d:d4:9c:a1:50:cd:
40:3a:6e:77:4f:ba:c3:b0:a3:43:06:15:f3:c5:91:
66:10:0a:9c:86:ce:f9:51:a1:ca:ec:17:f1:73:01:
4f:4d:84:8b:1f:93:66:e1:8f:ae:0f:c9:12:05:88:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:B0:B1:1A:1B:15:64:88:8F:71:25:7D:28:13:99:4B:A1:7E:81
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/FUqwsRobFWSIj3ElfSgTmUuhfoE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:93:77:0f:b0:e5:44:53:a4:e4:af:6a:d6:e2:2b:0c:ec:9b:
b6:06:dd:28:d8:94:0b:91:92:26:3b:52:dd:6e:f7:19:cf:10:
74:50:0a:1b:64:16:79:00:c5:9b:f6:5d:6f:2d:b0:83:83:54:
0f:ef:05:af:ce:b3:58:ed:a0:f0:e1:1b:00:ff:f5:bc:b2:64:
54:f1:1a:16:31:1f:fb:46:c8:ac:98:5b:89:da:a1:1b:2a:74:
98:f1:55:4a:3a:6b:81:1f:62:65:83:e0:6f:0b:d2:67:e1:7d:
5b:e9:71:79:d0:ae:bc:68:fb:55:c5:a1:46:47:8b:29:46:5d:
0f:ef:30:3a:d5:3f:92:65:e5:80:e0:e6:c6:9e:19:9d:93:ef:
53:7f:9c:43:e3:81:6d:d3:67:cd:bd:b3:09:1d:fe:3d:e0:b1:
37:15:4d:55:7f:79:2c:e1:07:5a:9d:58:8c:68:39:5f:da:cd:
02:c0:8c:4b:76:9a:39:14:c4:f5:00:7c:61:b2:53:7e:80:50:
87:ce:93:e7:01:01:74:84:dd:4d:66:db:6a:bb:99:17:a2:99:
ef:41:ec:5e:0c:9f:89:8f:2e:c8:db:5e:5b:92:4c:a8:c8:ba:
38:f9:ba:58:2c:ee:f3:d8:2f:bf:df:43:22:df:27:ad:ee:ad:
d3:c6:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:13:13 2025 by rpki-client