Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/b-6i-YGz7pYndaX0pleCeBzsGvI.roa
File: b-6i-YGz7pYndaX0pleCeBzsGvI.roa (raw, json)
Hash identifier: /Mbvpi2dO/XCv8d7x6U8A3OGalJa6nXpLANB9sqCjyA=
Subject key identifier: 6F:EE:A2:F9:81:B3:EE:96:27:75:A5:F4:A6:57:82:78:1C:EC:1A:F2
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 06FE
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/b-6i-YGz7pYndaX0pleCeBzsGvI.roa
Signing time: Mon 10 Feb 2025 14:22:50 +0000
ROA not before: Mon 10 Feb 2025 14:22:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Feb 10 14:22:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6FEEA2F981B3EE962775A5F4A65782781CEC1AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:42:42:53:41:22:c3:82:d2:ac:53:6e:c4:
88:12:8b:1b:75:40:df:26:c3:9c:ec:d0:15:ab:f3:
ae:4c:ba:c3:2b:6c:8f:66:77:83:e7:32:75:ff:13:
8f:25:b1:06:b4:46:ac:04:8c:61:a6:8e:97:45:53:
ea:f9:77:79:bd:16:f7:d1:2c:2c:a9:b0:94:34:ad:
fd:21:b4:21:1a:4c:b7:3a:c2:25:2f:dc:a9:4f:48:
54:0e:44:c0:ad:4e:ba:b4:d0:26:b7:a7:d4:a2:1a:
d8:f4:ba:65:ee:6a:cd:77:3a:46:6a:19:18:37:b2:
9f:cc:e5:15:65:6a:d1:99:61:41:96:dc:c3:a9:78:
63:71:97:bd:b8:89:39:06:83:dd:4d:69:83:e4:55:
02:07:c5:04:3f:dc:d2:bf:ba:cc:18:cc:23:5c:4f:
f9:6b:f7:1e:02:9e:f1:97:f9:59:b5:63:c7:4b:c5:
ef:f5:b2:b2:13:30:89:85:c4:c5:6c:5c:19:9a:01:
ff:a3:61:2f:73:67:20:b6:bf:91:4f:0b:84:fa:a2:
16:cd:0c:8d:d7:7f:3a:6a:7c:5e:93:5f:41:e0:61:
86:87:c2:e2:7d:2e:fb:77:75:cd:16:37:73:18:dd:
7c:81:24:e3:aa:54:94:3e:9c:a1:1f:66:8b:5c:01:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EE:A2:F9:81:B3:EE:96:27:75:A5:F4:A6:57:82:78:1C:EC:1A:F2
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/b-6i-YGz7pYndaX0pleCeBzsGvI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d1:3f:e4:88:04:af:c3:3b:0e:57:d3:b3:c2:2c:6b:35:49:
5e:84:e9:81:92:bd:e5:8e:a8:89:a2:7f:1c:92:6c:fc:5c:b7:
a8:62:71:eb:c0:0f:7b:a8:a8:e4:27:0f:f5:71:32:c7:9b:51:
9e:99:ba:b2:b3:c5:30:b3:1e:ab:3f:ed:ca:1d:d5:9e:76:ab:
ee:9e:57:18:b1:6a:3b:6e:d9:6a:c7:3f:ed:ba:63:b6:08:1f:
45:a8:99:6c:a6:df:fc:af:d9:2c:d9:42:ff:f9:be:14:f4:5e:
36:21:f6:89:99:de:e1:67:8f:bd:d3:71:b2:80:ca:9f:88:13:
93:69:cb:0f:1e:c0:2a:ed:57:4c:c5:23:15:89:2b:f0:ce:03:
4f:45:a6:88:d1:5f:a6:35:51:a9:62:33:d3:60:9f:db:8d:3b:
e5:6b:b1:2b:68:b4:8d:af:53:16:cc:80:4a:21:89:2f:ab:78:
19:8a:58:92:65:b9:10:18:23:9a:90:72:77:1e:1d:93:ba:be:
ff:be:37:06:e9:ea:28:f6:58:22:06:2a:45:6d:ec:82:c9:c4:
fa:07:8f:b5:c4:b6:55:67:45:1c:ff:5d:a6:21:f0:75:fd:86:
31:04:a8:22:7e:2a:db:7f:78:64:21:d4:bd:9d:ef:a7:83:bf:
df:6d:1e:65
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF
RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNTAyMTAx
NDIyNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGRUVBMkY5ODFCM0VF
OTYyNzc1QTVGNEE2NTc4Mjc4MUNFQzFBRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFHkJCU0Eiw4LSrFNuxIgSixt1QN8mw5zs0BWr865MusMrbI9m
d4PnMnX/E48lsQa0RqwEjGGmjpdFU+r5d3m9FvfRLCypsJQ0rf0htCEaTLc6wiUv
3KlPSFQORMCtTrq00Ca3p9SiGtj0umXuas13OkZqGRg3sp/M5RVlatGZYUGW3MOp
eGNxl724iTkGg91NaYPkVQIHxQQ/3NK/uswYzCNcT/lr9x4CnvGX+Vm1Y8dLxe/1
srITMImFxMVsXBmaAf+jYS9zZyC2v5FPC4T6ohbNDI3XfzpqfF6TX0HgYYaHwuJ9
Lvt3dc0WN3MY3XyBJOOqVJQ+nKEfZotcAc3jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb+6i+YGz7pYndaX0pleCeBzsGvIwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh
VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO
L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL2ItNmktWUd6N3BZbmRhWDBw
bGVDZUJ6c0d2SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
YkswDQYJKoZIhvcNAQELBQADggEBAFXRP+SIBK/DOw5X07PCLGs1SV6E6YGSveWO
qImifxySbPxct6hicevAD3uoqOQnD/VxMsebUZ6ZurKzxTCzHqs/7cod1Z52q+6e
Vxixajtu2WrHP+26Y7YIH0WomWym3/yv2SzZQv/5vhT0XjYh9omZ3uFnj73TcbKA
yp+IE5Npyw8ewCrtV0zFIxWJK/DOA09FpojRX6Y1UaliM9Ngn9uNO+VrsStotI2v
UxbMgEohiS+reBmKWJJluRAYI5qQcnceHZO6vv++Nwbp6ij2WCIGKkVt7ILJxPoH
j7XEtlVnRRz/XaYh8HX9hjEEqCJ+Ktt/eGQh1L2d76eDv99tHmU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:12:48 2025 by rpki-client