Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/bbzbuJE0m2Nis7r6oXUFQcnqvUQ.roa
File: bbzbuJE0m2Nis7r6oXUFQcnqvUQ.roa (raw, json)
Hash identifier: FslpdPne5maYKIkZDPeiVwv9kcRYn7QdEgl1F19WlBc=
Subject key identifier: 6D:BC:DB:B8:91:34:9B:63:62:B3:BA:FA:A1:75:05:41:C9:EA:BD:44
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 1268
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/bbzbuJE0m2Nis7r6oXUFQcnqvUQ.roa
Signing time: Mon 10 Feb 2025 14:21:15 +0000
ROA not before: Mon 10 Feb 2025 14:21:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131616
IP address blocks: 103.124.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4712 (0x1268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Feb 10 14:21:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6DBCDBB891349B6362B3BAFAA1750541C9EABD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:a6:c2:ff:d3:fc:0a:bd:31:3b:fb:ac:24:
a9:fd:93:ef:1b:34:b3:9c:f2:63:1a:1d:23:41:9c:
2b:3d:2e:6f:1c:99:28:ce:12:7a:bd:85:9a:f4:ef:
90:88:ee:1d:ef:bc:f9:85:d2:55:f2:2b:e3:a0:39:
27:61:c6:6c:60:70:f6:17:d0:c3:40:1b:c0:d1:b9:
0e:c6:71:de:b5:d2:bd:1c:7c:96:3d:75:9a:2d:fe:
1a:20:c7:e9:f9:2e:7a:dd:09:48:84:c6:0b:11:fd:
6a:a0:79:34:54:6d:3d:90:2d:ee:22:60:cb:0f:42:
09:69:aa:d3:06:a3:f3:4f:fb:a8:e5:95:39:02:0d:
fd:93:05:03:fa:6b:53:93:83:52:bd:dc:f4:2e:76:
2f:79:b7:83:be:d2:d6:2d:fe:bd:ea:80:31:d6:d3:
4d:a3:3e:77:9f:52:a4:8e:d5:78:42:67:ee:81:4e:
bb:17:91:28:5d:07:14:f7:48:5f:3d:8c:b6:99:71:
ca:85:d6:6c:e3:49:48:7d:e6:73:ea:a9:21:81:4b:
c0:93:17:88:2e:f7:8a:0d:c1:44:28:93:78:e9:40:
67:bc:79:bd:b0:cc:a2:cc:b3:a3:3e:a9:0e:70:04:
a4:23:5b:12:7d:c4:a1:5f:76:98:02:f7:8e:62:cc:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:DB:B8:91:34:9B:63:62:B3:BA:FA:A1:75:05:41:C9:EA:BD:44
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/bbzbuJE0m2Nis7r6oXUFQcnqvUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:08:5c:c5:d0:17:82:ed:7c:52:38:fa:24:7f:df:23:55:75:
f9:3e:54:72:8a:e3:15:22:86:5b:5b:1f:77:c5:95:1e:7f:58:
07:d7:da:57:1f:04:0b:3d:7b:8d:1e:19:00:aa:d3:68:7e:e1:
10:78:73:26:5b:2b:46:4e:13:1a:ab:c6:eb:a9:69:ff:e6:ba:
75:de:a7:9c:b6:83:4b:d0:b5:6a:24:6c:12:5f:9c:8d:70:28:
82:50:4d:41:9e:1c:34:ba:18:f2:f9:6a:db:38:28:6f:84:55:
19:ca:9b:af:ff:13:e1:b0:ee:53:d4:0c:30:57:77:17:93:4e:
43:f7:71:ff:64:1d:e5:33:35:15:4d:87:e7:10:8e:7c:c4:d7:
63:3d:ff:4e:05:28:56:8a:19:47:5e:45:8f:96:94:18:71:3e:
b0:aa:e3:20:71:3d:5a:83:a4:8d:b4:0f:29:b1:d8:a5:75:9a:
62:db:29:f2:25:13:c2:47:e1:19:0e:73:30:80:ba:ce:fb:5f:
dc:b6:db:04:bb:46:de:3b:a0:a2:e4:23:67:bb:0f:a5:d4:49:
a6:fb:c8:cd:10:91:9a:e9:82:c8:32:6c:1f:bf:a4:58:94:2b:
16:39:69:d3:fe:1c:85:0d:05:0f:b2:f9:1e:d2:0b:b9:a9:eb:
48:8a:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:08:00 2025 by rpki-client