Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa
File: pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa (raw, json)
Hash identifier: Wrd+IbXjq6wuUg//XoSQlpeB0PGM1zoTDOUPZJm5hKc=
Subject key identifier: A4:56:C1:C0:2D:C6:97:50:2B:8A:A4:0D:C6:89:2E:39:AE:10:E0:18
Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Certificate serial: 0D2D
Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa
Signing time: Mon 26 Aug 2024 05:20:02 +0000
ROA not before: Mon 26 Aug 2024 05:20:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131645
IP address blocks: 103.142.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3373 (0xd2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Validity
Not Before: Aug 26 05:20:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A456C1C02DC697502B8AA40DC6892E39AE10E018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:ed:cd:f3:6b:f3:fb:05:48:7f:5c:56:b9:
a1:be:b4:55:5a:70:e6:8e:a5:83:61:f0:0f:94:88:
f6:64:13:83:73:7e:9c:80:c5:9d:77:c9:5b:00:2b:
9a:1a:b0:1a:af:21:42:be:05:46:14:f6:0d:0f:e8:
49:e5:2c:55:ba:fc:f0:29:a3:88:12:6e:6d:6e:0e:
6b:89:8f:41:11:db:ce:6a:88:c8:22:ec:d4:44:a8:
f9:d2:16:04:86:c7:5e:d1:e7:e6:6e:26:4d:2a:08:
3d:01:f3:3b:9c:dd:d6:e8:fc:40:5f:d4:7a:42:13:
19:82:45:57:b3:d5:3f:f6:fb:33:4c:70:eb:b5:ff:
83:32:80:cc:b3:b8:33:8b:81:b0:90:b4:91:5e:f1:
48:8a:f2:75:9b:05:cc:6a:bc:3c:1c:16:b0:5e:3e:
c3:11:da:21:9d:b2:92:7a:24:2d:0e:e6:b6:53:12:
48:4f:04:c9:48:fd:a8:a2:91:64:ca:a7:b8:0c:40:
2b:eb:09:ed:48:b7:0d:11:4a:8e:c2:cc:ab:e0:3b:
23:7a:0e:52:83:2a:18:9a:82:e9:95:6c:bb:a3:9e:
de:d3:ec:9d:c7:88:35:04:de:9d:47:95:76:cc:1c:
99:f6:ef:43:54:36:d0:f0:5a:8a:fe:d6:d1:bc:bf:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:C1:C0:2D:C6:97:50:2B:8A:A4:0D:C6:89:2E:39:AE:10:E0:18
X509v3 Authority Key Identifier:
keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.42.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ee:08:49:17:95:b7:c9:b4:01:46:69:1f:6e:23:b7:b1:7a:
91:07:6d:67:59:54:ce:0b:23:6b:c3:71:26:25:30:41:3f:5e:
cb:fd:01:9a:ac:93:c5:18:1c:a2:fa:d4:92:06:0b:dc:77:d6:
98:40:97:3f:52:e8:a3:f2:39:c7:d4:fe:bd:ca:54:c1:e4:d6:
e1:7e:3b:7a:1a:04:d6:a3:e8:ec:cf:ee:11:34:71:8e:06:de:
5c:75:43:44:dd:bf:55:58:e7:a4:3d:bc:f6:fc:8f:f6:cd:7d:
41:d2:48:c7:a4:0b:e7:1d:a5:16:18:ea:2c:25:4b:ed:93:de:
c4:a8:de:9f:d2:c6:f8:87:62:16:b2:be:d1:33:b8:17:1f:5e:
df:e5:fe:bc:e2:36:86:2f:5b:8a:3c:82:c1:df:d7:7a:f9:6b:
48:55:c9:d6:44:2e:5e:72:07:99:41:94:93:62:c6:28:10:5c:
e8:5d:14:ef:cd:51:5f:a9:97:76:a9:36:77:b1:4b:78:76:67:
8d:81:6b:91:65:93:1d:f6:e1:16:d9:7c:48:94:7d:41:8a:1e:
d3:66:c8:12:3c:e0:26:a1:ab:99:63:36:1f:52:89:5b:5e:f3:
d2:39:00:d0:6d:bd:3b:44:4c:ad:c1:e0:20:cb:8e:7a:81:1d:
fe:e9:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:48:44 2025 by rpki-client