Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YG9PhQB75qOMZxI2-Oska8y7tvo.roa
File: YG9PhQB75qOMZxI2-Oska8y7tvo.roa (raw, json)
Hash identifier: zAmQ1Z4Ow60RzNmpRXyzAI4TYTyPH7QUo9DQPNvNpM0=
Subject key identifier: 60:6F:4F:85:00:7B:E6:A3:8C:67:12:36:F8:EB:24:6B:CC:BB:B6:FA
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 0760
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YG9PhQB75qOMZxI2-Oska8y7tvo.roa
Signing time: Mon 10 Feb 2025 13:49:10 +0000
ROA not before: Mon 10 Feb 2025 13:49:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131668
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Feb 10 13:49:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=606F4F85007BE6A38C671236F8EB246BCCBBB6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:81:f1:67:16:20:09:71:c5:29:48:f5:7d:
08:d1:e9:d7:14:85:ea:7c:7c:cc:df:5e:ce:aa:3a:
6c:2a:92:8a:2e:1c:0a:21:46:c4:1a:2a:b0:a3:3f:
01:56:0d:7a:96:4d:20:ab:bb:6b:27:79:dc:04:d2:
30:de:5e:c6:10:f7:c3:ed:6a:1d:cb:f3:3b:70:7b:
21:66:35:f0:f2:f3:60:b6:7d:c4:b8:04:31:b6:61:
89:a9:36:0c:68:80:09:42:16:15:c9:78:f9:0f:7e:
dd:e2:3f:f8:19:c5:94:d0:20:30:20:59:51:23:bd:
32:93:af:df:b2:72:50:57:be:1f:34:c3:fc:9f:95:
71:74:a3:ae:f5:65:0e:e9:6e:82:b5:68:d6:a4:bf:
d0:97:2e:84:81:48:71:67:55:7c:58:47:38:05:59:
91:75:bf:82:35:96:ba:a6:9e:4d:2f:d5:3b:b8:6b:
fc:4b:e4:0d:5e:b1:c6:fd:b0:4e:eb:98:2b:66:10:
4d:e5:cd:d8:ed:03:a6:6e:64:23:93:62:d2:8e:88:
c5:1d:cd:f3:e9:63:d2:09:ea:72:c8:6b:7d:e6:c4:
e5:2a:b4:b9:2f:50:90:2a:9a:4e:04:3d:73:4e:48:
7b:85:00:b0:46:79:b4:c5:09:71:52:70:c6:95:90:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6F:4F:85:00:7B:E6:A3:8C:67:12:36:F8:EB:24:6B:CC:BB:B6:FA
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/YG9PhQB75qOMZxI2-Oska8y7tvo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
75:59:f4:c7:b3:a5:28:f5:bf:30:4c:59:66:e2:01:34:03:be:
8c:1d:64:28:6c:82:1d:be:52:2b:be:06:d8:b9:7c:ee:c0:d7:
72:e7:89:38:21:76:b5:4a:f2:0f:9b:3b:db:7b:b3:f2:49:07:
b4:b8:f8:c5:ba:84:3e:c0:49:1d:ee:7d:c8:22:67:f7:1d:f2:
e9:3b:a6:b1:b1:73:c9:4e:70:e9:04:3a:3b:ce:df:5f:23:46:
42:33:b9:17:2b:42:d3:54:d8:85:71:9f:5f:a6:3f:ba:fa:09:
77:62:27:c7:e8:df:e1:fc:eb:1d:ce:b7:ec:01:f0:d3:ca:87:
39:c3:69:77:61:ee:31:70:76:b7:d0:1b:93:6a:27:f4:a6:80:
b6:f1:09:dd:c9:5d:fc:22:aa:2e:72:83:d6:3f:9e:6c:74:0d:
05:cc:b8:58:6c:ee:7c:04:74:73:37:5a:9f:4b:4e:11:08:b0:
2b:7b:1d:cf:0b:05:50:30:8d:9c:92:b2:44:0c:a6:23:31:78:
ee:ec:91:79:19:7a:80:0d:a7:5a:eb:68:62:80:6d:52:da:1e:
74:a0:75:fc:99:00:d6:41:05:3a:f7:2b:84:9c:d0:57:ef:82:
16:52:65:2d:2b:5e:f3:c3:4c:0f:71:96:a2:cd:25:0d:fd:fb:
db:f9:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:40 2025 by rpki-client