Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/Ycra8oxTxwF3HrWIn_98irvD-yk.roa
File: Ycra8oxTxwF3HrWIn_98irvD-yk.roa (raw, json)
Hash identifier: kDfGYsz5DdfD7tmeyorhAOfZ6oC9oc+X2sMAegBgmPQ=
Subject key identifier: 61:CA:DA:F2:8C:53:C7:01:77:1E:B5:88:9F:FF:7C:8A:BB:C3:FB:29
Certificate issuer: /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial: 0F9C
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/Ycra8oxTxwF3HrWIn_98irvD-yk.roa
Signing time: Thu 27 Apr 2023 08:35:27 +0000
ROA not before: Thu 27 Apr 2023 08:35:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 16509
IP address blocks: 103.125.224.0/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3996 (0xf9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
Validity
Not Before: Apr 27 08:35:27 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61CADAF28C53C701771EB5889FFF7C8ABBC3FB29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:8b:97:53:33:3a:a4:0a:e8:bd:99:bb:4d:
c9:68:57:10:07:14:d4:9d:f4:93:03:5a:f5:6b:26:
0b:ba:dd:db:96:90:e9:d9:1c:96:0b:37:42:04:17:
90:d3:e4:25:a3:f8:ca:8f:79:00:45:0b:5e:5b:8e:
a2:14:2b:8a:ff:f8:26:26:24:06:5b:cd:56:f4:dd:
b4:19:1d:09:98:d8:2c:9e:f1:f0:1c:4b:a3:cf:d2:
41:fd:8a:43:83:f2:19:20:c9:ab:c4:6b:d9:d5:80:
62:fe:10:cf:2a:44:b8:dd:4c:cb:c3:54:63:79:ef:
43:e5:72:21:13:0d:ba:e2:99:d9:4c:73:fc:56:ae:
75:cc:aa:01:8d:5b:65:b7:03:13:ba:01:e1:a9:5f:
ad:a4:66:8a:08:73:fc:75:44:c5:12:61:9f:7f:c6:
2c:16:1d:4c:d9:1e:cf:d2:e5:5a:22:72:57:c2:19:
34:72:34:cd:d8:c0:37:3e:d3:ea:e3:c0:4f:57:3d:
ee:61:ed:90:13:2d:76:cb:2e:72:e9:f5:80:ff:3b:
f3:b9:74:dc:06:d3:e4:21:6e:24:8e:fe:ad:0a:ea:
88:9a:92:21:3e:7e:63:0a:7c:91:be:95:f2:24:0c:
fe:fb:9a:1c:bc:ba:4c:56:00:84:5d:0f:71:b5:bd:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:DA:F2:8C:53:C7:01:77:1E:B5:88:9F:FF:7C:8A:BB:C3:FB:29
X509v3 Authority Key Identifier:
keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/Ycra8oxTxwF3HrWIn_98irvD-yk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.224.0/29
Signature Algorithm: sha256WithRSAEncryption
32:74:b1:7d:6c:cc:36:52:dd:49:0c:df:cc:d8:c2:8c:26:65:
41:00:51:8a:b2:16:23:0c:70:2a:76:44:2a:4f:93:fe:ea:d6:
b9:4d:a1:b2:3b:18:bb:f8:6c:7e:c4:dd:90:78:bd:85:11:38:
c5:65:87:de:e6:16:31:aa:4c:4d:43:0f:c6:c4:30:2f:3b:35:
b7:2f:b0:eb:4b:59:17:07:28:17:35:95:3a:f9:f1:86:0d:ae:
d4:ed:e3:16:b0:4f:63:4f:f3:2f:92:50:ec:be:9e:58:49:bc:
e6:0c:f4:5f:b8:82:23:2a:d2:83:7b:cf:72:c6:8c:0e:62:3a:
da:76:56:2f:25:11:25:6f:c3:18:86:32:cf:be:53:14:f0:29:
e1:b2:81:43:fd:32:c2:79:95:0c:46:b1:4a:19:c7:97:5d:0b:
83:cd:e3:c9:b9:42:cb:e5:ee:09:34:03:ea:ee:a6:53:79:07:
e3:cf:a5:f1:6e:bf:49:bb:64:75:9c:ae:9c:04:5a:8b:7b:b0:
d0:28:24:20:3b:a3:4a:3a:bf:6a:a8:7a:b6:74:18:a4:10:7b:
27:2d:e7:88:ce:6d:f8:e6:bc:02:35:08:4f:dc:71:8c:55:a3:
5a:7d:5f:64:18:2d:dd:b6:d4:8b:b4:0e:49:f7:15:b0:28:6a:
f1:62:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:25:29 2025 by rpki-client