Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa
File: Ywgb8VH0abH29J0ZW_CQfXmNieE.roa (raw, json)
Hash identifier: 77MpG1RMkJbxrr8cGgmsiwnXXwPE7p8ZZae8KJ67nR8=
Subject key identifier: 63:08:1B:F1:51:F4:69:B1:F6:F4:9D:19:5B:F0:90:7D:79:8D:89:E1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 136F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa
Signing time: Fri 01 Sep 2023 09:24:56 +0000
ROA not before: Fri 01 Sep 2023 09:24:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 103.234.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4975 (0x136f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=63081BF151F469B1F6F49D195BF0907D798D89E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:56:56:ab:f5:2a:1f:7f:e3:bb:8e:a2:ef:
a7:83:1c:94:fc:59:9a:9e:3a:4b:fb:03:8f:8a:6c:
24:1d:68:46:31:d4:77:43:1c:23:7c:46:41:b3:d6:
3e:bf:04:0c:cb:46:2f:d6:24:db:cc:54:b0:dd:63:
3c:a0:41:3e:30:b5:2b:4f:a7:f0:1e:60:62:d3:97:
ab:0a:b6:57:29:1c:a3:96:7c:72:7f:35:f2:8e:92:
8e:3e:6b:55:7b:e8:08:7a:97:da:bb:0d:43:ae:60:
58:df:a0:93:22:2b:ab:b9:e0:c6:4c:28:d4:ae:b8:
6b:67:b2:73:e5:c6:e3:48:4d:08:df:60:e2:e4:14:
e5:89:a3:81:cc:a1:e0:ba:27:52:9b:c9:a5:d3:93:
bc:85:75:ed:ca:17:36:bc:6c:6a:c6:44:49:cf:ce:
d6:44:2b:d6:99:ec:d4:f8:7d:f3:e8:3a:4b:82:50:
86:c3:b1:17:e8:4e:b3:67:0a:7a:e1:0c:97:b0:3b:
2a:ce:59:43:86:1e:7b:a5:14:d6:af:8a:71:32:71:
db:45:e4:f6:7c:5c:45:a1:8e:a1:e5:8d:6d:31:32:
af:ac:e1:04:81:d0:59:9b:e5:36:90:1e:2a:f2:61:
63:4a:41:f8:d7:8c:12:30:34:40:9e:69:6e:02:6b:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:1B:F1:51:F4:69:B1:F6:F4:9D:19:5B:F0:90:7D:79:8D:89:E1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ywgb8VH0abH29J0ZW_CQfXmNieE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:be:1b:2a:d5:ca:9e:6e:b6:f5:12:02:9d:20:c0:0b:1b:3a:
e2:73:de:02:d9:f8:fa:98:08:ff:e1:34:86:c7:67:92:df:71:
ad:11:7b:e4:81:3a:9c:36:d0:33:7e:6a:88:93:5e:4c:0a:51:
e3:13:ca:0e:b7:76:3b:91:a0:79:39:fb:2c:57:13:fa:30:72:
12:a8:b4:9a:1d:3b:3d:e0:17:f0:66:07:a8:f3:30:3f:8d:b9:
3c:aa:e9:13:ba:07:8e:94:18:f5:4b:b5:e3:79:90:91:fe:6e:
ce:55:d6:86:47:62:a6:b9:9b:75:5f:4e:d5:f3:60:a7:ef:f3:
82:15:04:55:a4:c7:dd:3e:88:b1:1b:d0:7c:5d:69:11:fd:46:
83:69:dd:88:b0:09:b6:6f:ae:ea:6f:1d:b6:e1:62:7d:9b:f0:
81:51:34:8b:67:47:53:0d:69:90:29:8b:4e:b4:e6:00:cd:76:
d7:6b:75:ff:91:fd:54:17:cb:f3:93:2f:7a:de:49:a8:89:f3:
d8:97:e2:f6:ba:90:cb:9b:22:15:51:f1:e4:70:9f:86:38:a0:
e4:81:40:69:4a:ea:35:9c:77:ad:5d:22:95:71:04:8a:4c:69:
20:bb:fc:fe:c1:f0:b0:cc:58:1b:86:68:07:42:0f:cf:42:a7:
08:cd:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:33 2025 by rpki-client