Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
File: sfmDl8phAg_ViUx5NrpLlZcm6hw.roa (raw, json)
Hash identifier: CbcGlpNiN9c7J6tPslalBpancD8LNC77S7uhu3MwkFQ=
Subject key identifier: B1:F9:83:97:CA:61:02:0F:D5:89:4C:79:36:BA:4B:95:97:26:EA:1C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08E0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
Signing time: Tue 29 Sep 2020 09:52:33 +0000
ROA not before: Tue 29 Sep 2020 09:52:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 103.234.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B1F98397CA61020FD5894C7936BA4B959726EA1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:d4:86:26:11:b0:9a:5c:e8:56:73:bc:a3:
42:fd:7c:31:79:cd:f5:5d:c9:91:e1:d5:02:9f:b0:
27:6d:dd:79:33:54:f7:f5:c1:32:38:96:c4:35:f9:
eb:90:ec:c7:65:17:0e:ef:8a:ef:38:a5:32:c4:56:
ca:19:c4:e1:c5:3c:a8:9d:ff:60:5e:e9:16:0f:2d:
d7:0e:fd:4a:c8:ff:7e:37:c9:78:0e:28:94:28:ec:
2c:2e:3b:98:a0:f3:e3:7c:26:62:d5:51:a0:12:c4:
1d:43:94:d7:ea:50:53:b5:21:60:38:3c:43:b1:28:
73:2e:52:1b:e8:59:04:ab:c7:4d:e0:10:85:08:21:
a5:a5:ef:bf:be:c2:0a:d4:57:6b:8f:f6:e5:0d:d4:
10:af:69:76:e1:0a:3d:68:71:44:1d:52:9f:fc:ae:
6c:4d:81:96:46:f9:61:a7:fb:be:83:e8:21:8d:b0:
c6:27:a6:23:10:bc:1f:c9:13:0e:37:d7:63:f2:66:
47:53:9e:f9:b8:b5:b4:1b:10:70:91:78:b2:df:d1:
ce:1f:e0:47:c7:6e:da:6e:c5:51:cd:f6:fb:cd:ba:
31:6c:2f:00:01:ad:57:15:fe:19:74:0e:f5:86:57:
8b:40:0f:d1:a9:a3:55:9e:c8:6e:a1:49:27:0c:4e:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F9:83:97:CA:61:02:0F:D5:89:4C:79:36:BA:4B:95:97:26:EA:1C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3d:b2:93:23:47:d5:9a:69:b4:0c:11:51:ea:8c:20:11:6a:
d3:dc:b1:29:ea:1b:37:83:15:a0:9a:82:f4:12:ff:86:ef:a5:
b6:9c:48:02:34:d0:09:ce:64:e9:b7:da:a0:ec:ab:9f:73:88:
81:5f:f3:fe:f0:59:42:5d:39:28:f5:fe:0e:e1:1e:62:2d:40:
59:3d:2e:b6:66:74:87:2b:9d:f6:9c:86:08:42:cf:5a:c2:5f:
fe:7c:2f:98:7a:f2:b3:21:4d:7f:ec:b6:70:b1:d5:89:66:b7:
c6:dc:80:db:f9:d7:05:a3:b1:91:4c:61:11:f3:88:ac:b5:cb:
71:d3:c8:20:83:74:8a:6e:16:27:e6:50:de:5d:f6:20:07:9b:
6b:f3:d2:ea:cf:34:df:9b:98:f9:6d:04:50:c1:0e:d2:bf:90:
96:c7:9e:51:be:55:e1:ef:05:20:dc:65:ff:19:c2:35:e2:cc:
3d:be:ec:88:86:94:f5:09:f8:82:88:27:4c:c9:fa:72:df:37:
e1:08:2d:34:68:b7:5a:13:0c:8b:55:bc:dc:83:5e:43:74:c8:
81:cc:86:fb:c4:32:f2:bf:92:39:49:20:b4:7d:5c:44:f7:27:
db:be:4b:a0:a6:76:30:3f:4f:59:03:1d:79:9a:dd:db:6c:64:
76:57:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:54 2025 by rpki-client