Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/b611R99amO_DQEAss6-ZJZbbpaQ.roa
File: b611R99amO_DQEAss6-ZJZbbpaQ.roa (raw, json)
Hash identifier: pEH21bUs1vGrEYk7zpiTRwSPE6J3hvlWxzEjOOXm79I=
Subject key identifier: 6F:AD:75:47:DF:5A:98:EF:C3:40:40:2C:B3:AF:99:25:96:DB:A5:A4
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 1370
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/b611R99amO_DQEAss6-ZJZbbpaQ.roa
Signing time: Mon 10 Feb 2025 14:01:13 +0000
ROA not before: Mon 10 Feb 2025 14:01:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4976 (0x1370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Feb 10 14:01:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6FAD7547DF5A98EFC340402CB3AF992596DBA5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:11:24:61:d1:d0:20:41:7c:a1:0a:9f:93:
f6:9d:f7:21:4c:c4:82:f7:f1:83:b4:4e:08:d3:c2:
3b:36:cc:2e:07:5b:cf:c2:08:ea:e3:0a:10:7e:ae:
83:ec:64:f5:f1:83:a0:7e:a2:f4:08:26:b6:c5:f4:
98:ae:8d:fe:f8:82:6b:76:f0:e1:d9:74:c7:d1:f7:
d5:8d:20:f0:9e:08:62:38:61:00:b5:4c:b1:61:39:
c0:b3:8d:a7:b5:7a:29:2c:9f:32:4c:4b:fc:22:03:
3d:0c:c0:b7:73:24:f6:6c:ea:35:c9:55:71:a9:20:
20:fa:2b:7b:a6:76:f0:3c:e1:58:0f:68:ff:ea:24:
a0:54:1c:47:db:52:a4:8f:78:47:24:c8:f4:46:80:
44:60:d8:ea:8a:1a:a4:3d:2a:f4:33:3d:04:7b:19:
0e:fe:e5:de:1b:27:89:2e:64:cb:3e:18:ab:c1:14:
e5:2d:0f:f6:2e:30:c2:2c:64:e0:23:97:90:d1:95:
d2:26:02:58:0b:22:44:85:62:84:18:fc:1e:6c:d5:
b9:a3:7c:f1:8f:a8:11:b8:50:6c:47:af:7f:e3:6e:
77:4c:da:88:29:a2:8b:93:5a:72:47:4e:b9:b9:51:
39:3a:2b:6a:62:89:dd:5e:c3:39:49:da:b7:14:67:
be:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:75:47:DF:5A:98:EF:C3:40:40:2C:B3:AF:99:25:96:DB:A5:A4
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/b611R99amO_DQEAss6-ZJZbbpaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ed:d0:e6:71:fc:e6:f2:b2:41:99:5e:30:e6:5c:b8:e0:0c:
91:8e:68:33:64:7e:ad:93:d3:b3:e3:5b:10:b4:d1:ec:5c:18:
c7:2b:93:35:24:bd:a4:d5:43:ce:96:ec:9c:1c:49:10:dd:31:
f2:44:40:32:e9:39:ca:d5:a6:0b:17:58:7b:af:d4:01:d3:68:
f1:80:69:54:d0:3a:a6:55:d6:4e:ee:cb:fc:97:25:52:c7:95:
47:ce:71:c9:0c:da:6d:79:fb:d1:62:e7:f0:ca:4b:79:43:8e:
3d:31:fa:b3:3c:10:49:6b:06:ac:75:b4:15:50:03:a7:9b:01:
ba:a7:11:da:ac:8d:d9:80:da:c8:3a:db:66:9a:a6:35:c4:db:
98:a5:1a:25:5e:bb:e2:4c:51:da:56:9b:36:d5:93:10:2c:34:
10:65:3a:7d:d8:c3:b5:40:e3:5d:df:16:e9:02:48:2c:94:8c:
54:43:af:cd:26:ab:67:1a:73:ea:cb:6f:9c:3e:4a:f1:2d:99:
18:4b:ca:34:ce:2e:f4:65:1d:67:ff:d3:7b:3b:61:10:e0:77:
04:7a:59:aa:db:9f:fb:56:3a:db:e5:4a:fe:2e:df:b4:df:8d:
f7:ab:20:e6:7e:41:d7:93:a5:b9:ca:ba:7c:49:4e:84:95:b9:
03:ce:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:40 2025 by rpki-client