Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa
File: L04X9V37JWt8euwubv8lyfLUBZQ.roa (raw, json)
Hash identifier: 4kjoxtbegsNTOSaYIKtpO0roAeB326DnrVMTEEykS80=
Subject key identifier: 2F:4E:17:F5:5D:FB:25:6B:7C:7A:EC:2E:6E:FF:25:C9:F2:D4:05:94
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 135B
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa
Signing time: Mon 26 Aug 2024 05:25:30 +0000
ROA not before: Mon 26 Aug 2024 05:25:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 202525
IP address blocks: 103.123.218.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4955 (0x135b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Aug 26 05:25:30 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2F4E17F55DFB256B7C7AEC2E6EFF25C9F2D40594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:8a:3d:3d:46:6d:dc:91:9c:51:5c:05:ef:
55:cc:7c:85:c5:0a:a0:f7:af:08:a8:47:ec:a0:f1:
d2:14:01:a5:2a:6d:0d:6d:79:06:3e:17:e8:f7:16:
b9:0c:cc:1f:58:fc:36:f5:6f:40:72:42:b9:f7:8d:
f9:b9:a9:a4:32:d8:68:2d:ef:70:1e:83:50:b2:fd:
f5:be:09:14:04:74:98:04:96:f2:7a:eb:28:a4:cf:
b6:dd:89:61:3d:18:9e:13:48:a4:92:cd:4e:64:c6:
1c:c0:87:04:ef:bf:2e:76:6f:83:f7:07:fe:c4:ec:
1a:4f:76:db:1a:6f:44:0e:77:01:63:51:08:4a:c1:
39:f0:48:97:47:8f:bd:d5:51:a4:d0:d6:00:9b:04:
55:4c:24:14:2e:43:74:a7:48:a5:f1:ec:50:95:21:
aa:ca:5b:ec:60:09:8d:75:08:af:6e:73:fe:f7:ad:
fa:45:9a:e1:82:2c:c1:70:cc:5c:7e:3a:8c:c4:74:
6d:6e:8d:2c:d3:a6:7d:f7:fd:6e:0a:0a:b6:71:1e:
ae:e8:0a:a9:d9:6c:50:98:4f:67:db:95:33:04:23:
b3:6e:e4:21:f4:cb:e4:fd:16:fa:fc:93:f7:f6:a6:
02:1b:32:06:e5:67:7a:46:5e:84:5d:5d:ba:aa:36:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:17:F5:5D:FB:25:6B:7C:7A:EC:2E:6E:FF:25:C9:F2:D4:05:94
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a5:e4:f9:16:23:04:38:26:0b:61:03:ae:3c:d5:8b:f0:47:
91:d8:af:5c:76:b1:aa:5f:8f:c0:69:4f:a8:4f:71:69:37:22:
65:7c:c0:8d:90:c7:1e:71:cb:cc:19:ff:ee:28:26:dc:68:d3:
6e:2d:5b:01:19:89:ef:61:2f:48:ce:bf:5e:a2:b6:ae:b1:a3:
7a:a1:4b:5a:8d:d7:cf:64:a2:17:09:e4:3d:c7:3f:56:ba:94:
64:2e:1e:b9:b0:8d:03:5a:8a:ef:c0:bb:6e:68:2d:3f:b5:bd:
10:65:b6:b4:2e:c2:77:1c:f6:46:9e:9a:3c:db:2b:dd:a4:d0:
1a:24:d9:7d:20:ef:a4:ca:0a:c8:2d:e9:12:18:23:f4:f5:58:
7e:3b:ec:20:5b:4e:10:ec:90:3f:6c:fb:3b:ed:e6:fb:5e:33:
c9:e0:38:62:c0:c6:94:b9:77:ef:ba:d5:67:ce:bc:25:88:e9:
77:44:b8:aa:3f:2c:ae:c9:a6:db:eb:37:73:19:65:da:29:e7:
29:de:86:52:31:61:89:2b:b4:b0:15:20:01:c1:8a:b9:9e:78:
52:09:ba:da:9e:08:4a:e8:2c:52:97:3d:2e:00:52:42:09:98:
7d:59:ad:5a:51:45:52:19:32:7e:68:1b:d8:aa:bc:e3:07:30:
b0:bf:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:26:40 2025 by rpki-client