Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa
File: lkfdWKeNej2hofOoS_9fE6CGX8Y.roa (raw, json)
Hash identifier: UPj5fagpr85Sbzrtoylblqxu2YscKju9VGV+TsiWy70=
Subject key identifier: 96:47:DD:58:A7:8D:7A:3D:A1:A1:F3:A8:4B:FF:5F:13:A0:86:5F:C6
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1366
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa
Signing time: Mon 26 Aug 2024 05:25:32 +0000
ROA not before: Mon 26 Aug 2024 05:25:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 202525
IP address blocks: 103.123.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4966 (0x1366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Aug 26 05:25:32 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9647DD58A78D7A3DA1A1F3A84BFF5F13A0865FC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:bc:89:f6:01:be:42:1b:67:5d:f0:b7:27:
e0:37:b1:0c:54:29:22:b9:15:ed:40:a3:a7:ec:59:
26:b8:5b:06:fd:12:52:bd:f1:42:49:e6:70:23:ac:
5f:46:3b:d9:dc:33:cf:25:c0:91:d9:3f:cd:8a:7d:
8c:b2:0d:6c:22:f5:07:b8:d7:b0:a1:14:3d:1b:23:
b0:e0:1a:72:26:9c:05:f3:71:4d:01:33:31:af:46:
f6:7d:a0:40:97:15:09:d9:e0:b1:b8:9d:fe:67:a8:
2e:ab:ec:80:5c:c6:fe:f1:10:e8:0b:50:8a:17:1b:
b8:6f:b2:d8:98:30:3d:da:27:d3:12:aa:2c:00:e1:
f9:bd:72:45:bf:c4:83:fa:73:0c:a2:f9:a1:15:a0:
37:3e:5b:e2:ab:56:05:8c:51:bb:4a:32:e2:9b:19:
11:72:86:ad:df:16:a9:90:6f:0a:f7:93:3b:b3:ba:
88:6b:34:bb:49:bb:79:16:8b:58:55:74:3e:02:4c:
92:b8:69:86:7a:ee:21:89:6a:12:7e:82:ca:03:39:
33:51:0b:00:3a:b8:83:2a:29:37:af:dc:32:a7:fb:
4f:7c:96:ec:f8:49:8e:35:e5:6b:36:a9:d9:44:4f:
c7:8d:dd:cf:cd:6c:6c:d4:17:3a:d0:04:a3:fa:b3:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:DD:58:A7:8D:7A:3D:A1:A1:F3:A8:4B:FF:5F:13:A0:86:5F:C6
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:37:bf:77:bc:3f:a4:a9:b1:c3:6e:4b:da:79:5d:45:34:fe:
0f:ee:f5:f2:a5:a0:8a:17:43:31:f9:0c:58:38:43:bf:59:79:
7d:c3:f6:95:45:b2:60:a4:e8:02:77:1c:79:be:40:bc:d4:b5:
75:ad:20:77:c8:cc:d3:d7:7a:82:78:fd:1e:b2:fb:e1:f6:ce:
70:9a:1e:44:d7:d0:9f:a5:27:2f:f6:7e:69:54:58:58:25:b1:
bc:d7:00:93:83:71:42:3b:5e:77:78:f3:82:14:1f:f9:e8:19:
6c:fe:bf:92:da:1c:82:72:48:d6:55:66:ea:51:0f:e6:45:43:
74:c7:0a:96:c6:75:25:fa:19:3e:a7:05:1a:6f:bb:3d:c6:ad:
a3:6f:e1:5a:57:3d:d8:fd:8a:d1:56:62:63:f8:d3:34:c1:41:
5f:ff:07:9d:2d:57:28:ce:a6:b2:73:4a:69:3e:61:cb:65:06:
bc:ef:16:2d:e2:a4:04:d7:3f:57:db:85:e7:dd:91:a7:c2:e1:
cd:4b:3e:d8:72:61:71:aa:47:8b:39:eb:94:3e:cc:31:ce:ea:
d8:15:ec:16:9c:b7:d4:9a:23:1b:09:a2:c9:de:46:c9:ba:cf:
79:ed:e7:1d:12:e0:3c:3a:21:0b:04:57:d4:ab:90:f5:ef:1f:
0f:75:a0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:22:38 2025 by rpki-client