Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa
File: rUlyzciChB4lk0w74PjENW97hB4.roa (raw, json)
Hash identifier: EBqSgEPYDsrxw7gea56H7XPhPCcsXpGwB4mjFtgvvXQ=
Subject key identifier: AD:49:72:CD:C8:82:84:1E:25:93:4C:3B:E0:F8:C4:35:6F:7B:84:1E
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 136C
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa
Signing time: Mon 26 Aug 2024 05:25:34 +0000
ROA not before: Mon 26 Aug 2024 05:25:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 14618
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4972 (0x136c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Aug 26 05:25:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AD4972CDC882841E25934C3BE0F8C4356F7B841E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:83:5e:97:76:f7:cc:d6:88:eb:ea:db:1d:
07:c1:2f:aa:63:0b:3e:96:41:9f:90:ac:cf:17:ee:
9d:7d:fe:0c:5f:74:e7:a0:6b:97:52:ed:6e:ce:0a:
dc:f3:c5:a8:28:84:7e:8e:8b:df:a5:b2:98:62:58:
27:90:8d:99:fe:4e:52:5c:28:10:48:73:e7:08:0a:
6f:a2:c2:3e:ee:2f:6f:d2:1d:a8:bd:ef:db:38:67:
f4:00:a1:c0:ff:7a:08:d4:bd:a8:f3:db:ba:74:22:
fc:8a:32:4b:87:2c:02:2c:41:44:97:be:ae:0b:c4:
77:0a:6b:d2:52:f1:5b:93:51:af:ce:49:1f:48:2e:
01:fc:10:87:d1:8e:5c:b7:3d:71:c5:8f:bd:1b:62:
e6:b4:db:60:fe:3b:48:55:34:8a:dd:36:de:e7:d1:
bc:b5:a0:67:d1:ce:7f:eb:40:6c:ec:78:de:be:32:
9e:55:0e:81:cf:c6:06:4a:1c:f9:ed:c6:f8:1a:ad:
ce:cf:4a:03:ee:6d:fb:d6:33:c7:25:0f:02:01:9b:
f5:43:59:0d:ad:67:f7:8b:a3:a9:a6:16:4a:d9:93:
a5:17:e7:b1:7f:91:4d:07:be:e4:df:c1:20:24:a7:
ee:4c:4a:b3:5f:68:e4:08:9f:ab:15:f0:96:32:e3:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:72:CD:C8:82:84:1E:25:93:4C:3B:E0:F8:C4:35:6F:7B:84:1E
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ca:33:40:83:16:95:13:59:5d:24:09:af:55:15:34:8d:00:
6e:6b:45:78:e8:a1:8a:8a:27:3d:ec:56:e9:e9:da:31:0d:f3:
6e:64:30:aa:35:1b:cc:77:36:9d:b6:f8:6f:56:e9:c2:f4:f8:
6a:6c:03:a1:d3:23:f2:4a:a9:7e:a0:84:ae:e1:10:df:bd:3a:
c1:b6:ff:da:9f:e2:22:1e:00:be:a6:86:f2:f7:fd:94:57:88:
5f:80:dc:6a:7f:57:9b:04:9b:91:45:df:a5:31:42:10:64:bc:
8d:11:13:d8:a8:7c:7c:76:81:49:4f:03:38:9e:f2:ae:1f:e0:
6c:c2:28:9e:6a:0e:fc:39:a8:5e:9b:25:42:53:69:6e:28:15:
c3:34:3d:ad:41:93:bd:d7:11:b1:3b:ee:e2:bc:38:9d:eb:69:
f1:9a:96:c8:83:03:69:bb:ed:67:df:4a:1b:7b:42:af:d2:a6:
a5:fa:0a:58:b8:46:8e:d3:dd:fe:72:24:39:39:32:aa:f0:a7:
21:7d:9a:4d:d5:9d:13:1e:c7:36:06:ab:06:c1:fb:d4:3d:3d:
9c:d2:1d:5e:fe:07:07:04:c6:d7:14:d5:45:9a:0a:10:97:04:
f7:08:3b:24:ba:56:fc:a7:e6:70:74:87:24:b2:67:37:dc:fc:
cf:56:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:24:14 2025 by rpki-client