Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa
File: kY7w4ePE63TKmfr6gJqVnI--Ofc.roa (raw, json)
Hash identifier: hynhkqMc44PnwwyFMmaSvi/X8AZnFON/Lr1tNJRVc1w=
Subject key identifier: 91:8E:F0:E1:E3:C4:EB:74:CA:99:FA:FA:80:9A:95:9C:8F:BE:39:F7
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0CC6
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa
Signing time: Mon 10 Feb 2025 14:23:22 +0000
ROA not before: Mon 10 Feb 2025 14:23:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.229.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3270 (0xcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Feb 10 14:23:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=918EF0E1E3C4EB74CA99FAFA809A959C8FBE39F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:11:ec:ef:28:f5:1c:55:0b:23:57:8e:61:
13:f0:03:39:99:72:7f:97:83:a5:95:26:ec:74:5b:
7b:60:31:e6:c5:be:fc:82:97:d6:e1:8e:03:1a:6b:
cb:0b:63:2e:c5:22:bf:89:63:d3:e3:13:74:35:08:
24:b0:c9:16:43:27:d5:78:9a:60:ba:0b:aa:82:3a:
a6:b3:21:ae:f4:f8:f0:27:bd:31:83:41:de:c2:55:
61:48:25:86:5f:fe:fa:59:4a:25:49:83:21:13:51:
de:2b:d8:48:db:d9:b4:39:32:ae:85:33:2b:a6:0e:
56:76:76:6f:ed:24:a0:27:61:e7:77:a0:46:04:a8:
7c:2a:47:14:a6:80:fc:35:1e:ce:f9:0f:4f:e3:30:
b9:8c:3a:6b:ee:ac:54:16:a7:e3:54:f2:0b:82:29:
f2:2b:28:41:99:bb:98:f1:62:43:a3:69:59:67:26:
1d:02:3b:52:57:ea:07:d8:d7:37:16:74:a3:52:79:
61:66:62:4d:36:f7:f9:96:dc:31:75:e4:6f:9f:0a:
09:8b:7b:bd:ab:07:43:9e:63:36:93:56:ce:6b:9c:
e1:eb:59:a0:d9:22:ea:dd:45:b1:01:5e:9a:d7:91:
05:2e:62:a5:af:0c:74:86:ae:05:66:a7:1f:b5:02:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:F0:E1:E3:C4:EB:74:CA:99:FA:FA:80:9A:95:9C:8F:BE:39:F7
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/kY7w4ePE63TKmfr6gJqVnI--Ofc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.100.0/23
Signature Algorithm: sha256WithRSAEncryption
70:15:20:13:55:81:be:c4:45:20:41:5d:b4:82:84:2b:d6:db:
87:07:5e:1f:e7:f1:df:3b:47:41:0a:74:de:00:6f:ea:a5:e1:
cc:25:70:22:72:7b:d7:d9:f1:26:90:81:86:be:67:ef:8c:db:
23:95:20:48:2e:28:f8:0f:8a:41:d4:98:d9:41:38:55:c5:2f:
f4:8c:56:5c:1d:75:a1:d4:b9:9c:64:1d:d4:aa:3b:1f:e2:45:
ef:b4:6c:fe:a8:72:4a:01:10:2d:5a:e4:30:ed:7b:34:0b:d3:
55:2a:4d:e0:d0:de:0d:3c:2d:c6:f4:6a:08:fa:b6:85:13:d3:
f3:e1:a9:a5:12:48:3a:96:67:04:bb:93:84:d5:b9:3c:0a:99:
60:cf:b5:c7:25:bc:30:d1:01:e0:e2:8a:87:39:75:c5:a4:30:
e8:16:1b:aa:86:88:7d:12:f7:4b:d5:71:f5:74:7b:c5:0d:04:
36:f1:f2:b8:8d:cf:66:be:ae:e1:1d:75:c6:93:52:11:59:fd:
51:55:f0:93:4d:f2:57:33:34:c9:31:89:96:46:ba:7f:16:40:
ba:af:b3:b2:53:8e:40:e5:1a:0c:fc:ae:31:b8:81:f7:3a:2c:
a8:89:ad:db:e8:80:26:5e:78:86:f8:67:61:38:dd:d1:53:bb:
b6:db:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:06 2025 by rpki-client