Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa
File: r94PRjFaGKPSi_PFzF_UsCsqR2M.roa (raw, json)
Hash identifier: MfBoxtr1MqGBbWhTfeIyzsJeWBRschy1MQZmvvV9TR0=
Subject key identifier: AF:DE:0F:46:31:5A:18:A3:D2:8B:F3:C5:CC:5F:D4:B0:2B:2A:47:63
Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Certificate serial: 0C30
Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa
Signing time: Mon 26 Aug 2024 05:34:43 +0000
ROA not before: Mon 26 Aug 2024 05:34:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.122.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Validity
Not Before: Aug 26 05:34:43 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AFDE0F46315A18A3D28BF3C5CC5FD4B02B2A4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:06:2d:2b:1d:ee:db:23:cd:6d:cd:4f:d2:
1a:d7:5b:dd:63:bc:5a:17:d7:b1:d8:21:64:cc:b5:
b8:6d:38:b7:03:b9:21:5e:59:53:6b:07:b8:f0:7e:
bc:8f:d9:41:d7:8b:fb:eb:49:78:f7:64:c8:fe:bb:
1b:31:87:cc:56:66:1a:45:5d:01:aa:eb:65:13:7d:
d3:c1:33:d6:be:2a:7a:66:ad:49:bb:95:1b:65:47:
6f:a4:16:36:7e:7a:1b:a7:8d:6b:d9:0f:22:12:4f:
46:d5:04:38:0c:f5:58:ae:5f:85:42:9b:5d:82:ee:
2c:87:5a:82:a7:6d:d8:9e:be:50:17:0b:30:c7:e7:
b8:f5:94:a7:65:e6:ec:5e:b2:35:2f:3d:4e:9b:20:
04:41:2e:26:fc:7c:79:4e:0f:b2:c3:75:f3:e7:49:
fe:4d:11:4f:f6:e5:f1:54:0c:f9:72:1d:92:14:4b:
f0:7a:9c:84:d4:ea:dd:01:7b:b5:35:61:0c:5a:c8:
a3:d8:c7:2c:17:a7:78:3d:52:f8:39:45:e3:c6:52:
57:bd:fb:1c:01:ac:5c:24:be:5f:20:46:8c:3f:4a:
06:86:39:97:36:d6:5b:f4:7a:55:c2:a0:84:e1:4c:
27:e3:cd:7b:ee:32:d8:08:2f:23:f5:31:8a:de:cc:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:0F:46:31:5A:18:A3:D2:8B:F3:C5:CC:5F:D4:B0:2B:2A:47:63
X509v3 Authority Key Identifier:
keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.227.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6b:50:c6:c3:f6:a7:ff:83:e2:55:45:0b:7e:03:f4:79:03:
b6:3e:d8:ba:a0:05:05:be:fd:7f:ae:0a:23:35:08:4b:17:34:
3b:9c:ae:fa:d0:56:c7:96:96:2a:18:03:66:00:f1:ef:d2:49:
d1:ef:d0:9c:07:1e:09:a6:ee:48:f5:f5:1c:56:9b:51:2a:3c:
3a:bc:10:05:52:54:83:ec:a5:af:7b:20:62:fc:9f:85:e8:ad:
02:30:e5:8e:6c:03:f9:d3:da:7f:5b:a4:6b:87:e5:03:7a:21:
29:80:41:65:87:62:37:38:32:4d:1c:58:b8:d6:cd:4e:56:f4:
61:d4:32:8f:c5:71:dd:94:a3:ac:81:42:7b:ab:52:b7:06:b2:
66:06:54:5d:ba:70:8a:41:d2:c8:3d:ee:8a:67:dd:df:af:48:
bb:61:f3:27:6f:5b:6d:3f:1e:de:5c:b5:8b:37:f3:03:fe:1b:
c4:1b:08:72:a9:16:1f:6f:08:8e:58:7e:61:a8:21:4d:52:25:
08:b7:4d:d9:c2:bc:0a:86:37:db:0d:80:b0:84:50:8b:2f:ca:
68:a5:29:62:0e:dd:65:cc:b2:c5:64:ca:cf:2b:fb:5a:c9:fc:
62:53:65:25:48:6a:a0:b8:08:a1:a8:1f:c3:2a:9d:f4:3c:56:
59:c5:81:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:49:55 2025 by rpki-client