Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa
File: vMBZRLLyaq0pBBu-HJMtabfcaQM.roa (raw, json)
Hash identifier: hHfFYNJCY87+AubT3KB6iT9iIFJ6bRxSP2gl2C47Fd0=
Subject key identifier: BC:C0:59:44:B2:F2:6A:AD:29:04:1B:BE:1C:93:2D:69:B7:DC:69:03
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1262
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa
Signing time: Mon 10 Feb 2025 14:14:46 +0000
ROA not before: Mon 10 Feb 2025 14:14:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10085
IP address blocks: 203.163.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4706 (0x1262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BCC05944B2F26AAD29041BBE1C932D69B7DC6903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:6e:78:c1:60:99:84:8d:e0:27:91:c1:35:
03:13:8f:76:a1:ac:4c:63:49:58:8c:8b:b5:7f:93:
98:67:60:e2:13:07:60:27:21:28:b1:43:75:3e:69:
4e:87:ab:87:40:eb:2d:c6:86:ac:74:ba:03:09:f3:
c2:9c:13:a4:12:76:c9:6c:d4:ea:ac:51:3e:c4:e3:
55:bf:1c:66:b5:af:39:30:4f:90:c2:a4:4b:ff:26:
da:37:30:71:f1:bc:a8:d5:8d:8e:e8:be:12:3e:e7:
0f:02:34:dd:82:fb:55:c1:74:be:5c:68:f9:c0:49:
ea:5e:54:c1:99:5a:a9:25:08:55:a0:12:14:da:86:
ca:bb:3d:9b:fb:25:e3:06:10:c7:df:16:96:d7:8f:
8a:79:bf:98:08:eb:7d:35:4b:fc:87:5d:f8:74:88:
52:c0:9f:f1:e1:fd:8e:a2:3a:d8:5a:22:8e:78:0c:
46:28:a3:e5:db:56:a0:d9:d1:5e:ba:07:51:d2:01:
56:f9:b3:00:30:1b:29:7c:1a:cd:14:85:82:d5:f8:
66:f6:ca:a2:f9:f1:2b:3b:98:c6:a7:b1:0b:20:e2:
47:de:ca:5b:39:b0:59:1f:84:77:86:3f:9c:c3:37:
91:ca:6d:e6:08:35:02:ed:7b:bf:e7:d4:29:10:f9:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:59:44:B2:F2:6A:AD:29:04:1B:BE:1C:93:2D:69:B7:DC:69:03
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vMBZRLLyaq0pBBu-HJMtabfcaQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:cd:5e:b7:70:76:0b:6e:a2:a9:d1:a2:90:38:36:85:4a:2f:
68:b8:bb:b6:b3:3f:4e:c9:23:db:c5:2c:e9:24:bf:1e:9e:53:
5a:c9:5d:3f:90:bd:97:20:26:46:78:81:13:57:ae:e9:ae:f0:
18:04:4e:3c:7f:68:50:5c:f1:ba:a0:b7:ce:63:f6:34:c2:7d:
67:8a:c3:63:5e:74:67:3f:b7:05:91:b0:b9:48:fe:ad:b5:46:
af:e6:e2:e6:3c:87:75:c4:93:b3:b4:87:17:80:3d:ef:b5:82:
c4:71:f6:13:66:c9:30:0e:76:5c:47:68:fe:d3:9b:10:f0:22:
e3:55:df:9b:2b:0d:50:b7:92:8e:a1:29:79:75:ad:e8:c1:38:
ef:ec:ff:a0:43:2c:5f:87:08:47:3f:c5:dc:2b:57:4d:e8:b1:
0c:8f:aa:ac:c1:2f:97:ad:66:97:1d:0e:f0:f2:9b:3d:e7:10:
6b:d3:81:0a:69:26:cd:49:05:ab:91:85:f9:db:ce:6e:b5:ac:
5c:d3:e0:85:3d:5b:ff:77:0d:68:e8:3d:ec:c0:7a:25:1f:9c:
de:15:5b:9c:97:83:79:51:46:61:5a:70:4c:10:a9:26:da:36:
26:92:3e:56:84:f7:06:9a:30:ce:e2:6e:9a:55:b9:45:5e:63:
10:e4:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:32 2025 by rpki-client