Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa
File: SLgx61JrqQPBxVcp4DNYoKBmdME.roa (raw, json)
Hash identifier: 0bbM+QsBAWU/ayeWAbiBW2SEJSrv0SpkVwq9gXtQ18k=
Subject key identifier: 48:B8:31:EB:52:6B:A9:03:C1:C5:57:29:E0:33:58:A0:A0:66:74:C1
Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6
Certificate serial: 0255
Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa
Signing time: Mon 10 Feb 2025 14:01:31 +0000
ROA not before: Mon 10 Feb 2025 14:01:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 103.14.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6
Validity
Not Before: Feb 10 14:01:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=48B831EB526BA903C1C55729E03358A0A06674C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:51:98:0d:ee:5f:71:ef:eb:9d:10:0f:0a:
f9:53:17:59:c2:53:f2:67:9e:32:71:63:d2:b1:33:
0a:f1:e1:14:43:ad:c2:dd:2f:5f:18:5e:0d:1e:80:
e6:cc:9d:04:6d:43:d1:68:29:fc:ef:51:b3:82:35:
e2:10:fb:ad:46:52:d4:d3:5a:73:b8:8f:16:e6:46:
b2:15:77:b9:23:6c:a4:ca:0c:f2:0b:e4:aa:69:a3:
1d:db:09:9d:dd:eb:cc:0a:4a:00:7d:2b:1e:48:79:
77:36:39:3a:50:52:a6:c9:72:7e:71:c6:ad:90:cd:
fb:09:a6:ae:86:cc:00:1a:c0:cc:24:46:0d:a0:bc:
87:82:d3:a7:ae:79:8f:3f:f0:4c:ea:84:f4:f0:af:
68:fc:bf:4f:ed:81:82:d5:0d:92:19:37:f2:6c:6b:
7b:f4:c7:2d:86:54:ce:95:66:3d:d3:1d:32:eb:e2:
07:3d:ec:c3:68:72:cf:d3:25:b9:38:7f:3c:36:d2:
50:be:d4:a8:3e:5c:31:54:d4:95:d9:7a:ba:5c:a7:
57:1d:f6:01:d5:26:33:9c:7f:e6:bb:1b:09:4e:da:
05:a7:f1:d0:bd:3c:fc:ad:19:e2:d0:29:3b:7c:ae:
ad:a5:f2:bc:04:70:88:2d:ab:ca:bd:5e:19:5e:2b:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:31:EB:52:6B:A9:03:C1:C5:57:29:E0:33:58:A0:A0:66:74:C1
X509v3 Authority Key Identifier:
keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/SLgx61JrqQPBxVcp4DNYoKBmdME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.170.0/23
Signature Algorithm: sha256WithRSAEncryption
16:62:97:86:51:f3:3c:a4:41:54:dc:c8:de:de:a2:06:78:42:
4a:1b:c3:d1:59:a9:e9:66:2c:c5:d0:38:46:51:94:0f:63:c0:
4e:9e:76:cc:50:82:ec:b5:1c:44:f7:40:b9:75:89:10:07:07:
00:c1:aa:8d:90:af:ae:53:df:e3:f7:15:3c:1f:e8:88:b2:0d:
ac:11:ab:b8:11:f1:19:7a:b6:4f:df:35:6e:7c:29:5b:4d:f1:
20:53:06:95:d5:2e:a4:5b:6a:a8:fc:57:13:14:64:fc:3c:78:
c3:21:85:5d:cf:4c:40:81:ca:20:fc:70:e1:d4:22:72:52:bf:
b7:a1:ee:aa:28:56:f3:6e:62:c0:3e:60:c5:3a:d1:48:3f:fb:
09:27:e4:a0:ed:ef:4c:33:78:e3:5c:23:5e:b9:d6:03:53:d9:
a8:1f:3e:77:71:55:58:f3:b5:c6:e1:ba:1f:c3:c0:88:13:0e:
8d:0d:07:01:9a:35:e6:e6:a6:30:b9:2d:9c:c8:aa:21:d9:62:
bf:03:f2:95:cd:5b:ea:ef:17:65:3f:41:37:9c:bb:2d:af:66:
4d:a9:85:24:20:e1:c5:34:29:f9:ba:87:71:06:17:62:0c:c4:
24:64:64:1a:a4:60:39:ec:2e:5a:29:51:14:af:67:2a:b3:f4:
da:bd:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:00 2025 by rpki-client