Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kF31-BTwM6SEKxvBmJEEu4lKL1w.roa
File: kF31-BTwM6SEKxvBmJEEu4lKL1w.roa (raw, json)
Hash identifier: sZ3iiLSDK1+1h06QBNaxcSayGPZZ8QjLyebcUicNCMY=
Subject key identifier: 90:5D:F5:F8:14:F0:33:A4:84:2B:1B:C1:98:91:04:BB:89:4A:2F:5C
Certificate issuer: /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial: 031C
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kF31-BTwM6SEKxvBmJEEu4lKL1w.roa
Signing time: Mon 26 Aug 2024 05:12:00 +0000
ROA not before: Mon 26 Aug 2024 05:12:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 16509
IP address blocks: 103.168.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Validity
Not Before: Aug 26 05:12:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=905DF5F814F033A4842B1BC1989104BB894A2F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:d0:40:50:76:49:fb:74:49:41:61:8d:21:
1e:fe:72:da:a3:b8:dc:86:19:21:75:6e:c4:ba:1a:
5a:0f:4a:c9:94:57:bd:2c:d9:b8:81:52:ea:3c:c7:
ad:e1:9c:1c:68:05:9d:0c:13:f4:81:6d:f5:13:62:
36:c5:89:a6:b7:6e:55:b4:63:df:b8:bc:e6:ea:38:
14:21:3c:99:37:07:57:c2:b5:67:34:3d:ff:c0:e0:
7d:f2:10:67:c5:77:bb:d2:29:4f:a4:60:c6:33:d6:
59:ea:9e:b5:1a:7c:48:ed:87:42:16:72:7e:36:f5:
ef:1f:b6:ba:e5:e8:91:e4:4f:01:b7:fc:86:35:ea:
00:dd:c6:26:db:78:02:3c:2e:74:86:70:52:72:d2:
c2:a9:2e:13:ed:c4:e3:49:c7:88:95:82:98:0e:1d:
91:16:df:13:d2:e3:28:d4:f4:13:67:c3:ff:cc:75:
ed:17:a1:17:74:36:d8:95:89:fd:43:45:c5:83:79:
8a:cf:da:fa:46:f8:46:9d:f7:6e:4e:5e:1e:0e:a8:
63:93:da:2b:06:0d:f4:b0:78:71:ff:60:c4:1e:15:
1f:aa:4e:fd:d5:c8:6e:ed:21:1e:8d:a3:ee:cf:d9:
36:91:9d:cf:41:af:5a:df:a9:3e:57:80:ec:a2:22:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:F5:F8:14:F0:33:A4:84:2B:1B:C1:98:91:04:BB:89:4A:2F:5C
X509v3 Authority Key Identifier:
keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kF31-BTwM6SEKxvBmJEEu4lKL1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.156.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:93:57:86:e4:15:8b:e5:6c:62:7b:54:26:ef:a9:e7:9c:d3:
4f:88:2f:c1:63:d1:00:7c:f0:e7:a1:1e:cb:1f:a8:15:52:03:
13:ad:21:4e:9b:d7:7b:18:b3:b6:58:c0:c0:7b:8e:29:54:4d:
dd:c3:04:f2:82:4d:38:bf:3c:7b:0c:e6:ad:9f:64:99:fe:46:
ec:49:99:5a:65:e5:da:37:c8:de:9a:f2:0c:40:77:34:d2:67:
4e:fd:45:98:35:5f:f1:12:4c:7d:82:83:ed:22:24:a5:5f:f4:
a9:83:a9:d7:3f:06:05:06:95:60:49:42:5a:75:e4:57:66:44:
c0:7e:82:cc:a6:e2:57:9f:54:94:95:db:74:69:85:43:6f:0e:
4a:54:3d:8d:5e:bb:25:3e:b1:31:ea:ce:5e:e0:66:f3:5a:48:
5d:c3:77:49:a4:44:ab:4e:6d:a7:42:85:94:6b:a2:fe:6b:a3:
ba:47:56:c4:fd:4d:aa:97:e4:5b:76:2e:71:0f:19:80:84:c7:
bb:04:14:12:ff:19:93:a5:ce:26:4e:0a:bf:bd:2b:2f:12:d6:
f3:85:15:32:d0:c0:a7:3d:19:34:0e:ea:14:2c:2d:16:4f:90:
d6:b0:62:8c:a1:7e:29:97:9c:e6:35:da:36:38:dc:d3:ef:9e:
cf:77:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:48:39 2025 by rpki-client