Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa
File: VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa (raw, json)
Hash identifier: OqpB/74KEq5CLRrcGpuP5PJwLxDCOmCaW+rOSSA7Ucc=
Subject key identifier: 55:8D:F3:8F:E2:22:10:1A:E6:A5:D6:45:0E:1E:BF:0A:AE:00:EA:24
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0CD1
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa
Signing time: Mon 10 Feb 2025 14:12:57 +0000
ROA not before: Mon 10 Feb 2025 14:12:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 103.130.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Feb 10 14:12:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=558DF38FE222101AE6A5D6450E1EBF0AAE00EA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:f1:cd:a9:fa:f0:4c:d5:ea:55:1b:06:fc:
7d:dc:31:26:3b:f0:87:4a:51:b1:30:09:0d:4d:50:
fa:20:67:b8:ca:f7:5d:69:10:9d:90:47:7d:7b:e3:
bd:fc:f5:6c:52:4d:6f:58:f7:db:51:6f:fe:2b:a3:
ad:27:63:52:c6:a8:fe:2a:93:81:b1:51:7d:48:b8:
12:67:c0:3d:d8:7e:c2:96:74:70:2e:b5:8c:4d:eb:
21:bc:f5:89:ac:71:70:06:5d:b8:9a:1e:8c:28:69:
8f:55:83:85:70:c3:9f:3c:e8:31:46:14:81:42:0f:
de:61:ae:f4:4f:ad:8a:c4:ae:c2:8f:43:03:57:af:
c6:02:1d:60:ea:b4:17:ad:f1:36:23:7f:d4:00:16:
47:2f:9f:14:26:0e:f9:33:89:c4:ea:35:e5:2e:ff:
d8:dd:15:46:52:ca:0a:78:31:c2:57:dd:9d:5a:7b:
b4:1f:5e:48:e2:be:59:7c:55:1a:19:89:c7:ec:d9:
1c:5f:51:92:8b:40:51:69:8a:0f:11:1e:f1:fc:61:
35:e6:0b:67:76:90:3a:ef:2d:9f:c2:e6:b4:79:77:
1d:dd:25:53:bc:3c:7d:b4:8b:96:81:08:b3:67:63:
78:6b:b4:c6:51:33:a0:56:49:7b:99:35:f3:9b:65:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:F3:8F:E2:22:10:1A:E6:A5:D6:45:0E:1E:BF:0A:AE:00:EA:24
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/VY3zj-IiEBrmpdZFDh6_Cq4A6iQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:11:c3:f2:e5:f2:b8:35:45:42:ef:ac:f1:80:bb:bc:31:80:
54:0b:0f:98:2d:85:ca:37:32:4f:1d:b8:13:9c:1a:8f:fe:c8:
0a:7f:89:b0:c5:06:6a:dd:ce:17:dd:a9:ec:ff:18:07:db:0c:
0c:88:da:a8:78:fc:8c:4c:02:26:bd:3b:f9:60:0e:28:b4:bb:
04:5b:ef:4a:7d:ad:2a:bc:c8:e8:41:c5:7d:df:d7:01:a9:e0:
49:e8:36:6c:f1:c9:40:81:70:43:cd:c3:fe:c5:82:55:ac:1e:
59:9f:1d:04:75:bd:87:1c:69:75:d6:ea:ca:49:52:53:b7:ea:
82:24:dd:49:81:2e:18:bd:81:84:eb:69:c7:2e:58:28:c7:5a:
80:f4:8f:8b:b7:95:67:8a:7c:b0:30:ad:53:9c:bd:53:ae:71:
3c:ca:2c:1f:a9:bc:31:52:ad:f4:80:0b:15:99:6e:bc:6a:64:
f1:45:35:a7:78:b5:de:99:5a:7a:ed:92:a4:da:a1:bc:c0:ea:
d0:12:eb:c0:50:e0:84:fe:c4:33:f3:9d:fb:06:ed:20:0d:0d:
3c:21:43:61:cd:21:6c:6e:46:75:77:78:63:71:a4:af:92:2e:
a1:af:60:c5:0d:9e:b2:f0:52:6e:a0:ce:63:b5:71:5d:99:fb:
82:d1:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:44 2025 by rpki-client