Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa
File: b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa (raw, json)
Hash identifier: /9tqoPWUNlxn3/P68aYLj0sPUsJb/Wf1BCpHZi5kQMI=
Subject key identifier: 6F:E4:D8:6A:FE:F3:1D:EC:BC:3C:A3:96:ED:6C:7C:0E:C0:97:DC:38
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0D17
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa
Signing time: Mon 10 Feb 2025 14:04:33 +0000
ROA not before: Mon 10 Feb 2025 14:04:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 103.234.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 10 14:04:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6FE4D86AFEF31DECBC3CA396ED6C7C0EC097DC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:08:1e:68:09:7d:6d:ee:b8:16:f0:2e:a1:
9c:a1:7a:5e:60:43:80:d2:5b:39:8b:d7:98:a5:27:
34:a8:26:87:65:81:f0:c9:63:f6:35:89:45:f7:55:
51:fa:ba:5c:98:b5:d3:5d:96:bd:53:58:13:27:89:
cd:a2:ab:4d:8c:2f:84:f7:04:e8:c4:a7:17:33:d0:
ce:16:8c:f0:1d:a9:bd:df:7f:17:ce:08:e0:52:b4:
c2:d1:5b:c3:5d:a8:cb:70:97:27:5a:98:e2:de:98:
bc:30:6b:94:1a:be:e2:6b:45:ac:3e:9c:32:83:9e:
8b:b2:3f:54:79:97:47:d0:2b:8c:48:75:df:7f:74:
28:51:54:d8:0a:9e:d0:a7:d6:8c:45:dd:7f:0d:0e:
81:1e:8b:6a:99:44:d5:d9:f1:e6:44:4a:02:65:a8:
b6:bd:c5:9d:ec:1c:a8:d0:1a:84:32:ae:95:2d:21:
c0:a7:88:c7:de:bc:41:c6:cd:5c:9c:27:c9:e4:43:
be:07:f1:fd:90:33:8e:71:61:c4:54:11:d4:b3:90:
ab:03:cb:49:b0:ab:fb:4d:1b:51:55:a4:f7:75:89:
0c:38:44:8d:30:33:63:ce:15:72:21:c1:18:36:ca:
38:47:e1:47:97:59:42:b2:58:bc:97:89:56:da:b1:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E4:D8:6A:FE:F3:1D:EC:BC:3C:A3:96:ED:6C:7C:0E:C0:97:DC:38
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/b-TYav7zHey8PKOW7Wx8DsCX3Dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.76.0/22
Signature Algorithm: sha256WithRSAEncryption
65:1a:e4:13:e0:a3:9a:d9:a3:97:b3:2f:3a:91:08:5a:54:66:
02:6d:21:49:78:1b:65:ed:fe:d6:c9:5e:90:f0:85:e5:36:2a:
24:8e:e7:2e:14:e1:83:a9:5f:74:da:d1:35:f8:3d:2f:3e:13:
f9:4b:e7:06:1a:a0:c6:63:d2:28:4a:4a:da:b4:a6:ab:f9:73:
b5:17:0b:78:ba:72:d0:3a:58:78:c4:cb:52:47:61:7e:93:b0:
6a:26:7a:cc:ea:db:6f:50:fe:a1:3a:65:ca:33:07:49:0e:98:
c6:87:51:8b:6b:9d:b5:01:0d:f1:c1:4e:6f:f0:eb:cb:10:26:
f6:9e:6a:c4:e6:66:d6:8e:53:74:0d:f8:7a:0e:33:59:14:53:
35:51:ed:9d:51:e3:3a:a8:8f:e6:2d:40:e6:31:ec:be:39:a3:
ad:09:be:5b:07:fe:66:0d:7f:80:85:1b:9f:ce:80:04:98:81:
72:ee:6e:d7:fd:60:30:0f:7d:91:95:9c:68:b2:91:15:b8:f0:
73:cd:fc:ca:e1:c0:c8:3a:3a:4c:1d:c9:1e:8e:7f:ce:eb:26:
c1:bc:e3:26:4e:0d:05:73:0a:4f:a5:6c:9e:54:4d:a6:38:77:
03:cd:c1:8b:af:b4:d8:78:03:c6:fc:f5:73:e0:6a:36:6b:0a:
ea:d8:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:20 2025 by rpki-client