Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GH/cLk6S8zPSHKvea55JXML7OoVB-E.roa
File: cLk6S8zPSHKvea55JXML7OoVB-E.roa (raw, json)
Hash identifier: eTjEuz8thYMVmAKgRP2i3luclkreu6tPTMar4VhLkzs=
Subject key identifier: 70:B9:3A:4B:CC:CF:48:72:AF:79:AE:79:25:73:0B:EC:EA:15:07:E1
Certificate issuer: /CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Certificate serial: 11ED
Authority key identifier: E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/cLk6S8zPSHKvea55JXML7OoVB-E.roa
Signing time: Fri 01 Sep 2023 08:53:51 +0000
ROA not before: Fri 01 Sep 2023 08:53:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.130.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4589 (0x11ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Validity
Not Before: Sep 1 08:53:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=70B93A4BCCCF4872AF79AE7925730BECEA1507E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:75:ad:d3:a5:19:c6:4c:f9:ff:8c:f2:78:
b9:83:7f:84:9e:f8:36:61:14:ff:2b:ab:8d:3f:70:
be:68:18:4d:c3:7e:a8:d8:27:6a:23:f3:10:27:a9:
ec:1a:4b:b2:6c:e5:8f:f0:5f:d2:22:32:19:25:c3:
c4:c5:92:74:dc:64:74:e6:5f:7e:62:c3:c7:79:4e:
8c:b0:2b:67:8a:cd:b1:f9:e2:3b:6c:bf:32:e5:a1:
9a:87:d9:9f:bf:55:e0:d0:c4:33:7b:12:c9:50:ef:
5b:34:be:d1:b8:f6:65:de:cb:0c:79:cb:aa:23:c8:
3d:51:b5:63:0c:ff:91:1a:9d:6e:d9:9e:09:0e:54:
c1:5b:fb:4a:54:e9:78:a8:c9:aa:5f:9b:d2:17:de:
45:d2:c3:ac:02:24:63:ed:1e:da:12:c4:79:c0:e0:
94:d3:ea:62:f5:30:37:54:48:38:fe:cb:3a:7a:7e:
24:d2:e3:17:2b:23:64:8d:c2:a4:36:b0:3b:f7:7f:
c6:5e:df:73:22:8f:69:cd:95:08:f8:f4:b4:5d:d3:
4d:58:21:1a:d7:bb:aa:86:ff:3f:46:ed:0c:2e:6c:
84:17:e0:ec:91:12:c7:0c:ad:f0:92:4d:8a:6a:e8:
d7:7c:b4:9f:e6:a3:5a:40:a3:24:44:2a:41:48:2e:
10:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:3A:4B:CC:CF:48:72:AF:79:AE:79:25:73:0B:EC:EA:15:07:E1
X509v3 Authority Key Identifier:
keyid:E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/5jxaFbfOkAMBCPStOOVB5s21vv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/cLk6S8zPSHKvea55JXML7OoVB-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:09:3a:a4:cf:0d:f7:9c:ba:1b:72:98:2b:46:79:0a:1e:6f:
87:1d:ce:8e:fb:70:a2:f6:ed:db:41:38:cc:bd:a6:e3:72:f8:
e2:3c:21:46:07:d2:ab:68:44:eb:aa:a0:94:4b:8b:05:f2:25:
ee:a3:f7:5c:bf:89:d3:a3:40:9e:54:6e:93:ea:b8:f8:43:eb:
6e:db:32:56:fe:7a:f0:5c:94:7a:b4:78:05:e4:ad:c3:56:bd:
16:19:d0:aa:e2:20:4e:a9:d9:20:0e:65:51:97:73:cd:66:65:
df:b9:6a:a2:72:f5:63:3d:65:5e:a6:38:f9:6a:9e:a1:79:7f:
d4:8c:ce:0d:fc:d9:0d:c4:80:57:1c:62:09:a8:b6:7c:27:67:
ff:72:9a:fe:a3:af:15:75:91:a2:28:f1:2c:15:ca:b6:fd:eb:
81:7a:a9:c4:14:77:f3:46:d5:80:2c:2f:ee:c8:11:7f:66:6d:
63:47:ef:a5:94:b8:ae:c0:05:40:8e:77:e7:1b:3a:b5:4d:26:
63:76:a0:90:70:dd:a4:4d:9a:d7:84:5f:a4:7b:ff:69:42:51:
d5:4f:c8:43:94:5d:c1:10:85:1c:65:78:f0:c1:3a:d1:df:2f:
4a:c5:ea:fa:98:13:f3:f3:11:18:06:2a:95:1f:31:d9:ac:b7:
42:98:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:12 2025 by rpki-client