Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GH/l-4Vbaz1SxgDkehBBqpchqld1Vw.roa
File: l-4Vbaz1SxgDkehBBqpchqld1Vw.roa (raw, json)
Hash identifier: PlQDQI3bOzhOi9FLrJ/Z3Qy9Oa2h3SMaYbZ4dOe5SaY=
Subject key identifier: 97:EE:15:6D:AC:F5:4B:18:03:91:E8:41:06:AA:5C:86:A9:5D:D5:5C
Certificate issuer: /CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Certificate serial: 10FF
Authority key identifier: E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/l-4Vbaz1SxgDkehBBqpchqld1Vw.roa
Signing time: Thu 15 Sep 2022 02:41:37 +0000
ROA not before: Thu 15 Sep 2022 02:41:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 103.130.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Validity
Not Before: Sep 15 02:41:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=97EE156DACF54B180391E84106AA5C86A95DD55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:7e:cd:ef:8c:65:80:52:69:74:95:0c:bb:
d5:13:db:f3:a2:93:5e:c4:99:07:06:18:17:a0:06:
64:94:08:6f:67:77:53:1a:e4:55:3a:da:da:f3:c0:
e7:a1:cb:f9:73:e4:ba:62:a4:ba:02:e3:77:8d:c2:
ab:cc:a5:70:3e:67:ec:1a:6a:3e:21:46:c7:7d:f5:
ab:72:92:ea:f3:8c:22:23:bf:6e:cd:92:e4:4d:33:
5e:06:5f:a2:b9:81:3e:5f:e2:58:8f:ac:3d:b3:2b:
be:cc:0a:bf:66:b8:93:a8:f2:48:f6:f9:98:d6:7c:
bf:d6:e2:d7:0d:e6:fa:5e:d7:9a:06:75:3f:31:77:
5d:d2:fa:a9:dc:45:fc:31:bf:b3:c9:df:c8:95:31:
b1:af:1e:d3:04:6b:00:43:28:98:02:d2:9d:36:b9:
09:29:80:9e:30:e7:4e:bd:84:fc:b3:9f:94:de:72:
51:0e:e6:27:1c:36:ae:d4:7d:a2:fa:70:a7:ef:1f:
d8:ca:c0:17:ce:be:ac:33:12:ba:26:cb:93:9a:bd:
32:f2:2c:52:53:47:d4:74:80:3e:e0:f1:83:b0:95:
4a:d3:f6:06:c2:85:a3:d8:0d:95:26:5d:15:53:71:
91:83:00:c5:72:5b:3f:88:28:f9:b7:fa:a9:0e:5c:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:15:6D:AC:F5:4B:18:03:91:E8:41:06:AA:5C:86:A9:5D:D5:5C
X509v3 Authority Key Identifier:
keyid:E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/5jxaFbfOkAMBCPStOOVB5s21vv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/l-4Vbaz1SxgDkehBBqpchqld1Vw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3d:e3:df:d0:84:0e:49:0e:d1:d3:0f:83:38:93:a0:99:6a:
39:05:2f:ba:ca:96:2a:af:8b:51:4b:90:19:5f:be:66:b7:51:
a7:a5:1c:e3:f0:bd:c5:14:92:f1:e4:7d:b0:36:26:f4:35:48:
c3:f9:d5:e9:0c:bd:12:f6:d9:46:35:6f:d1:82:07:4c:25:b5:
4a:df:89:42:a5:6f:47:a8:07:0e:d5:c7:49:e7:a4:f3:42:97:
88:a3:bd:01:e5:21:b4:82:68:20:32:7a:db:73:39:1a:b4:ea:
81:fc:f2:bf:e8:d4:f6:c8:f8:e2:13:0a:bd:41:77:30:29:de:
6e:57:b2:2b:64:0e:03:3c:53:5e:6d:a1:8d:9b:50:7a:9a:a3:
c3:60:a3:5c:13:1c:ce:ca:76:c2:1b:44:a4:24:a3:56:81:b2:
4d:db:7b:ef:f1:90:ed:07:e7:84:92:2f:ac:30:eb:b8:93:eb:
cb:51:64:1b:6e:44:b4:0c:97:d1:8e:1b:6b:ff:90:49:a1:8a:
93:27:86:14:87:05:a3:77:b2:a1:78:52:ac:c3:b1:da:aa:dc:
f4:46:f7:a3:aa:a4:a2:bb:37:90:aa:5a:9d:72:8e:7b:a9:61:
1a:48:cb:73:98:5f:be:a9:19:7e:90:3a:85:99:93:ca:e3:c6:
a3:b9:f0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:57 2025 by rpki-client