Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GU/CBephcV1d5QHjbT-uWU7y2RpHns.roa
File: CBephcV1d5QHjbT-uWU7y2RpHns.roa (raw, json)
Hash identifier: sOMdf0HRwVJF92RLXL2ZH8q3kSTmfgzCK2n8sY0Y9yE=
Subject key identifier: 08:17:A9:85:C5:75:77:94:07:8D:B4:FE:B9:65:3B:CB:64:69:1E:7B
Certificate issuer: /CN=FD6A604FD79AF3477008E71EA4ED5CDF588CA664
Certificate serial: 0E39
Authority key identifier: FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_WpgT9ea80dwCOcepO1c31iMpmQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/CBephcV1d5QHjbT-uWU7y2RpHns.roa
Signing time: Tue 29 Sep 2020 09:51:49 +0000
ROA not before: Tue 29 Sep 2020 09:51:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6A604FD79AF3477008E71EA4ED5CDF588CA664
Validity
Not Before: Sep 29 09:51:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0817A985C5757794078DB4FEB9653BCB64691E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:54:df:81:1b:59:35:04:ba:2c:99:26:76:
9f:bd:c1:20:94:0d:a3:d1:1e:1e:ae:c8:f2:11:63:
fb:8a:dd:4a:9e:91:70:10:4b:a5:f3:e5:fe:0c:7a:
00:f3:d6:a5:6e:86:9f:1e:77:ac:1e:a6:8b:a1:a9:
53:2f:c6:d8:42:36:0e:37:15:36:5c:fa:eb:03:b6:
e9:e0:d6:6b:63:14:02:d4:0f:5a:13:ac:fc:c8:01:
4f:8a:3d:d2:77:74:4f:c4:50:ce:1b:7f:47:fd:bb:
84:47:3d:f8:cc:c5:90:14:cc:5b:5b:e6:02:fd:44:
97:cc:34:95:ea:a3:eb:e1:c1:1c:3e:08:5c:23:dc:
c3:e5:16:0b:47:9f:cf:a8:d3:aa:9c:50:59:c0:48:
5a:0b:10:dd:5d:9f:93:c5:8c:f4:1c:b5:c2:b6:8b:
a9:20:4c:f0:61:c2:67:76:e6:b4:6d:0f:4a:f8:f2:
cd:91:b0:28:05:d4:56:c4:b4:12:79:b1:d5:4d:c2:
7e:e8:19:17:81:64:84:7e:52:10:86:73:d0:9c:a7:
ec:f0:e9:20:e6:d8:7a:3e:d0:55:4e:52:81:5a:96:
bd:5d:00:0d:87:9c:04:d1:ce:78:1a:3a:7e:91:4e:
45:6f:ec:41:43:3f:fb:11:c4:fa:de:94:41:9e:97:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:A9:85:C5:75:77:94:07:8D:B4:FE:B9:65:3B:CB:64:69:1E:7B
X509v3 Authority Key Identifier:
keyid:FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/_WpgT9ea80dwCOcepO1c31iMpmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_WpgT9ea80dwCOcepO1c31iMpmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/CBephcV1d5QHjbT-uWU7y2RpHns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.32.0/22
Signature Algorithm: sha256WithRSAEncryption
96:49:bb:20:7c:89:66:3b:84:8f:36:58:8c:b4:c9:86:74:db:
72:7f:5e:ce:59:86:99:d3:ac:16:3e:4f:83:25:ff:b8:89:69:
88:b2:e2:21:d9:8e:6f:01:2c:4e:a4:9d:52:bc:cb:cf:d3:c9:
2a:95:13:cf:78:fb:a5:80:2a:a6:f0:9a:37:0c:0e:25:9c:fb:
23:0c:87:f4:1e:9f:3f:1e:a9:98:9b:59:ee:71:fc:ec:76:66:
48:7a:6d:75:83:d9:90:db:07:24:2a:29:fe:4c:85:98:b3:23:
fa:bb:ce:68:ff:83:4f:b7:4d:08:38:9e:89:db:00:08:7e:8c:
ba:e0:ea:f8:15:13:f1:19:72:01:af:a7:56:60:70:a4:1a:f0:
90:02:96:2b:b4:7e:ee:47:e4:1e:eb:b0:1c:40:5c:38:60:62:
ee:a3:53:50:a0:0d:5d:bb:b0:9d:db:a7:60:a7:ed:c9:a0:3a:
51:71:73:66:b7:74:2c:78:f5:0d:7c:04:5d:0d:26:49:04:0d:
fb:cd:b5:a6:b4:21:20:82:01:5c:ad:82:3d:9b:8c:ea:7a:7c:
c3:7b:58:e1:83:98:be:f6:6a:1c:d4:32:41:bf:76:e3:d1:e5:
d2:7c:56:6e:29:af:85:d1:e2:9f:1e:14:32:f3:4e:c8:e7:1a:
b5:e2:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:30 2025 by rpki-client