Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa
File: Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa (raw, json)
Hash identifier: Q5QWELqviUcbXJMCcbEgLw1YNwi9oA39cGEAIV89pYE=
Subject key identifier: 4A:6C:EB:D2:82:3D:32:DD:16:E0:E0:F7:35:5F:C6:7C:27:87:1F:8F
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 07B1
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa
Signing time: Mon 10 Feb 2025 13:44:40 +0000
ROA not before: Mon 10 Feb 2025 13:44:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131657
IP address blocks: 103.122.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Feb 10 13:44:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4A6CEBD2823D32DD16E0E0F7355FC67C27871F8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:ad:66:55:df:93:60:51:a4:af:b8:8d:61:
d8:30:f6:60:63:03:2d:a7:56:ff:49:81:5e:eb:3e:
7a:ce:37:16:eb:16:af:4c:52:e9:96:a0:fb:b9:82:
8c:e9:48:03:61:35:7b:22:d5:3a:58:ce:9d:44:1c:
aa:31:d0:ac:98:53:e0:b1:de:27:84:08:d5:af:8f:
df:03:a2:7c:30:0a:ff:f8:50:b2:2a:84:a3:f7:24:
cf:cb:9a:25:ed:f9:c2:b7:f4:68:6e:82:79:8d:1d:
ff:ab:75:7a:0d:63:3b:25:a3:c1:02:ee:c5:45:3e:
6c:f8:49:2d:4b:16:d6:55:f9:49:fe:04:49:33:79:
1c:97:bc:dc:e5:75:43:ae:58:77:67:8f:40:23:f0:
84:a6:11:10:77:73:d9:58:2b:79:f6:32:ca:2e:53:
7b:c3:e3:4d:5f:c1:74:d8:3c:07:cd:ce:d3:bd:6e:
5d:97:c0:b0:79:90:a9:4f:a1:af:d0:46:67:11:4c:
c1:a0:e1:70:a3:09:3b:80:ad:7e:38:3f:90:3a:b4:
aa:3c:bb:23:ce:f0:da:10:fc:8e:4d:c2:c8:1e:2d:
99:bb:22:03:a2:59:14:ba:c5:e7:4a:71:e5:d1:7b:
6e:4d:89:bb:d0:6f:c9:ab:49:ec:8b:13:91:81:4f:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:EB:D2:82:3D:32:DD:16:E0:E0:F7:35:5F:C6:7C:27:87:1F:8F
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4a:67:7d:64:27:67:46:d3:3d:7c:b2:9b:de:32:a0:b0:fc:
ad:46:6c:b9:a8:2f:dd:10:84:13:b6:9f:f5:9c:9b:1a:50:3c:
6e:d4:bd:9b:03:f4:59:b3:d1:fc:8e:da:2c:5c:10:2d:8e:54:
4e:bf:eb:cc:52:7f:ff:81:ff:fa:c1:5d:42:6e:9d:06:91:06:
e5:16:c7:b5:73:56:56:17:37:ce:dc:b6:5c:95:2d:bd:8f:2c:
80:f0:a3:11:01:5d:48:87:d2:74:8c:40:53:7c:da:e9:b1:19:
bc:28:4d:a8:56:87:f1:06:4f:c6:75:bc:42:f5:0a:b2:67:b5:
11:a8:a8:93:20:81:1d:d7:75:be:4a:6d:4e:07:35:92:fe:92:
12:28:c3:0b:bf:cd:e8:1f:bc:5e:2c:72:b5:10:c6:5b:b4:83:
57:ee:8f:d9:80:34:d5:41:21:91:86:f3:7f:1e:90:15:50:ec:
32:4b:de:f2:e3:18:34:00:31:04:01:55:4f:9d:9c:47:cc:ab:
c5:08:68:c3:6b:5b:c3:0f:45:6e:1c:b6:61:eb:d5:51:68:4d:
dd:88:b6:42:d2:86:81:af:f6:9c:fe:88:29:93:c5:4c:c0:e6:
2e:ea:1e:e8:a7:5a:5d:8b:bc:b9:6e:77:3c:39:cd:32:f8:0e:
71:e3:d4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:26 2025 by rpki-client