Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/MDICJNpFFeyfBz_lFWpmHC8gTt0.roa
File: MDICJNpFFeyfBz_lFWpmHC8gTt0.roa (raw, json)
Hash identifier: Nf51aWFvFoVGh+oCH44TGXGGocvdvoxn8iHvE+X63nw=
Subject key identifier: 30:32:02:24:DA:45:15:EC:9F:07:3F:E5:15:6A:66:1C:2F:20:4E:DD
Certificate issuer: /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial: 0738
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/MDICJNpFFeyfBz_lFWpmHC8gTt0.roa
Signing time: Tue 29 Sep 2020 09:51:50 +0000
ROA not before: Tue 29 Sep 2020 09:51:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131149
IP address blocks: 103.129.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848 (0x738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Validity
Not Before: Sep 29 09:51:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=30320224DA4515EC9F073FE5156A661C2F204EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e3:e4:ad:be:fa:fd:16:29:79:37:ed:74:31:
59:d9:04:6f:a1:52:c7:e7:44:84:80:06:4f:7f:8f:
ad:0b:88:ee:ef:73:40:c0:5c:a6:cb:4a:2a:05:6e:
39:d2:e8:a4:f1:76:d5:b1:0d:3d:5d:36:db:17:b2:
f0:0c:b3:ab:f0:94:ef:95:4c:20:fc:31:8e:08:4d:
b6:99:21:f6:0a:d0:1d:7d:10:09:8c:48:99:5e:c4:
d0:3e:3c:92:da:7f:30:e7:a1:1e:09:4f:4b:98:99:
e0:cb:a3:b3:9a:dc:5a:1a:ac:9e:39:36:27:df:e2:
bc:d4:9e:76:71:47:49:40:e3:46:26:0c:62:50:5d:
72:40:75:f3:15:47:10:64:82:a7:86:80:02:ef:d7:
57:01:76:f4:d0:a7:a4:e0:65:f7:57:0a:39:5a:26:
b2:ab:74:33:09:eb:cf:5c:37:85:41:76:cc:70:81:
70:54:6c:84:cf:5f:56:37:33:70:ed:70:cd:23:20:
d5:14:80:9a:8a:88:85:4b:a0:d1:14:73:e5:28:8b:
45:50:41:f1:e1:fc:85:b2:29:05:4e:6e:d9:f4:dd:
e6:8c:a0:18:e3:0c:fa:a9:ca:f0:61:2f:98:d2:b2:
bc:82:4b:f5:3e:1b:94:e0:85:60:e9:56:c1:0d:c7:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:32:02:24:DA:45:15:EC:9F:07:3F:E5:15:6A:66:1C:2F:20:4E:DD
X509v3 Authority Key Identifier:
keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/MDICJNpFFeyfBz_lFWpmHC8gTt0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.168.0/22
Signature Algorithm: sha256WithRSAEncryption
29:1b:8e:93:83:ee:4c:4d:d2:a4:ab:9e:f0:78:97:1d:16:ed:
2f:61:30:53:a8:cc:09:38:7e:40:14:1f:d2:5b:a8:85:16:65:
89:1d:75:8c:23:de:ea:90:40:2d:f2:1e:bb:9f:7f:5d:01:50:
43:74:6e:39:9a:a6:ca:06:8f:00:a7:0b:52:a4:b2:1d:49:c3:
8d:c7:4e:2b:34:88:f4:8d:ce:83:c0:a6:ce:90:a0:a1:a3:90:
b3:9c:84:e2:40:40:7c:3d:f4:4f:6a:14:47:bc:cf:36:35:fc:
6b:a2:ad:73:06:68:1a:1f:92:99:09:69:38:19:0b:0c:d0:c7:
be:0e:74:0b:8e:24:da:3a:5c:40:40:b3:56:58:91:2b:db:97:
68:0e:16:53:6b:58:a2:8e:ce:bb:23:fc:48:a1:a0:bb:ad:17:
73:06:f1:2d:75:d7:c7:9e:79:c6:4c:9f:42:55:39:42:8c:66:
79:b4:5b:40:01:8c:f4:a6:a9:c0:d9:8e:63:23:f7:25:2e:ef:
ce:46:64:f6:dc:ef:fb:8d:d0:2f:86:c0:d7:2e:a6:5e:0e:e6:
1b:64:2c:87:de:22:c7:8d:3a:d5:5f:d7:41:02:0a:2c:34:d6:
d8:d0:db:67:9f:10:1e:d3:c9:c0:78:0d:e2:a0:17:f4:c8:49:
57:6b:04:eb
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU2
MDlCQTc0MTg2RDBCMEUzQTFBOUMwMTBEQTFERjA1NTlBMTk4MjAeFw0yMDA5Mjkw
OTUxNTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMwMzIwMjI0REE0NTE1
RUM5RjA3M0ZFNTE1NkE2NjFDMkYyMDRFREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl4+Stvvr9Fil5N+10MVnZBG+hUsfnRISABk9/j60LiO7vc0DA
XKbLSioFbjnS6KTxdtWxDT1dNtsXsvAMs6vwlO+VTCD8MY4ITbaZIfYK0B19EAmM
SJlexNA+PJLafzDnoR4JT0uYmeDLo7Oa3FoarJ45Niff4rzUnnZxR0lA40YmDGJQ
XXJAdfMVRxBkgqeGgALv11cBdvTQp6TgZfdXCjlaJrKrdDMJ689cN4VBdsxwgXBU
bITPX1Y3M3DtcM0jINUUgJqKiIVLoNEUc+Uoi0VQQfHh/IWyKQVObtn03eaMoBjj
DPqpyvBhL5jSsryCS/U+G5TghWDpVsENx9ULAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUMDICJNpFFeyfBz/lFWpmHC8gTt0wHwYDVR0jBBgwFoAUTmCbp0GG0LDjoanA
ENod8FWaGYIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENP
TVRXL1RtQ2JwMEdHMExEam9hbkFFTm9kOEZXYUdZSS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVG1DYnAwR0cwTERqb2FuQUVOb2Q4RldhR1lJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVENPTVRXL01ESUNKTnBGRmV5
ZkJ6X2xGV3BtSEM4Z1R0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJngagwDQYJKoZIhvcNAQELBQADggEBACkbjpOD7kxN0qSrnvB4lx0W7S9h
MFOozAk4fkAUH9JbqIUWZYkddYwj3uqQQC3yHruff10BUEN0bjmapsoGjwCnC1Kk
sh1Jw43HTis0iPSNzoPAps6QoKGjkLOchOJAQHw99E9qFEe8zzY1/GuirXMGaBof
kpkJaTgZCwzQx74OdAuOJNo6XEBAs1ZYkSvbl2gOFlNrWKKOzrsj/EihoLutF3MG
8S1118eeecZMn0JVOUKMZnm0W0ABjPSmqcDZjmMj9yUu785GZPbc7/uN0C+GwNcu
pl4O5htkLIfeIseNOtVf10ECCiw01tjQ22efEB7TycB4DeKgF/TISVdrBOs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:18 2025 by rpki-client