Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/fgbc-mV-ZPjjApWZ8oZ59eyG8M8.roa
File: fgbc-mV-ZPjjApWZ8oZ59eyG8M8.roa (raw, json)
Hash identifier: dKJhj3JngtVsxF4LnxcXDTnGtMPX2AY1v3ZoCVxVw4w=
Subject key identifier: 7E:06:DC:FA:65:7E:64:F8:E3:02:95:99:F2:86:79:F5:EC:86:F0:CF
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0C66
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/fgbc-mV-ZPjjApWZ8oZ59eyG8M8.roa
Signing time: Wed 29 Sep 2021 02:37:20 +0000
ROA not before: Wed 29 Sep 2021 02:37:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 64271
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Sep 29 02:37:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7E06DCFA657E64F8E3029599F28679F5EC86F0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:4b:99:96:a2:ce:90:45:6e:20:48:d0:5b:
6d:82:5b:84:5f:49:bc:40:32:2b:69:f0:33:5b:36:
a7:3a:f1:ee:2a:86:c2:65:07:43:d2:76:77:cd:e0:
2d:25:6f:f1:92:2d:b1:22:b0:99:87:a1:0f:62:71:
5e:81:be:e2:dd:2f:17:01:21:97:f4:6a:b7:d9:8f:
42:c9:3c:3b:ad:15:9f:5e:d9:28:e4:a6:9c:90:fd:
90:6c:7f:c9:c5:d4:08:3e:36:59:22:77:43:11:0a:
ea:1d:5c:9a:77:ea:50:64:74:e6:22:ae:05:5c:07:
23:7c:2a:41:5b:83:e0:38:aa:ab:b1:5a:3a:25:76:
43:95:d2:2e:1d:82:28:ec:61:2f:38:e0:80:7a:34:
77:38:9a:15:c8:03:a3:78:22:c9:dd:b3:5b:88:61:
af:90:28:ca:d2:8b:ec:c5:e0:28:a2:a4:12:dc:51:
a7:ac:1b:41:5f:05:90:fd:c2:7f:17:cb:12:25:0a:
7a:47:59:98:2a:98:62:8e:5e:54:a1:ad:6e:6e:59:
db:b0:14:90:a0:83:13:30:23:31:fb:30:12:43:39:
14:17:cc:e2:00:da:19:1e:50:25:aa:29:87:09:5d:
53:99:fc:13:8a:c0:b5:41:32:e8:78:65:94:21:a0:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:DC:FA:65:7E:64:F8:E3:02:95:99:F2:86:79:F5:EC:86:F0:CF
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/fgbc-mV-ZPjjApWZ8oZ59eyG8M8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:be:fd:5e:be:92:21:3f:84:04:30:96:d5:bf:9b:23:a5:0f:
7e:79:fd:c3:31:6a:96:f7:77:27:72:03:c0:ae:68:76:93:80:
fd:e3:f2:cb:c3:51:31:e4:04:f4:a8:1e:fc:aa:ab:ef:6f:6d:
81:cf:1e:87:e6:ec:99:53:c7:13:56:c0:e6:77:b6:a1:a7:cb:
2a:4b:1f:58:89:7a:1a:0c:58:38:f9:e5:1b:76:b7:94:83:6f:
0b:dd:57:20:79:0b:bb:95:29:30:34:07:df:a6:41:33:ae:c8:
0a:cf:04:34:92:2e:3e:75:9d:49:92:4b:c0:d6:a2:94:17:d6:
10:d1:36:0e:b0:e7:81:f2:6f:95:18:e0:60:9b:82:24:9e:de:
f5:95:0f:f4:49:3c:d4:e1:10:be:e1:85:9c:53:01:a7:15:74:
53:44:d3:1d:54:19:dc:f5:f0:e5:6e:c5:a7:26:21:a4:59:cc:
48:f4:e8:a6:fa:2d:80:0f:95:3b:11:bc:a0:1c:e8:8f:c2:4b:
0d:9f:5c:3e:be:65:3e:25:ac:83:fb:b1:3c:93:89:d0:3c:42:
55:43:33:c8:32:d5:ff:bd:c4:51:c4:5f:0d:63:30:e1:b4:d5:
6d:14:fb:73:7d:1b:39:d1:5c:38:5d:3e:5f:0c:7b:83:49:82:
fc:1d:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:57:33 2025 by rpki-client