Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/h67ARHP6uzsJi1JvJdhyhnPiFL4.roa
File: h67ARHP6uzsJi1JvJdhyhnPiFL4.roa (raw, json)
Hash identifier: prUYqd5V5xWLfWcTmAYOaf8dubDcUdz8rYvgMgueejs=
Subject key identifier: 87:AE:C0:44:73:FA:BB:3B:09:8B:52:6F:25:D8:72:86:73:E2:14:BE
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0C89
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/h67ARHP6uzsJi1JvJdhyhnPiFL4.roa
Signing time: Mon 10 Feb 2025 14:06:19 +0000
ROA not before: Mon 10 Feb 2025 14:06:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18464
IP address blocks: 103.122.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Feb 10 14:06:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=87AEC04473FABB3B098B526F25D8728673E214BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:83:f3:38:a0:2f:2e:28:92:cf:9b:7f:db:
af:07:3d:59:0f:5c:af:3d:22:c6:57:bd:9e:f2:9a:
99:40:ce:a6:33:5d:0f:1b:fe:8c:d0:6a:6c:cc:57:
25:7c:59:4b:52:c5:8b:13:ec:83:ff:19:88:3c:2f:
92:83:e2:bc:41:e7:ae:53:db:65:60:7f:a3:97:15:
94:ea:26:9e:ce:84:f7:e1:ac:b6:d7:6b:73:fc:25:
71:41:a9:f6:da:c1:f1:58:d6:c3:11:68:b6:f8:48:
a5:32:d3:c8:9c:ad:1e:45:ec:34:ef:fb:d9:51:8a:
99:ff:1c:e6:b7:7d:22:36:db:76:97:49:e0:5f:58:
e4:ca:f1:a3:a7:a1:9f:88:19:0a:62:57:08:d0:16:
6c:ae:bd:21:72:78:7b:42:25:26:49:0e:0b:de:a4:
b1:87:e4:19:a6:42:21:98:85:3f:be:64:34:6a:1f:
f0:0f:d4:cb:a0:37:0c:ed:40:8f:56:23:57:fe:75:
7d:9a:2a:ce:68:b8:0e:83:86:6a:3c:29:7e:cc:f3:
e3:89:e5:7a:c4:3c:6b:32:84:12:1d:03:c2:f0:bd:
bb:50:32:9e:bf:16:07:bc:69:26:d6:81:07:be:7d:
dc:7c:4c:3c:84:71:c0:27:39:89:46:7d:6d:d3:63:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:C0:44:73:FA:BB:3B:09:8B:52:6F:25:D8:72:86:73:E2:14:BE
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/h67ARHP6uzsJi1JvJdhyhnPiFL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:9f:41:a2:e8:ed:38:4f:42:21:50:df:2d:82:30:23:5b:be:
22:d1:6d:45:3e:d5:5d:3c:39:b2:08:62:58:8e:4c:b3:27:f8:
85:79:12:b1:5a:23:0a:10:b8:26:2d:a5:84:cf:dd:eb:4c:34:
1c:6a:81:fb:cc:20:a3:f9:65:4f:4c:f0:ab:8d:05:c0:cd:45:
0c:ec:5b:d8:40:b8:db:ab:f4:2a:59:2b:c1:25:01:87:34:7e:
6a:46:80:72:c8:ed:7b:60:6b:0e:51:a9:43:f8:a9:bc:80:ec:
14:e8:c1:ff:63:3c:23:3b:22:3c:5a:16:d8:98:01:31:f1:d2:
01:ce:7c:78:c7:26:13:66:72:46:bd:c6:e8:19:ab:7b:76:b2:
c9:3b:8a:2c:c7:ce:dd:32:02:a3:f7:1d:3f:f5:68:fa:d0:ec:
64:ed:ab:c0:7c:3a:df:f1:19:0b:b0:b7:f2:80:aa:c5:50:a6:
54:08:8b:eb:63:97:af:47:db:7f:d8:f4:3f:a5:cc:40:19:d3:
44:3a:fa:84:26:51:75:e4:22:cf:0a:08:01:70:f1:92:f3:ed:
f6:6a:bf:18:89:77:20:e9:de:58:6e:11:35:dd:4d:6c:87:7c:
99:56:bf:ba:28:81:2c:ee:04:25:15:a5:16:e1:ba:9b:8f:90:
e4:5e:6f:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:41 2025 by rpki-client