Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/HSRvrzcXIfT9x63H3AjkYt5LChE.roa
File: HSRvrzcXIfT9x63H3AjkYt5LChE.roa (raw, json)
Hash identifier: SzLT0BaDHWw5vUeUnDD7z6lzgEyqlXzJNGXqFo9tZ3o=
Subject key identifier: 1D:24:6F:AF:37:17:21:F4:FD:C7:AD:C7:DC:08:E4:62:DE:4B:0A:11
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 0F70
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/HSRvrzcXIfT9x63H3AjkYt5LChE.roa
Signing time: Sun 07 Feb 2021 11:52:41 +0000
ROA not before: Sun 07 Feb 2021 11:52:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134098
IP address blocks: 103.123.216.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Feb 7 11:52:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D246FAF371721F4FDC7ADC7DC08E462DE4B0A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:cd:57:1c:2d:76:22:55:35:e3:07:58:1e:
16:bc:57:6b:27:e2:7d:dc:9a:07:bd:7f:e7:5e:3f:
17:60:de:a7:dc:50:aa:c9:d2:75:a4:aa:a8:04:fc:
50:a0:fc:49:15:eb:26:df:a9:01:69:cd:ae:d2:11:
dc:ce:e0:e9:0b:64:7c:27:f6:5f:7b:ff:ab:9c:c9:
24:99:d8:d5:41:2e:c8:a2:44:1e:84:87:2d:31:18:
fe:a8:26:89:52:46:28:28:03:c1:e0:43:1e:3a:87:
5d:cc:d8:75:57:74:73:8b:cc:05:80:9c:2f:bc:95:
2a:ef:22:de:69:55:d6:45:d8:76:e9:60:cc:c3:59:
87:7e:2d:3a:9a:d7:18:f3:a8:bc:46:34:62:ab:13:
9c:b4:54:b3:46:ec:b6:35:15:07:25:34:d0:e1:46:
b1:91:f1:6f:95:92:bd:a8:d3:34:c8:7c:51:8d:fc:
c7:8a:58:8e:77:b5:5d:d2:45:b3:85:1a:f3:19:0f:
42:65:59:4a:65:9d:aa:b6:fb:fd:52:70:73:91:14:
52:5c:fa:db:60:74:32:68:fa:29:a8:5d:28:43:55:
3c:cf:5f:e4:7b:c6:9c:d4:b7:28:8e:8c:62:5f:e2:
51:0c:5c:8b:51:2e:27:55:45:3a:41:72:0c:fc:81:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:6F:AF:37:17:21:F4:FD:C7:AD:C7:DC:08:E4:62:DE:4B:0A:11
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/HSRvrzcXIfT9x63H3AjkYt5LChE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f8:72:fd:ac:75:93:ab:83:24:9d:00:68:f6:35:a3:ed:61:
0e:13:45:a3:ea:92:ac:3d:21:d0:19:d0:2c:57:37:6c:2f:ec:
9d:1d:29:8a:38:f4:a5:b7:e2:f4:29:b5:6c:fb:d5:89:e7:fd:
fb:44:ff:37:7f:e0:89:10:69:46:8a:67:3c:be:4f:a2:e2:8a:
62:dc:3b:68:dd:07:67:12:0b:d9:b8:52:98:74:5d:41:1d:bc:
20:57:c4:d8:f5:bc:2a:4a:76:14:83:d1:31:f9:e0:e9:cb:61:
4d:51:99:87:13:17:a6:1a:c4:66:f4:8b:7c:07:ca:b5:8e:25:
f6:aa:41:ca:8e:f3:18:79:37:96:71:b8:e4:4f:32:6c:93:39:
81:79:0c:e6:e5:b9:2b:bd:81:2f:8c:72:a1:03:10:ec:c2:6c:
f3:c6:86:6c:29:99:1c:a0:35:9e:6e:06:e2:d0:26:85:da:03:
96:28:fb:80:11:43:30:c0:3f:83:98:2a:80:74:53:3a:f2:d9:
a0:aa:a3:a8:50:a8:43:8c:65:0d:33:76:d1:2c:f1:4e:8b:46:
24:57:9c:a7:d6:f6:e0:e7:1e:32:af:0d:0f:af:1e:cd:42:9b:
12:42:b5:eb:ae:03:dd:9e:f8:f1:5a:3e:43:4c:1e:69:dd:3e:
28:d4:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:07:54 2025 by rpki-client