Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa
File: qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa (raw, json)
Hash identifier: OT2+QEI52tAcroQM24+LOSXSIBeEcwXJfB8s+gZ3FUE=
Subject key identifier: AA:F5:75:64:68:16:B0:77:B7:1E:48:27:E5:E8:03:37:4B:44:09:50
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 121B
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa
Signing time: Fri 01 Sep 2023 09:41:07 +0000
ROA not before: Fri 01 Sep 2023 09:41:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 16509
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4635 (0x121b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Sep 1 09:41:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AAF575646816B077B71E4827E5E803374B440950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:e7:9a:f8:13:b2:8d:8f:fc:db:bb:fb:8c:
f5:06:cb:87:51:72:7d:f7:f8:24:6b:c4:1f:ed:d7:
62:49:cd:84:03:34:3f:06:ab:de:75:f5:ce:9b:55:
14:47:94:83:87:f7:e1:67:be:0f:fc:9c:b9:b9:fe:
4f:68:73:44:31:03:c6:ba:1e:60:6e:23:c7:b0:30:
6d:29:d4:fd:f4:5e:35:d6:a3:e7:f1:46:5c:a9:ff:
29:f3:1b:fe:0f:7e:99:30:c1:da:80:6d:db:49:77:
0d:86:74:62:cc:c1:f1:7a:c7:8d:c3:96:f7:e9:4a:
8f:8f:5f:a4:7d:dc:3a:7e:bd:4f:da:a8:da:f1:86:
d9:8d:84:fa:0d:84:dc:f1:d4:39:09:67:0c:7f:d3:
01:d9:ae:13:77:0d:54:a4:bb:c9:73:93:d4:77:68:
cc:bd:2f:8e:ec:35:99:c8:94:aa:bb:fa:c5:35:ad:
65:50:9b:52:14:6e:bd:8a:4d:42:21:30:3a:a6:b3:
df:c5:ea:59:11:68:c7:fd:9d:0d:9f:29:e2:32:88:
50:58:91:d4:5a:2d:a5:16:5b:fb:4e:f5:53:5e:e8:
6c:b9:d9:3d:dd:f3:97:c2:5e:61:b2:6a:1c:c5:4d:
6e:c2:3b:87:16:30:6d:ef:b0:81:ee:13:6c:92:e3:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F5:75:64:68:16:B0:77:B7:1E:48:27:E5:E8:03:37:4B:44:09:50
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:42:f4:1b:7a:f1:d3:af:5e:e8:8b:55:78:a5:71:d7:97:d2:
c5:36:75:ca:1a:f3:27:71:ab:b1:70:4b:ac:e7:00:c4:32:d6:
89:63:f9:3b:50:dc:9c:0d:98:bb:33:b9:eb:28:1c:22:7f:d1:
6e:b0:10:f2:20:83:d5:02:8c:f0:87:ee:3d:93:5c:7e:b4:8e:
45:24:5f:aa:43:81:7b:2c:2f:ae:c4:db:81:90:ed:7a:db:53:
75:73:31:8e:c4:de:de:f0:b4:4a:83:a2:67:ed:a0:70:00:52:
7c:f2:37:41:92:83:04:64:f1:af:1b:c6:ce:0e:d7:14:3c:cf:
14:8f:6e:a4:86:b3:4e:25:76:f7:10:5a:e1:d9:15:7e:03:0f:
08:5c:10:ac:42:95:69:06:08:3b:bb:68:85:54:06:b1:2e:42:
f5:c3:d7:63:c6:85:2f:eb:a3:08:33:4d:a6:59:4e:74:fd:32:
af:d7:05:f4:ff:b9:86:5e:27:83:c9:c1:09:ac:a4:b2:98:41:
67:57:e3:c4:cf:72:3d:fc:6b:4a:d3:2f:41:bc:12:74:86:5b:
63:ba:03:5e:2b:fa:b2:a0:37:b0:19:f0:56:cf:4e:95:78:9f:
b4:27:77:cf:a5:f9:bc:b1:f5:28:e7:ec:c8:d1:47:c2:c5:85:
62:c8:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:23 2025 by rpki-client