Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa
File: J7NxcyMRepcKJmsO68a432q647g.roa (raw, json)
Hash identifier: SBsW1ar8TDxc5q0rSASRV5OEjhLFWMcLVdDuwwcys5A=
Subject key identifier: 27:B3:71:73:23:11:7A:97:0A:26:6B:0E:EB:C6:B8:DF:6A:BA:E3:B8
Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial: 11B8
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa
Signing time: Mon 10 Feb 2025 14:27:11 +0000
ROA not before: Mon 10 Feb 2025 14:27:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63897
IP address blocks: 103.127.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Validity
Not Before: Feb 10 14:27:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=27B3717323117A970A266B0EEBC6B8DF6ABAE3B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:ee:bf:af:98:f2:ad:3c:13:6b:ff:dc:5d:
e1:bb:75:24:ad:6a:ed:9c:be:40:1f:f0:5e:0c:10:
76:d5:2a:b6:f7:3b:2b:30:57:2a:03:79:8e:03:28:
c1:33:29:12:de:b7:88:4b:60:5a:04:64:64:c8:aa:
ec:86:6b:c4:f8:92:f2:d1:7b:d4:58:98:f7:5e:dd:
11:7e:9e:db:08:dd:d0:f3:80:4a:63:1f:c4:8d:87:
5d:d8:c1:70:6c:ab:c6:ab:56:cc:0d:47:05:3a:9b:
ed:59:7e:ba:96:77:01:86:81:34:2a:b0:ff:4f:bb:
c9:f2:85:76:2e:b7:c8:b6:fd:3d:d7:30:69:1c:f7:
f8:ca:60:81:c4:67:80:aa:97:f2:21:3a:2c:ad:9a:
8a:a6:9b:58:0a:43:cc:f7:bf:d1:ed:d2:89:13:22:
83:dd:88:4c:a3:49:14:32:f2:f9:3b:21:8d:28:b9:
16:e3:bc:27:fd:58:3d:5c:ca:74:1b:ea:37:3c:f1:
6a:4b:75:cf:25:ec:0d:27:fa:f9:7b:d9:d4:c7:c5:
3e:3a:36:b8:fa:4c:2f:63:51:89:26:fe:cd:7c:65:
87:b6:60:47:ec:ed:8f:8b:ec:aa:7f:e0:0a:81:91:
63:3e:f2:6b:04:14:52:5b:1f:1c:54:64:3f:df:22:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:71:73:23:11:7A:97:0A:26:6B:0E:EB:C6:B8:DF:6A:BA:E3:B8
X509v3 Authority Key Identifier:
keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/J7NxcyMRepcKJmsO68a432q647g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.237.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d9:a1:ea:a3:46:91:ef:e5:0e:05:01:47:1f:bf:da:4e:e5:
6e:8e:bb:ad:7e:16:51:f7:2c:3d:fe:4b:b5:78:7e:3f:32:85:
4f:60:d9:58:1d:9b:56:a3:49:cd:eb:62:50:bc:6a:94:69:77:
37:fe:1c:e9:2b:d8:d9:3e:13:9c:bd:ad:5a:c0:4f:86:59:72:
8d:e8:cd:29:c5:03:9d:2e:6f:63:04:76:c0:e9:b7:57:92:7f:
8a:7c:49:95:32:19:7a:1f:b8:03:1e:6b:e4:cd:b5:c6:33:4b:
f7:d8:53:ec:bf:c8:3b:42:d3:38:56:50:75:09:46:c7:ea:65:
41:ee:e0:0f:ee:8f:57:50:ad:40:a5:ac:80:ed:b3:39:ba:5d:
3a:fb:7f:e3:a7:52:59:d1:2f:a2:8d:35:78:73:36:04:de:67:
cc:6a:70:d8:96:f8:9f:07:cc:59:d9:8f:f8:83:32:19:43:59:
ed:de:33:55:72:d0:01:f5:62:46:42:35:d6:83:59:b8:da:4f:
e0:64:59:44:aa:b5:d1:47:b1:42:1b:3e:19:4f:50:38:0f:c4:
bf:5f:05:82:8e:1a:f1:0b:d9:20:24:a2:5f:29:a0:9e:ae:a4:
1f:31:d7:ca:43:34:90:fb:20:88:fa:f2:ed:24:52:fd:4a:93:
0d:d1:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:46 2025 by rpki-client