Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/oiVXU8Hoi8VSUdRN6h8DwEFwH1g.roa
File: oiVXU8Hoi8VSUdRN6h8DwEFwH1g.roa (raw, json)
Hash identifier: 8RZszk4wCmZKsZ0tR9zaDkzcKy6QUsZnPfyxiMwyGoI=
Subject key identifier: A2:25:57:53:C1:E8:8B:C5:52:51:D4:4D:EA:1F:03:C0:41:70:1F:58
Certificate issuer: /CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
Certificate serial: 0DFC
Authority key identifier: 97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/oiVXU8Hoi8VSUdRN6h8DwEFwH1g.roa
Signing time: Tue 29 Sep 2020 10:09:23 +0000
ROA not before: Tue 29 Sep 2020 10:09:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 103.130.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
Validity
Not Before: Sep 29 10:09:23 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A2255753C1E88BC55251D44DEA1F03C041701F58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:7f:ec:f6:b5:83:27:01:90:11:f7:98:cd:
43:09:0a:39:81:32:3a:86:95:be:db:21:27:90:2b:
ba:c2:d0:82:07:f5:8e:df:31:01:0f:7c:48:c9:a9:
4c:02:bc:2a:5c:4b:c3:f0:53:44:ab:18:41:f0:ca:
92:14:e6:ce:36:42:cf:38:39:8b:c5:03:d6:b7:ff:
be:a9:05:b5:b8:a4:af:f5:39:9e:49:5f:bd:a9:e6:
15:d3:4a:28:c5:9c:e0:81:a0:e9:02:26:58:6b:3e:
a6:f5:92:48:a6:63:93:0d:80:24:d6:a2:e9:72:97:
2e:a6:ad:8a:b8:e1:ed:1d:3b:8d:60:2e:64:78:51:
1c:49:45:7a:00:b3:e2:3f:79:79:a8:c5:ee:9f:b7:
b5:1b:63:81:47:ee:93:a7:1c:f8:f0:a2:35:45:1c:
d5:96:23:27:d8:43:0b:d2:bc:f8:e8:be:dc:bc:cf:
26:d5:ca:cc:04:fa:e9:8a:3b:1e:c7:2c:23:15:17:
45:03:02:68:bd:c1:f8:b1:78:08:41:71:d1:53:04:
5e:b6:93:f5:f6:1f:e5:c5:9b:31:0e:f2:69:dd:df:
dc:c3:fa:51:12:9d:b9:3c:6e:60:a4:c5:9a:d7:bd:
e1:29:bc:cc:15:4f:40:06:b6:c7:97:e3:09:ac:a3:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:57:53:C1:E8:8B:C5:52:51:D4:4D:EA:1F:03:C0:41:70:1F:58
X509v3 Authority Key Identifier:
keyid:97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/oiVXU8Hoi8VSUdRN6h8DwEFwH1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:47:24:db:2c:49:7d:45:b4:0b:9d:53:f0:0e:a2:c0:9b:b5:
87:0a:d5:fa:f9:fc:48:9b:69:a2:41:e4:9e:b2:36:1f:39:ff:
86:b1:40:a6:07:b9:12:19:56:27:73:33:ac:d9:55:96:3b:eb:
8e:09:75:96:23:b5:67:2f:30:94:e2:09:a0:40:f6:df:b7:73:
ff:0d:c8:55:4a:21:c7:5c:70:1f:0c:d0:b6:2e:df:76:37:ec:
23:51:a3:73:20:79:f3:03:18:b9:62:23:21:a2:3f:14:a3:23:
01:42:73:a4:c9:af:b2:f2:2d:fa:7e:00:41:1b:9f:2c:34:22:
b9:30:c4:c0:33:fa:f1:05:04:39:6d:03:d7:db:de:97:8f:6e:
a8:9d:69:4a:4c:c3:ea:8b:8b:41:f5:12:82:1c:c0:bc:d9:8d:
15:47:be:ee:89:60:2c:bd:90:b2:75:9d:0f:9f:ad:56:dd:79:
cc:b1:f8:1c:90:15:c4:73:43:c1:16:25:07:35:2b:6d:28:e8:
44:c1:c1:c0:c9:03:1a:96:cd:5d:62:65:4e:b4:a1:52:18:0d:
f0:f0:ff:13:df:48:67:5d:59:95:fc:03:ec:90:6c:c3:0e:58:
99:9f:2d:ce:34:45:4b:ef:26:45:df:7a:2f:6f:6f:bd:32:50:
c0:ed:5c:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:45 2025 by rpki-client