Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa
File: xwloUzXf_HHw60mpF_ms9dQexoM.roa (raw, json)
Hash identifier: 0tJY2t190BR924PQumDbjYQz0vOydW8pcpOm1AnV59s=
Subject key identifier: C7:09:68:53:35:DF:FC:71:F0:EB:49:A9:17:F9:AC:F5:D4:1E:C6:83
Certificate issuer: /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial: 03AF
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa
Signing time: Thu 24 Oct 2024 08:57:37 +0000
ROA not before: Thu 24 Oct 2024 08:57:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 103.129.180.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
Validity
Not Before: Oct 24 08:57:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C709685335DFFC71F0EB49A917F9ACF5D41EC683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:8f:9d:e9:ff:d0:1e:87:a7:7e:5d:38:a0:
4d:51:93:9d:5e:35:c3:36:97:49:f9:18:56:8d:05:
1d:da:94:73:9b:82:5b:41:94:83:0c:ba:e5:a1:4e:
dd:88:1b:ee:10:04:96:6e:38:0c:4d:51:28:8d:ff:
22:d6:b7:0a:c2:67:ee:5f:32:56:2e:0f:5a:68:f9:
54:01:95:a4:f7:67:87:25:fe:29:f9:1c:c0:fa:a7:
32:de:fa:0e:b0:4b:ba:ff:31:76:4a:97:c3:cc:ca:
de:a9:c2:72:f8:2e:94:88:81:ee:8b:10:e7:e5:c1:
4f:5e:0a:2c:e9:5f:8e:83:2a:80:76:f7:69:1c:85:
56:43:7a:c4:3d:ad:d7:82:41:a3:4a:b9:c6:a5:04:
f6:94:81:23:2a:b4:1d:a5:48:23:d4:cc:c5:56:23:
16:04:7c:79:5b:5b:e4:60:05:11:2a:dd:f7:8b:1f:
8f:ac:2c:af:24:44:35:6a:8b:e4:9e:f5:04:de:a5:
4c:ee:31:ab:64:d5:9d:b4:00:1c:ef:fd:31:9d:56:
58:c7:3d:a8:31:dd:28:62:21:0b:c9:46:8a:5d:94:
2a:ed:17:a5:f8:e8:b8:92:92:97:16:94:8b:9f:bd:
3d:61:1e:56:e4:cf:dc:68:7d:f9:a0:de:f2:3a:26:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:68:53:35:DF:FC:71:F0:EB:49:A9:17:F9:AC:F5:D4:1E:C6:83
X509v3 Authority Key Identifier:
keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/xwloUzXf_HHw60mpF_ms9dQexoM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ef:03:f2:96:45:5c:03:54:b0:86:f5:ce:ff:70:86:1c:e9:
0b:fe:6c:57:f8:bb:81:20:5b:a3:03:c5:6a:a7:2d:b8:22:07:
c5:18:db:cf:6a:20:ae:64:02:02:8c:eb:ad:f6:14:42:ab:36:
2f:27:9a:44:44:7d:53:64:70:bf:51:9a:1f:8f:8e:ef:ea:d3:
30:ea:a5:e9:b8:ca:52:8b:fc:08:e2:12:49:86:15:7b:37:36:
36:1b:5f:f0:19:39:ab:3d:45:dc:8a:cf:16:32:21:14:02:1b:
56:b0:68:08:9b:40:c3:63:af:d4:ce:05:fc:ca:91:c0:02:b9:
a8:81:c8:5b:32:b3:45:bd:4c:3f:6e:88:de:43:c2:31:24:36:
3f:7e:f8:86:f9:5b:cb:9c:2b:f7:bd:5f:80:96:b7:b2:f4:2e:
61:c4:4e:d5:0a:46:81:df:81:fb:85:84:b5:a2:3a:6a:19:01:
32:f8:7f:6a:7a:69:db:df:9d:cf:20:a8:d4:0a:61:df:f4:22:
a8:72:f9:01:44:59:76:3d:92:46:77:15:88:d1:1b:6b:08:77:
a1:81:e0:5c:50:dc:7b:93:f3:71:9c:4e:19:5e:e0:ce:02:5e:
97:19:6e:34:eb:2e:4c:f3:c0:06:3d:be:c9:a7:8c:c6:ae:7b:
52:7c:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:45 2025 by rpki-client