Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Hb9ustHZP_v9p11Clc4M5qK8K6w.roa
File: Hb9ustHZP_v9p11Clc4M5qK8K6w.roa (raw, json)
Hash identifier: 0+XF3rrTB9TKfL+xQhKttCa/K1wNdSDQFJNQXIfKyiU=
Subject key identifier: 1D:BF:6E:B2:D1:D9:3F:FB:FD:A7:5D:42:95:CE:0C:E6:A2:BC:2B:AC
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0C5C
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Hb9ustHZP_v9p11Clc4M5qK8K6w.roa
Signing time: Mon 26 Aug 2024 05:12:20 +0000
ROA not before: Mon 26 Aug 2024 05:12:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 396982
IP address blocks: 103.123.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Aug 26 05:12:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1DBF6EB2D1D93FFBFDA75D4295CE0CE6A2BC2BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:e4:80:f8:ee:c0:28:35:26:23:65:b3:38:
50:30:78:90:6e:24:de:9d:2c:ec:a8:06:8f:bc:73:
01:ca:0f:9a:4c:d2:b6:e8:61:65:45:c9:b2:85:03:
bf:d8:8f:42:72:18:a0:0f:0e:65:71:8f:29:f8:8f:
8e:e8:2b:0d:a3:ea:7d:8c:ba:c8:5c:c9:4f:57:df:
c9:c7:d3:c8:40:91:ee:40:1f:b8:a4:00:ec:0c:e6:
50:2d:e8:af:52:ba:52:bd:1a:95:da:fa:b4:68:fb:
72:30:69:2a:b7:6e:72:5d:0e:e2:f5:02:b0:70:38:
d4:0a:fd:46:27:0d:ac:bc:96:d3:b4:3a:7b:a9:3c:
b2:0a:14:3c:d7:dd:4b:bb:22:8b:16:62:3f:e0:09:
2e:bd:e9:45:7a:8a:19:49:f2:c1:7c:e0:30:7c:69:
24:15:f9:0a:5d:2a:36:39:d6:c7:e5:c7:92:e3:64:
cf:6a:7c:72:a3:a6:03:1e:29:30:27:db:64:28:bc:
63:e7:08:7a:5c:4e:b3:c0:c0:5a:6e:3a:e5:cd:11:
b4:00:ca:00:ce:1a:69:74:1a:93:aa:7d:c5:ab:84:
9f:2a:d4:a8:39:77:fb:71:e9:4d:68:74:04:ae:01:
a1:2d:2e:9e:1d:62:7c:27:db:ae:f1:68:0d:66:1d:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:6E:B2:D1:D9:3F:FB:FD:A7:5D:42:95:CE:0C:E6:A2:BC:2B:AC
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/Hb9ustHZP_v9p11Clc4M5qK8K6w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f2:aa:29:0a:b9:36:d6:a6:62:7e:81:9b:f3:b1:95:47:0c:
af:32:69:b1:ae:9b:10:f4:42:23:06:6b:f9:5b:2b:f5:79:ed:
d9:f8:ff:18:13:d1:a8:c8:76:97:ed:a2:9e:ce:ba:9c:a2:d6:
16:ba:31:f9:fe:ed:be:33:d0:41:f5:07:30:6c:bd:1e:a8:da:
c2:22:c6:77:84:bc:56:c0:d0:4d:94:c6:b0:cd:3e:2e:f0:79:
09:ce:11:7d:12:12:bf:bb:82:0f:d7:d1:31:b5:54:49:7f:d7:
eb:6d:9f:b1:ad:52:1c:f7:f4:54:5f:4f:e8:b8:5d:5e:0e:b2:
82:d5:54:70:18:c1:a5:51:cf:01:34:3c:cb:11:fe:5b:10:93:
00:6d:01:ff:27:17:a1:7e:d9:79:15:56:eb:e9:6d:98:54:8f:
61:95:70:fa:c3:c0:43:78:8f:b3:10:54:e1:ad:ff:1a:a3:51:
87:6b:83:8e:a6:eb:9b:50:a6:cd:51:9c:b2:df:7b:ba:20:f0:
a2:cf:a3:f6:63:94:7c:74:6d:95:ee:bb:da:74:95:64:54:5e:
3d:1c:57:98:85:25:23:5d:38:0d:d4:3b:55:23:3c:f7:18:32:
1a:1e:08:fd:7e:79:6b:b4:b2:d6:80:bf:e6:42:8b:87:64:49:
bf:d6:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:57:16 2025 by rpki-client