Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa
File: C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa (raw, json)
Hash identifier: /mFn0Kk6tU0kw6mtSp+yn3A3cc40csb0Fk/WAQB6pOQ=
Subject key identifier: 0B:54:10:1B:6B:51:97:AB:4A:A4:95:E4:6E:A7:BC:9F:FD:46:B1:B9
Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial: 030F
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa
Signing time: Mon 26 Aug 2024 05:17:06 +0000
ROA not before: Mon 26 Aug 2024 05:17:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7483
IP address blocks: 103.170.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Validity
Not Before: Aug 26 05:17:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0B54101B6B5197AB4AA495E46EA7BC9FFD46B1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:d9:58:8b:fd:09:94:db:04:43:1f:06:fa:
c7:52:9b:87:bd:16:ef:f5:2b:c6:84:c6:5f:7d:78:
a6:20:24:cf:a3:67:8b:da:40:84:88:0d:30:9e:ec:
9a:71:b2:89:c4:ca:9c:f1:69:31:e0:cc:40:ef:29:
4c:83:52:1e:23:2b:68:1a:3b:41:06:b8:a6:f3:17:
da:28:e8:03:b8:97:d3:d5:d7:87:b4:cf:0c:4e:74:
83:6b:45:79:6e:a4:ec:67:bf:45:28:cf:31:9f:19:
a3:81:5a:38:51:67:89:c8:ff:c9:12:e0:98:d4:74:
9d:85:e5:f4:1d:d2:28:53:c9:a1:49:10:c0:94:d7:
94:23:f2:5f:d8:47:4c:ff:14:ee:4c:89:c3:06:16:
63:29:c6:9a:7d:37:d9:6f:be:67:07:63:44:98:7d:
a6:cd:d3:4c:8d:5d:c7:99:eb:27:54:a0:db:79:76:
15:ec:9d:be:41:08:ae:fe:50:43:33:5b:9b:ef:15:
82:eb:c2:0c:e5:1f:c5:b0:7e:2c:6d:3e:76:64:06:
cc:12:76:4b:23:53:8c:fa:07:1c:c0:4e:3d:55:1e:
a3:8d:c9:d8:cb:c8:8f:85:4e:f7:a6:b3:39:60:a4:
e4:cb:eb:6a:35:8b:20:11:03:1a:df:a8:0f:b1:e7:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:10:1B:6B:51:97:AB:4A:A4:95:E4:6E:A7:BC:9F:FD:46:B1:B9
X509v3 Authority Key Identifier:
keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/C1QQG2tRl6tKpJXkbqe8n_1Gsbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.14.0/24
Signature Algorithm: sha256WithRSAEncryption
18:49:04:f3:84:c9:60:e1:10:e5:bd:00:e3:8a:9c:a3:ac:72:
ab:07:b3:a3:7a:26:b5:22:65:d4:92:d4:4f:80:5d:f3:c4:1d:
3c:60:c5:90:ca:74:34:f1:ab:f6:b0:17:82:53:88:d7:41:d6:
be:8d:e8:9f:0d:03:4a:e6:cb:11:d6:77:ce:f0:9c:bc:bc:4a:
c2:83:ba:a3:eb:12:2e:77:e1:f7:57:b4:1f:67:51:2e:ce:fb:
63:ce:93:f0:ed:51:84:81:de:8b:5d:94:ee:48:07:eb:4e:97:
db:1e:66:e7:00:f8:35:96:2c:19:b7:30:af:49:7f:e4:f1:7d:
4e:3e:6a:90:9e:c5:d6:5b:2e:e9:8b:c6:7a:ad:81:fd:19:5e:
3b:bb:1b:ab:51:6d:c3:f5:75:96:2b:34:38:24:55:a3:bc:91:
37:6b:1f:24:ec:44:bf:0a:f6:84:ff:4e:a3:c7:fa:7b:ce:35:
c9:41:7c:32:18:69:c5:b5:ce:d7:ec:9b:c9:fa:de:d9:25:3c:
1f:64:7f:b0:26:c5:1e:53:ef:aa:f6:bb:31:e7:ce:b6:3f:60:
4d:07:e5:d8:f6:ba:f8:12:06:6e:0b:4a:2c:43:3a:42:d6:f8:
b5:38:50:48:eb:da:2b:27:32:40:6f:7d:0f:2e:f6:cb:76:01:
d0:dc:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:20:34 2025 by rpki-client