Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa
File: BksD1EmrlWKtvQBfUX2TrbpMskE.roa (raw, json)
Hash identifier: DmSKoR8SfQZdYsFiKdxkA14KF2+bFU8HD7g9Bl/rsWM=
Subject key identifier: 06:4B:03:D4:49:AB:95:62:AD:BD:00:5F:51:7D:93:AD:BA:4C:B2:41
Certificate issuer: /CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
Certificate serial: 0225
Authority key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa
Signing time: Mon 26 Aug 2024 05:20:35 +0000
ROA not before: Mon 26 Aug 2024 05:20:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7483
IP address blocks: 103.189.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
Validity
Not Before: Aug 26 05:20:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=064B03D449AB9562ADBD005F517D93ADBA4CB241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:c0:15:00:f9:46:46:05:e1:5a:e7:75:1c:
5b:df:81:1c:30:5e:18:34:23:3f:8c:dd:80:fc:43:
2f:75:e6:7b:80:79:dc:10:69:d8:8d:09:95:78:f9:
6e:d6:c7:0d:5b:33:c2:70:a3:ad:ac:ad:9e:d3:d6:
f6:93:47:ca:7d:cd:dd:0e:49:dd:40:ae:77:1b:7d:
9a:95:b1:f5:bd:03:63:a3:4f:97:ea:c0:60:c2:83:
54:af:1c:91:39:1c:b3:4d:76:e2:81:29:56:b5:4b:
91:6b:68:3e:c7:e1:36:80:7b:fd:66:de:39:e1:bf:
c7:ac:c1:d0:18:48:ae:30:56:21:c0:24:20:6d:28:
0d:f0:1d:a3:d5:10:78:23:96:5a:d3:be:51:e5:70:
f4:77:13:bf:70:32:f5:44:0a:1d:a0:13:18:de:fc:
b0:c5:e3:2e:2d:ba:f8:22:1c:93:0a:4d:9c:31:93:
bb:4d:7a:b1:6a:ae:90:74:e6:b9:3b:cd:48:c5:0a:
d8:04:b6:41:5b:e6:c8:02:bf:ae:11:bd:ad:e5:57:
d7:94:c6:13:7c:71:ea:04:ee:cf:31:5f:a0:7a:27:
80:ec:96:67:19:87:05:bf:3b:06:95:31:4c:92:8c:
b5:ad:94:a7:03:8a:f1:62:f4:6d:8f:15:2e:4c:91:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:03:D4:49:AB:95:62:AD:BD:00:5F:51:7D:93:AD:BA:4C:B2:41
X509v3 Authority Key Identifier:
keyid:76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.108.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:07:28:2c:52:8a:5f:3b:bf:ef:10:15:61:c4:99:ce:01:b6:
7c:ef:55:09:6e:4d:2c:44:14:7b:b3:3c:e9:95:c7:aa:fd:3c:
80:0c:4b:02:cb:84:77:79:45:03:75:2a:01:26:21:47:d3:93:
4c:f8:55:60:35:ce:72:5c:8a:d8:fe:35:76:39:39:d4:98:06:
82:d9:30:21:e4:c5:78:69:8e:bf:17:86:79:82:d0:2e:a9:fd:
a5:9d:79:18:7e:68:57:d4:ff:25:12:ee:a2:60:46:25:3b:71:
e3:70:fa:90:8e:8b:53:94:e6:5b:68:24:48:1b:6b:03:a0:b0:
2d:7f:d1:82:02:c6:b8:28:e3:39:55:e6:7b:47:4d:26:14:a6:
98:bd:a7:0f:96:f9:80:f2:e0:7c:11:0a:c7:b3:ea:ca:56:50:
f5:c2:38:39:5e:b2:bc:fe:3e:27:0f:fd:bd:93:80:8d:ce:30:
88:d1:03:84:76:ff:05:38:61:d3:e0:b3:00:0e:e5:58:4f:a3:
c6:41:08:23:f0:22:18:b3:a2:a3:e2:27:c7:72:17:24:1b:6c:
ab:0b:45:2e:06:44:4f:8e:f9:28:63:00:57:84:68:2a:ef:48:
d5:a2:21:67:d6:25:56:84:72:2f:e9:e4:f6:f2:9d:6a:7e:c5:
6d:c4:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:51:22 2025 by rpki-client