Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa
File: 42Wof98oKpuZM9fQWMbkCIyaJc0.roa (raw, json)
Hash identifier: wTjoNliAkDzSyYtpfmADD0IHkYpdpFAssD8N2285cRY=
Subject key identifier: E3:65:A8:7F:DF:28:2A:9B:99:33:D7:D0:58:C6:E4:08:8C:9A:25:CD
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0C0B
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa
Signing time: Mon 26 Aug 2024 05:25:16 +0000
ROA not before: Mon 26 Aug 2024 05:25:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18464
IP address blocks: 103.122.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3083 (0xc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Aug 26 05:25:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E365A87FDF282A9B9933D7D058C6E4088C9A25CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:e4:2d:c3:89:a4:07:91:1a:57:c1:28:53:
e4:b1:a0:a1:06:93:50:35:8e:7d:fb:d9:5b:fc:99:
13:27:6f:04:dd:b5:50:bb:9f:c9:58:f2:89:f0:cf:
af:32:80:c5:16:82:91:de:f8:f2:77:fb:1c:4c:4f:
26:5a:23:19:eb:76:64:4c:07:d8:37:72:ab:68:3a:
ba:55:bb:51:99:6d:e5:f6:ce:0c:a9:fc:a7:44:e7:
f5:3d:72:5b:b9:f8:f1:a5:6f:62:4c:18:24:af:e2:
1f:40:fb:95:a2:9d:93:18:29:78:51:1b:4d:fb:19:
ae:1a:54:2a:59:22:12:9a:7f:d5:1d:8c:0e:b0:57:
59:84:8a:9d:54:30:0a:a8:94:77:34:ad:c2:be:4a:
d9:9b:4b:c4:05:e5:5b:5d:d1:ed:e8:ef:a2:46:d7:
a8:66:40:42:ff:e9:79:a2:50:75:10:8f:3c:94:2e:
0d:62:d5:f4:79:c0:96:0f:35:32:7d:20:5b:1a:27:
71:18:68:23:58:82:3a:62:2b:6f:22:2f:aa:29:ab:
ac:b7:ab:ad:2b:09:69:b7:3c:47:84:8b:c8:44:66:
ba:70:e7:a0:7a:a6:44:4d:65:2c:0d:4b:1a:ef:5e:
81:06:6c:c3:86:b5:4b:96:be:0f:be:27:f8:f8:f3:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:A8:7F:DF:28:2A:9B:99:33:D7:D0:58:C6:E4:08:8C:9A:25:CD
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.22.0/23
Signature Algorithm: sha256WithRSAEncryption
89:c2:81:d2:3f:5e:b5:a3:0d:bc:bc:9a:70:43:57:48:e6:f7:
6b:17:9f:00:ac:f3:f9:7e:21:e2:9a:b2:be:26:eb:e6:81:07:
50:c9:3b:2d:b4:27:93:57:c4:6b:f2:2e:3b:11:a5:2a:89:a7:
f6:49:84:66:90:da:5a:e7:40:9e:5c:50:21:f6:5f:ad:43:91:
6b:b7:b3:f7:c4:04:3f:37:ab:44:25:a1:ef:b2:3c:25:2b:17:
c9:4e:83:1d:90:08:fe:02:52:13:4d:73:db:a7:b8:b1:f3:bd:
42:77:32:74:0b:48:fb:28:00:80:3d:e5:65:48:10:ea:50:7a:
7d:11:9c:e1:62:2c:84:ec:df:e7:1c:57:2b:07:dc:f6:4f:ea:
18:e0:3c:2f:8a:a7:7e:2f:37:62:52:80:b4:6d:d5:85:f8:20:
d1:ad:33:ae:85:c7:be:ae:5b:67:0e:40:ce:c5:37:4c:f6:a0:
21:a7:51:79:b5:0e:61:8d:14:d4:79:56:c4:8c:9e:64:86:f6:
ea:4d:2b:fd:21:b7:9e:fc:2a:8a:70:7d:30:20:90:b8:6e:15:
5d:8d:3b:90:c6:5f:ea:4e:d0:06:c6:92:6d:bc:3a:f4:ab:fb:
2a:9b:89:88:8a:99:24:df:89:6b:45:a0:8f:4a:22:30:63:d7:
e9:a7:3e:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:33:30 2025 by rpki-client