Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
File: Tu26jNxyTUfGka87xkhE2smDphQ.roa (raw, json)
Hash identifier: BLe130TYsj5oSRm9g2SeH58MWbXsDBtc//FLLqseSTs=
Subject key identifier: 4E:ED:BA:8C:DC:72:4D:47:C6:91:AF:3B:C6:48:44:DA:C9:83:A6:14
Certificate issuer: /CN=45542320685E62421C114DBA65B8F5705A774845
Certificate serial: 0135
Authority key identifier: 45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
Signing time: Mon 26 Aug 2024 05:25:59 +0000
ROA not before: Mon 26 Aug 2024 05:25:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150770
IP address blocks: 103.197.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45542320685E62421C114DBA65B8F5705A774845
Validity
Not Before: Aug 26 05:25:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EEDBA8CDC724D47C691AF3BC64844DAC983A614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:fb:e4:1a:ca:6b:5d:3c:54:b2:3e:86:37:
54:07:9c:44:39:b2:a1:4f:6e:d8:a4:df:9a:a0:c7:
97:7e:61:69:7c:a1:fb:c6:cc:50:fb:ae:76:91:8d:
f5:33:7c:19:3f:94:76:25:5f:fe:91:5d:e2:f3:b4:
8c:e1:d3:e4:42:9d:60:4f:71:b7:31:e8:7f:f9:c6:
34:cf:20:02:c6:27:ad:14:15:f1:f6:26:f0:af:74:
f7:c9:af:01:41:6d:7b:75:1c:a4:42:79:83:fb:4f:
73:8c:02:ab:14:85:84:e8:6d:1a:a4:a9:74:a3:86:
80:90:c7:91:16:49:b7:10:1d:60:85:44:00:0f:de:
dd:86:d5:26:dd:72:c3:83:ba:30:8a:ee:07:b6:73:
87:99:98:00:0e:b9:58:f3:51:55:a3:0c:ca:d9:8c:
5c:77:92:7c:d9:c6:81:a4:c8:ef:15:9f:fb:83:1f:
0f:b0:b5:dd:73:3e:e1:14:e4:b9:02:e0:b8:f7:bc:
e7:fa:d3:a1:29:77:36:60:eb:98:25:17:a9:53:12:
73:23:aa:20:9f:b2:6f:95:3d:de:9b:6b:7c:3e:87:
51:6c:c6:9f:86:08:43:1c:91:14:f3:a0:a8:af:4a:
70:40:85:bc:cf:54:ed:38:06:0f:27:cb:02:c5:c8:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:BA:8C:DC:72:4D:47:C6:91:AF:3B:C6:48:44:DA:C9:83:A6:14
X509v3 Authority Key Identifier:
keyid:45:54:23:20:68:5E:62:42:1C:11:4D:BA:65:B8:F5:70:5A:77:48:45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/RVQjIGheYkIcEU26Zbj1cFp3SEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RVQjIGheYkIcEU26Zbj1cFp3SEU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINENET/Tu26jNxyTUfGka87xkhE2smDphQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.158.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4b:78:53:60:1a:05:94:cb:1c:d7:23:8c:5a:45:ea:7e:e8:
c2:28:66:30:68:43:d4:03:1d:18:ab:ed:93:86:09:82:03:80:
0e:4f:1f:50:32:dc:b4:3b:e6:dc:63:26:19:f4:fa:02:c8:c2:
45:10:7e:b7:4b:a2:38:04:cf:7c:bc:3e:4f:55:07:59:47:2f:
18:50:e8:ef:d5:44:8d:ea:82:28:2e:46:4b:8c:32:1c:08:11:
c0:df:37:46:f5:a7:54:e4:99:97:e2:0f:80:19:5c:81:fd:6c:
af:f9:de:b8:5f:23:64:24:65:14:16:5a:8d:a0:9f:e9:41:62:
63:2b:28:3f:4c:37:c9:fa:12:b6:59:37:09:b2:55:01:95:74:
fb:b4:a3:80:6b:fc:63:37:59:a5:75:a9:64:5e:cd:8f:17:15:
62:2e:71:e8:cc:42:51:41:4a:3c:6f:27:23:d0:81:d2:af:c5:
07:bb:b9:fe:34:7d:17:19:15:a8:36:96:49:eb:9c:2f:ac:1d:
70:1d:af:31:aa:20:ab:69:08:42:85:4f:ac:59:b5:e4:61:3d:
5b:24:be:6a:31:88:b9:a9:21:3a:6f:33:e1:00:11:1d:19:14:
3b:3f:4e:6a:cc:cb:46:53:4d:45:ad:3a:50:d8:d8:d9:b2:8f:
a9:4f:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:57:08 2025 by rpki-client