Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa
File: LffH-WpKvi9XJinz2aE4VouiZvA.roa (raw, json)
Hash identifier: +immBejONVbvGXOv0AuvPFoJNCQVrwob046TeyWavU0=
Subject key identifier: 2D:F7:C7:F9:6A:4A:BE:2F:57:26:29:F3:D9:A1:38:56:8B:A2:66:F0
Certificate issuer: /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial: 0C3F
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa
Signing time: Mon 10 Feb 2025 14:19:35 +0000
ROA not before: Mon 10 Feb 2025 14:19:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 103.233.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3135 (0xc3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Validity
Not Before: Feb 10 14:19:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2DF7C7F96A4ABE2F572629F3D9A138568BA266F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:2d:5a:24:18:b4:ad:ec:a3:cb:ca:6b:75:
19:6e:7a:ca:0c:c2:13:fb:95:63:2d:31:36:10:c6:
cd:ae:39:f6:3b:d6:9e:b5:b0:06:eb:57:48:32:0f:
c1:10:29:51:25:34:02:89:89:24:e4:d8:bd:3d:c3:
17:90:66:26:52:e6:fe:a4:8e:8d:6c:76:66:ca:c3:
fa:08:c7:01:be:c1:10:b0:a0:e5:81:82:cb:60:63:
16:a2:a1:70:af:42:19:f3:75:80:d1:0f:17:f5:87:
70:d4:57:7d:db:5e:5f:f1:cc:fc:97:84:bf:da:9a:
3d:95:e0:a9:d9:51:22:59:cc:2d:f6:ef:22:0f:ee:
2e:d9:7d:4f:45:35:dc:56:60:e9:7c:26:14:71:35:
49:82:fc:ff:7e:cc:d8:28:13:48:19:b2:d0:97:52:
cb:97:3c:f9:d3:33:45:bc:0b:68:db:e8:3d:2d:d4:
54:62:32:97:b9:32:95:53:cb:d0:5e:c3:60:76:98:
c1:04:7d:b4:37:37:1f:aa:9a:55:40:48:ee:ee:f5:
90:b9:81:5a:5e:8b:76:9f:3d:98:6a:bf:63:04:02:
a6:b8:9b:72:42:c4:d1:67:5c:6c:33:63:6b:ba:f6:
c4:de:29:38:69:ec:fc:7b:65:43:f1:b2:5b:85:29:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:C7:F9:6A:4A:BE:2F:57:26:29:F3:D9:A1:38:56:8B:A2:66:F0
X509v3 Authority Key Identifier:
keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/LffH-WpKvi9XJinz2aE4VouiZvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
57:16:7a:76:91:fa:b7:9a:83:bf:2c:14:83:56:86:be:32:b1:
b1:b7:e8:fe:a0:c2:7d:3f:c3:be:21:37:af:6d:43:96:61:1b:
3b:ed:dc:11:30:e4:20:ce:ff:9d:0d:04:eb:8d:8c:e8:96:16:
bf:f4:81:eb:ca:78:01:d1:68:33:8f:19:8b:54:f8:46:bb:03:
0a:d5:31:3f:ae:df:26:d6:8e:54:ad:5c:99:13:2a:61:33:a6:
2b:5d:08:8d:da:26:63:71:68:33:8f:5b:10:ee:d4:d6:75:c4:
b3:3e:85:31:29:d2:7d:3a:ce:c5:14:1f:26:69:81:e4:ef:35:
ca:fc:56:b5:b5:d4:22:83:ce:e6:a6:49:01:12:93:55:3b:3e:
93:4f:49:6c:cc:f7:d2:a5:c5:6e:35:63:33:6f:b6:36:c2:ed:
21:92:82:dd:f5:48:3e:9d:9a:a7:18:19:1f:0c:ac:db:45:75:
38:61:25:a4:d9:1c:16:8e:30:13:cb:a7:4d:ef:b6:71:fa:b9:
1a:7f:1d:3a:7a:ed:44:91:8c:18:7d:49:77:c7:3e:3b:84:aa:
9b:0a:f7:34:9f:5d:94:d8:63:07:97:de:6c:40:2f:18:6c:60:
17:7a:49:db:62:fe:82:51:2b:b9:b2:4c:07:80:b6:98:a7:0e:
97:6f:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:08:18 2025 by rpki-client