Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/Sb5N0eHVsAMuCyjQJjyCqXmL-hY.roa
File: Sb5N0eHVsAMuCyjQJjyCqXmL-hY.roa (raw, json)
Hash identifier: YjWF/XI1LIx1Q/iaSbdLXet71FR11ojGJah+9+Qidqg=
Subject key identifier: 49:BE:4D:D1:E1:D5:B0:03:2E:0B:28:D0:26:3C:82:A9:79:8B:FA:16
Certificate issuer: /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial: 0B0E
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/Sb5N0eHVsAMuCyjQJjyCqXmL-hY.roa
Signing time: Tue 03 Oct 2023 06:26:57 +0000
ROA not before: Tue 03 Oct 2023 06:26:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.129.168.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Validity
Not Before: Oct 3 06:26:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=49BE4DD1E1D5B0032E0B28D0263C82A9798BFA16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:98:72:0a:1c:4c:29:cc:76:40:04:4f:51:
54:5a:ff:f2:3e:37:5f:cb:8f:99:97:35:6d:bf:13:
27:76:18:31:f6:ce:de:bc:2a:02:7a:dd:a4:80:03:
d5:e4:45:37:76:df:2d:55:12:7b:20:61:12:3f:04:
a1:43:42:58:5b:e8:c7:72:30:a2:9c:5c:65:6e:cb:
6b:19:65:97:07:c7:5f:43:e2:61:ca:7d:f0:73:a9:
22:3f:69:15:30:b6:5a:7b:70:97:a9:97:68:80:59:
28:a0:3b:14:81:06:95:e4:23:1d:45:7b:85:33:62:
d6:14:fd:86:23:50:1f:e2:6f:ca:02:61:69:b7:4b:
0f:6a:e8:31:b1:91:d0:f5:9e:5b:ec:66:23:f7:1c:
e7:7e:81:39:5d:c3:b4:40:ec:21:1b:26:73:72:1e:
d1:8f:56:fc:b9:f3:28:9d:c5:1d:de:48:f0:99:60:
bf:f6:8a:90:f2:56:40:07:4f:c4:49:02:ca:4a:4d:
36:48:3d:ab:e6:99:9a:d0:48:8d:9f:fc:d6:00:51:
3c:6f:8a:39:09:3c:11:3f:ed:a6:e0:64:88:2c:b7:
0f:5f:8a:4d:55:09:7d:a6:f0:02:2f:9f:1b:e7:35:
bb:aa:81:cb:18:b4:c0:fd:f1:d2:e5:4d:f8:cd:81:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:4D:D1:E1:D5:B0:03:2E:0B:28:D0:26:3C:82:A9:79:8B:FA:16
X509v3 Authority Key Identifier:
keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/Sb5N0eHVsAMuCyjQJjyCqXmL-hY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.168.0/22
Signature Algorithm: sha256WithRSAEncryption
06:0f:00:b5:93:09:3a:0d:92:31:15:6e:ff:01:48:6b:5d:a0:
ae:31:42:46:63:2f:85:91:bd:ce:e5:48:5c:a2:eb:dc:65:84:
11:47:01:5d:0f:63:2b:97:13:44:51:60:6a:12:d5:49:d5:0d:
27:93:5a:fb:b1:36:43:dd:15:b6:94:5b:b2:75:75:f5:fb:f6:
35:44:8e:3c:ce:06:ed:a8:43:97:f0:d2:6a:f3:84:91:1a:85:
0b:5c:04:66:f9:07:b4:6b:e0:da:83:53:a8:a1:71:99:9e:4b:
b9:db:e2:08:43:16:95:b0:63:8f:34:21:75:a5:ab:5b:79:5d:
86:ad:c9:b0:83:8b:f9:46:36:c4:8a:b3:3c:4f:ef:ec:8c:59:
8b:55:64:df:c0:cc:21:91:c6:ab:03:82:30:ca:d7:8d:fd:6d:
eb:c8:9d:f2:5a:cb:b6:30:48:aa:b8:57:70:95:bc:e4:b3:38:
17:db:69:a5:53:b8:66:be:41:02:45:45:03:fd:e1:bf:c2:a1:
87:09:32:2a:dc:f3:f6:48:d3:1c:0e:a5:32:2d:ae:09:63:f3:
8f:40:f1:e7:a6:93:78:7f:5d:2d:5c:dc:86:cc:b5:dd:5c:3b:
ec:54:d2:74:32:5a:d0:a0:9f:75:7a:0a:c4:c8:cd:af:14:9f:
0b:72:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:36:19 2025 by rpki-client