Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa
File: EiyMBeGm0HL1kkgZsiGM76HGOdw.roa (raw, json)
Hash identifier: Tcx3tZX1DWmn4swi2Rq+bOtCwXq/aAsxdKatu3MofLc=
Subject key identifier: 12:2C:8C:05:E1:A6:D0:72:F5:92:48:19:B2:21:8C:EF:A1:C6:39:DC
Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial: 02A6
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa
Signing time: Mon 10 Feb 2025 14:05:16 +0000
ROA not before: Mon 10 Feb 2025 14:05:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 103.160.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Validity
Not Before: Feb 10 14:05:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=122C8C05E1A6D072F5924819B2218CEFA1C639DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:e6:a3:65:9e:05:b2:d9:13:83:ff:fa:78:
3f:14:c4:9b:f7:0b:24:3b:43:6a:27:75:47:30:da:
0f:a7:1a:c0:a2:e0:e3:ae:01:d2:c1:fe:2b:91:44:
10:39:20:13:91:86:0d:4a:ee:5a:08:fb:d1:78:30:
3c:a8:ef:66:5b:95:af:1a:3e:0a:7b:b3:3b:4b:61:
85:f2:03:ff:c8:e4:98:cc:f9:ae:12:54:59:4c:1e:
d7:0a:3d:3d:85:94:26:8c:7f:ad:5d:56:ec:18:5e:
de:d3:7b:20:bf:d5:ee:92:fa:0b:4c:8e:d7:33:d3:
c6:1a:b9:f3:26:5a:53:59:4a:aa:73:61:1c:21:df:
61:19:43:fa:4a:38:ad:38:b5:63:f1:4c:b7:11:31:
54:f3:78:58:02:e5:23:f4:fa:84:3d:a3:b9:ff:9b:
7c:36:8f:0d:c8:a7:1b:b4:0f:ee:8c:21:e9:09:2f:
ab:09:4d:d5:aa:63:39:47:d1:c1:30:f9:ce:92:e9:
5b:b6:b3:d8:f0:0c:7d:06:76:85:0a:d1:f7:1a:94:
ae:0c:52:7f:d7:9b:56:8c:ae:1e:b5:ce:5c:bc:11:
53:fc:5d:fb:71:f5:e1:2a:a5:4c:66:4f:02:99:c5:
0f:9b:0e:16:7a:e8:10:e8:d7:11:9a:f9:82:99:ad:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:8C:05:E1:A6:D0:72:F5:92:48:19:B2:21:8C:EF:A1:C6:39:DC
X509v3 Authority Key Identifier:
keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/EiyMBeGm0HL1kkgZsiGM76HGOdw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.180.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:59:ae:80:08:17:bc:1e:fe:03:71:1f:86:7a:42:28:86:ef:
f4:59:91:d0:b5:de:e7:d3:17:39:50:70:d7:ac:a4:71:d0:09:
ae:e4:ca:74:4e:b9:e4:07:d9:1f:6b:cd:50:5e:f4:e9:a0:c1:
2a:44:57:47:42:70:d2:b7:20:93:9d:df:52:62:43:54:d9:a0:
53:a1:38:54:53:f6:98:9d:85:83:89:e3:31:ad:95:02:b5:e0:
c9:0f:e6:61:80:ff:05:7e:9f:b1:dc:d8:e3:b7:5b:a3:13:3c:
da:7e:6e:15:bb:d2:5b:35:b9:f3:b6:45:46:55:36:81:fe:11:
28:77:db:d9:9b:d9:31:d4:a2:85:11:85:73:a0:1a:ac:a8:05:
99:e1:bd:b8:89:94:b2:fd:9d:0f:b9:96:2e:5b:61:d1:1d:ad:
a3:bd:2c:af:52:7e:34:67:2d:da:47:f6:2e:e6:78:91:49:2b:
e4:ee:97:a4:ee:5c:e5:5e:d4:d8:26:b0:ff:83:fa:5e:57:84:
49:81:6e:63:d9:7f:58:52:e1:5c:89:de:5d:4e:b7:2d:42:9b:
cf:a6:2b:c0:ad:0e:9b:15:1e:4e:5d:f0:5d:1c:c0:90:ac:ac:
0b:03:f2:ac:dd:14:d2:4a:06:0d:0e:9f:53:93:41:d8:cd:6c:
5f:5e:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:53:55 2025 by rpki-client