Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa
File: 9TgZ27xKTvpEBo4_SFicilqK9FI.roa (raw, json)
Hash identifier: 8jpXN8/Kkp0+w2SLVIsmqqh+UgRdevNVOh87QuYMc18=
Subject key identifier: F5:38:19:DB:BC:4A:4E:FA:44:06:8E:3F:48:58:9C:8A:5A:8A:F4:52
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 0A32
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa
Signing time: Mon 10 Feb 2025 13:46:33 +0000
ROA not before: Mon 10 Feb 2025 13:46:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131671
IP address blocks: 103.146.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Feb 10 13:46:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F53819DBBC4A4EFA44068E3F48589C8A5A8AF452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:f5:04:c2:25:28:fd:c0:55:97:15:a7:70:
a3:dc:67:e6:c1:02:d1:45:01:96:eb:a0:6a:e8:14:
5b:d3:7c:1d:93:78:3e:a8:6a:89:44:35:78:83:43:
88:3a:bd:0d:2a:90:e1:92:b5:8b:de:67:62:64:f1:
20:4b:ed:39:c3:99:d7:c6:ee:09:5f:51:76:af:fa:
0b:73:e6:d0:5c:5d:47:d4:33:28:c0:b7:23:21:c0:
ae:6b:5e:be:ec:43:2d:fb:cb:cc:21:ad:24:a0:31:
a4:32:1a:8d:ee:ad:b9:67:8c:b2:75:a1:77:a3:44:
88:bc:bc:e0:ab:b1:8e:45:cf:c7:8d:43:36:c2:76:
98:1d:b2:64:81:c7:64:95:a2:f1:05:a4:16:c4:34:
7d:ad:fb:26:39:d5:25:ab:2c:bf:60:47:1a:e7:fc:
cf:55:1c:21:c8:54:bd:3c:40:cb:36:ec:a1:c5:88:
21:a1:97:43:02:da:6e:7b:e4:ea:dd:03:cb:0b:12:
08:f3:38:77:37:e0:7d:23:33:02:17:aa:bd:1b:ca:
52:8d:e7:72:84:88:48:05:7a:c0:01:7c:fd:3a:52:
bf:d4:99:35:a6:0b:0b:5e:45:d4:b0:ce:a3:5d:f6:
84:e5:7f:31:10:82:d8:c6:56:1c:32:bf:88:a1:3c:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:19:DB:BC:4A:4E:FA:44:06:8E:3F:48:58:9C:8A:5A:8A:F4:52
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8a:e2:00:7f:05:8d:1f:93:b2:98:c7:8f:a5:57:17:66:24:
8b:48:88:ce:42:19:37:70:72:8e:5a:6d:04:43:8f:25:0d:b7:
a8:4d:f4:7f:9a:b1:a4:15:eb:f5:dc:8e:cb:87:57:ab:19:f9:
e9:a6:68:45:c4:c9:a7:a6:42:a3:47:1e:2e:74:bb:7d:23:02:
a0:ca:aa:10:54:ff:e8:59:12:ea:db:8a:b6:86:97:be:ca:b6:
99:2e:01:5e:e4:83:0d:e4:8e:e6:69:4f:03:eb:70:94:09:6c:
42:93:8d:35:93:51:3a:f2:b3:b1:83:a7:1b:02:58:84:c4:9e:
7f:eb:6c:a0:02:74:ff:69:41:4c:5a:23:3b:de:33:b5:7b:ba:
ce:d2:98:2e:3c:1c:67:f0:36:40:9e:d1:46:44:af:7a:6e:6b:
4c:05:bd:09:f9:8c:b0:3b:76:cc:42:b7:0e:41:db:b6:b6:14:
96:22:f7:8c:8b:ea:fa:b3:7b:bd:1e:fb:08:6d:a9:d9:00:4a:
03:44:d7:43:0a:fe:dc:fc:d5:0a:12:5a:82:1c:df:4e:67:86:
04:53:60:65:bd:16:3c:1d:7d:9f:e6:d5:1c:aa:ab:8d:7b:9d:
55:51:f8:be:d2:b4:70:07:7c:fd:d2:7b:92:3c:0a:e9:5c:01:
24:f0:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:19:46 2025 by rpki-client