Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/mFyCZzy6nYIiHa_znGrUFzWBYT8.roa
File: mFyCZzy6nYIiHa_znGrUFzWBYT8.roa (raw, json)
Hash identifier: r9xXDB1vheASiPuc/DToxgENtfPTdXv5DEVHjhuFSNY=
Subject key identifier: 98:5C:82:67:3C:BA:9D:82:22:1D:AF:F3:9C:6A:D4:17:35:81:61:3F
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5985
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/mFyCZzy6nYIiHa_znGrUFzWBYT8.roa
Signing time: Mon 10 Feb 2025 14:10:35 +0000
ROA not before: Mon 10 Feb 2025 14:10:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.46.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22917 (0x5985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 10 14:10:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=985C82673CBA9D82221DAFF39C6AD4173581613F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:22:27:90:14:e7:5d:c0:be:f5:72:55:e7:
1d:72:7b:76:55:26:2c:9a:d1:bf:99:7f:87:c2:1f:
5b:30:f0:72:4e:a2:69:16:7f:7e:f3:f6:1d:d1:a5:
72:5c:b7:a8:ec:ec:8e:6b:4d:f3:af:a3:a6:f9:5d:
8d:f1:85:73:5c:e5:8b:f1:8b:aa:f9:1d:56:01:72:
7d:ee:3f:36:ef:76:93:30:e6:0e:d9:46:f8:8d:4f:
c7:86:7f:4a:68:be:e4:53:0b:50:f8:b1:d6:86:42:
e6:1c:94:b9:2b:2f:e4:be:dc:ea:52:ac:56:c1:01:
e0:90:80:88:c3:6c:bf:5e:28:69:ad:d6:59:b5:4f:
5b:0a:f3:09:d7:7a:2d:06:33:99:60:3b:27:bb:2c:
5e:c2:fd:90:20:db:69:39:99:e9:0b:32:af:1f:1b:
d6:24:e1:2b:36:4d:22:fa:96:cb:48:2f:71:5d:d2:
0b:4f:d3:a2:c7:35:ca:9b:4b:fd:34:f9:97:aa:f7:
99:cb:e0:ee:f4:62:d7:a9:a3:83:ce:89:8f:dc:d3:
9b:18:75:44:54:a6:6a:02:4f:12:d2:81:fc:dc:5e:
1a:0d:fa:bc:31:3e:6c:79:b9:80:63:95:4e:53:b1:
a6:42:7a:17:44:46:6b:8a:3c:26:a6:8a:1e:d0:2d:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:82:67:3C:BA:9D:82:22:1D:AF:F3:9C:6A:D4:17:35:81:61:3F
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/mFyCZzy6nYIiHa_znGrUFzWBYT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:59:57:ea:0a:0e:95:80:21:14:18:89:6b:b7:05:f3:45:f9:
9c:4a:7c:c4:23:5e:80:da:f0:a9:f7:d8:4f:6f:eb:57:bb:34:
88:c0:32:32:ad:d0:ea:e6:af:b0:48:8b:8d:c8:cd:6d:f4:4e:
1e:b5:80:71:b9:b9:f9:ba:91:e1:ef:8a:9e:36:13:04:4a:0b:
83:28:67:1e:5c:37:12:35:fd:5d:1b:64:d9:01:76:1d:91:a9:
99:eb:c8:8d:a5:35:6d:2c:2a:73:b3:2e:d1:37:79:39:0c:36:
c0:4e:53:29:e4:b7:58:11:83:3a:af:88:cc:d1:c9:71:5f:f4:
d8:c8:8e:51:c9:cf:77:72:df:10:a5:d0:a6:3a:7d:12:19:1f:
9a:c3:7d:0a:82:bc:b5:65:a0:63:60:36:4b:d5:96:c5:8a:8a:
bd:97:2f:41:30:42:46:a6:42:50:b1:5e:4a:7c:0b:3b:a0:f7:
17:81:a4:4b:00:ce:4c:ff:aa:5e:77:9c:e2:d6:53:e0:06:d7:
13:59:b4:20:ad:6d:99:5a:62:63:c4:61:7c:b4:5d:dc:82:5c:
16:90:b4:1f:fd:94:8b:43:d9:3a:e1:bd:81:90:f9:d3:62:5c:
b2:c9:d9:53:7a:ed:ad:fb:08:11:50:72:91:54:2c:d7:be:62:
77:d0:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:14 2025 by rpki-client