Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa
File: l46Aiyu5k_P22ls9YvpPewX7LIE.roa (raw, json)
Hash identifier: zC0cIQVwRKrf5FBYcxRWt2N3mU8BELyllwbixYF/jYc=
Subject key identifier: 97:8E:80:8B:2B:B9:93:F3:F6:DA:5B:3D:62:FA:4F:7B:05:FB:2C:81
Certificate issuer: /CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Certificate serial: 0C91
Authority key identifier: 84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa
Signing time: Mon 10 Feb 2025 14:15:56 +0000
ROA not before: Mon 10 Feb 2025 14:15:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 103.117.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3217 (0xc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Validity
Not Before: Feb 10 14:15:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=978E808B2BB993F3F6DA5B3D62FA4F7B05FB2C81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:cf:c1:de:fd:d0:39:a0:41:19:ff:af:02:
6a:9c:f4:86:6c:42:a8:1d:9e:19:f9:7f:ec:77:dd:
49:e6:b1:74:82:57:b7:08:fa:61:fd:a4:2e:b2:69:
b5:f6:52:d9:a6:30:8b:7c:36:b7:6c:26:b2:f3:c0:
8d:33:d2:ff:bb:c1:03:1a:e2:91:ca:af:c6:2c:2b:
37:41:b8:73:ba:56:93:86:4f:56:27:b4:c0:0f:98:
df:c6:e0:32:7c:ae:a2:a2:64:ca:d2:2c:50:eb:4b:
85:44:88:7e:a2:e5:1e:f2:07:02:05:66:77:4f:85:
b5:ce:55:47:80:85:1c:7f:bd:a6:4c:06:db:fc:49:
12:7b:d3:c4:c7:80:a8:20:32:03:b7:ef:9c:3c:4d:
e0:b1:c9:5f:e7:ca:b3:2a:67:bd:06:5d:d3:86:f5:
72:38:49:52:79:62:8a:f4:e6:9d:ba:45:e0:ea:a8:
10:1f:de:ae:d8:d5:d3:72:97:80:80:e5:e4:6e:ad:
92:f0:f3:4f:29:b1:34:ae:f5:b6:53:4e:30:8b:f7:
a9:c7:95:30:23:55:10:4e:c2:cd:64:a9:37:22:cd:
df:c8:7a:a9:83:e4:d7:e5:14:ee:b7:c8:c5:83:82:
ac:52:61:ff:bf:3c:73:3c:5a:d8:1d:d6:b0:71:c1:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:80:8B:2B:B9:93:F3:F6:DA:5B:3D:62:FA:4F:7B:05:FB:2C:81
X509v3 Authority Key Identifier:
keyid:84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/l46Aiyu5k_P22ls9YvpPewX7LIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:27:a4:57:97:82:08:cc:45:ea:9c:32:29:47:25:95:39:72:
d9:6d:19:d4:a3:f8:45:32:68:fd:a9:39:be:e3:76:dc:89:6b:
38:51:ed:69:a3:3f:af:d1:b6:a5:c9:a8:45:e6:1f:5d:ef:15:
a7:3f:c8:d2:02:ee:55:17:52:3c:c0:2e:0a:53:49:5e:7b:96:
ce:48:57:19:1c:9f:1e:8f:cb:de:45:c8:f9:9d:39:a2:58:cf:
de:72:95:92:0c:6b:5b:aa:58:00:ed:8b:45:cf:f9:f5:7d:ab:
63:61:ab:d7:6c:80:87:49:18:89:e3:c8:be:c1:45:4e:c3:69:
6e:10:8c:7b:fd:77:9e:54:ad:0c:9e:75:66:2a:64:93:a8:c7:
a1:9c:68:76:1f:e0:a8:47:96:28:13:44:6d:68:6d:67:a8:74:
6a:24:6a:9a:e6:6c:31:a3:db:bd:c6:47:bf:70:04:a4:ff:0c:
f3:0f:47:27:10:5f:c4:f1:ee:4e:5e:9b:78:9c:a6:1b:22:4c:
20:c0:f4:90:d4:10:c7:a5:f3:df:50:b0:93:1a:9f:5a:c2:f8:
02:ab:eb:2f:4c:65:a9:ab:af:fc:9d:96:59:7c:a6:37:56:8b:
52:60:4e:24:58:0c:ea:9b:6a:a1:f6:91:27:90:c2:43:0c:f7:
9d:45:fe:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 10 16:02:30 2025 by rpki-client