Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa
File: Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa (raw, json)
Hash identifier: zMMaRyMSxfpE19/h+9HVfhEWN4zmgzH1mVw/R7zMJ6k=
Subject key identifier: 3E:1D:CB:5D:45:02:1C:DC:D0:6F:1F:19:17:75:E9:DA:31:88:AD:AA
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F91
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa
Signing time: Mon 10 Feb 2025 14:30:52 +0000
ROA not before: Mon 10 Feb 2025 14:30:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18424
IP address blocks: 103.136.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3985 (0xf91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Feb 10 14:30:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3E1DCB5D45021CDCD06F1F191775E9DA3188ADAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:41:b3:15:10:a2:fa:62:d6:19:8f:97:23:
a1:1e:cd:1b:fa:06:cb:9d:a0:bb:de:b0:57:23:07:
ea:6f:ac:4a:b7:5b:ba:fe:90:14:33:6b:73:5a:06:
5b:f7:e7:61:a3:c3:15:38:44:09:d3:1a:cf:68:c8:
c0:f4:89:30:f1:f4:e4:30:78:23:b3:36:95:3b:45:
b7:37:f2:51:71:1d:ae:1e:03:bc:e3:2f:c3:1b:15:
ed:b0:a2:31:8b:fb:5c:8b:fb:55:c4:e5:ab:51:95:
5d:24:c0:b7:c1:ff:b8:e2:5c:c6:c7:93:f8:b1:e2:
45:06:64:ce:6a:ad:b2:ee:5a:fa:ab:d9:c6:50:62:
e6:fa:8f:6a:63:b7:e7:d9:c4:3d:7b:a5:dd:2e:9a:
6e:e1:76:0e:19:5e:0d:12:81:58:4f:81:25:48:70:
e6:8e:05:e3:85:0b:1e:99:37:ed:57:19:f7:9f:86:
27:be:74:60:74:9a:98:ff:88:79:3d:34:e4:23:07:
91:d1:d7:51:01:c9:4c:b5:c1:68:2d:c2:a1:67:85:
e6:34:c8:16:bb:d9:03:f5:b7:6a:66:1c:3f:1b:54:
e1:cd:c3:02:89:3e:4d:5d:25:21:5b:f2:c8:34:91:
5e:44:67:89:e8:b6:2d:e1:4c:39:44:44:21:bc:42:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:CB:5D:45:02:1C:DC:D0:6F:1F:19:17:75:E9:DA:31:88:AD:AA
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
75:71:c7:90:0d:5e:a3:98:ed:45:11:25:91:fb:78:0f:a2:d9:
e5:48:b2:72:44:2c:98:f2:6d:9a:e7:c3:2e:0e:66:44:92:dd:
db:3d:dc:d5:c2:00:55:5b:44:4f:6c:d5:7b:5a:02:0f:cf:28:
db:7c:8d:9a:de:bb:72:53:12:a7:75:3d:a7:77:fd:6a:61:47:
f9:97:63:8f:22:f5:c4:f0:93:a9:7c:8e:1d:52:17:6a:84:e5:
4d:53:59:ce:0d:63:ed:9b:36:64:e6:62:2f:93:06:b4:07:2e:
97:cb:6c:1c:f7:23:3b:00:d2:4a:46:99:c4:b2:84:53:3f:6e:
9c:df:91:44:7f:97:fa:f8:75:e8:39:66:11:c8:55:ba:89:e2:
1b:15:ca:99:0e:21:47:4e:52:3f:5b:c3:40:87:3f:a5:a6:5b:
65:13:82:27:1c:a1:94:e1:a3:50:fa:0c:7b:89:d2:0a:4c:ee:
05:00:7e:06:b2:f0:f0:5d:fa:4f:68:fb:5d:0a:92:d1:b9:df:
38:38:af:b0:c7:e1:02:3d:c2:27:8b:14:4f:29:fb:95:ed:74:
3e:73:9a:7e:64:02:eb:04:4b:0e:e3:98:1e:d6:15:1c:79:ce:
68:78:e0:fd:db:c2:ce:d3:d5:96:b8:82:97:34:ac:71:0a:b4:
20:0f:c8:4e
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICD5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG
MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx
NDMwNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMURDQjVENDUwMjFD
RENEMDZGMUYxOTE3NzVFOURBMzE4OEFEQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyW0GzFRCi+mLWGY+XI6EezRv6BsudoLvesFcjB+pvrEq3W7r+
kBQza3NaBlv352GjwxU4RAnTGs9oyMD0iTDx9OQweCOzNpU7Rbc38lFxHa4eA7zj
L8MbFe2wojGL+1yL+1XE5atRlV0kwLfB/7jiXMbHk/ix4kUGZM5qrbLuWvqr2cZQ
Yub6j2pjt+fZxD17pd0umm7hdg4ZXg0SgVhPgSVIcOaOBeOFCx6ZN+1XGfefhie+
dGB0mpj/iHk9NOQjB5HR11EByUy1wWgtwqFnheY0yBa72QP1t2pmHD8bVOHNwwKJ
Pk1dJSFb8sg0kV5EZ4noti3hTDlERCG8QmXDAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUPh3LXUUCHNzQbx8ZF3Xp2jGIraowHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75
mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ
RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL1BoM0xYVVVDSE56UWJ4OFpGM1hwMmpH
SXJhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ
KoZIhvcNAQELBQADggEBAHVxx5ANXqOY7UURJZH7eA+i2eVIsnJELJjybZrnwy4O
ZkSS3ds93NXCAFVbRE9s1XtaAg/PKNt8jZreu3JTEqd1Pad3/WphR/mXY48i9cTw
k6l8jh1SF2qE5U1TWc4NY+2bNmTmYi+TBrQHLpfLbBz3IzsA0kpGmcSyhFM/bpzf
kUR/l/r4deg5ZhHIVbqJ4hsVypkOIUdOUj9bw0CHP6WmW2UTgiccoZTho1D6DHuJ
0gpM7gUAfgay8PBd+k9o+10KktG53zg4r7DH4QI9wieLFE8p+5XtdD5zmn5kAusE
Sw7jmB7WFRx5zmh44P3bws7T1Za4gpc0rHEKtCAPyE4=
-----END CERTIFICATE-----
Generated at Sat Jul 5 10:05:40 2025 by rpki-client