Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/gMC4R-ALn893dITsvmobZar71FA.roa
File: gMC4R-ALn893dITsvmobZar71FA.roa (raw, json)
Hash identifier: SwxOl4otH24M2SA9uYnBkzVqJs5Fj/zv5sXCFZY6Tqs=
Subject key identifier: 80:C0:B8:47:E0:0B:9F:CF:77:74:84:EC:BE:6A:1B:65:AA:FB:D4:50
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C65
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/gMC4R-ALn893dITsvmobZar71FA.roa
Signing time: Tue 03 Dec 2024 23:56:04 +0000
ROA not before: Tue 03 Dec 2024 23:56:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 3 23:56:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=80C0B847E00B9FCF777484ECBE6A1B65AAFBD450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:e6:9e:75:97:e9:6e:be:36:f5:54:a2:92:
c6:c6:31:85:07:52:00:1d:62:08:0e:80:31:0b:14:
71:08:4d:32:7a:c4:b3:d3:3a:28:4c:df:58:d2:ce:
da:d8:56:37:52:4f:5b:77:1a:ea:6d:28:22:bc:51:
8c:8a:19:4f:ed:52:ef:42:16:3b:2b:23:f3:2b:a5:
91:66:1e:39:d2:62:42:6e:b3:4d:47:fa:9e:9c:f2:
3c:00:c5:46:cb:01:05:89:b0:01:34:da:60:d6:1f:
6a:95:cb:70:43:d7:5f:68:66:33:a4:bf:7d:fb:6c:
84:23:b2:c7:65:48:db:40:bb:90:55:27:b7:bc:c0:
88:84:91:fa:89:83:95:00:f9:c9:0e:d8:f3:e4:e0:
3d:01:7a:4f:a1:9f:53:1e:4f:b7:2f:a0:27:63:58:
b3:21:d2:af:57:18:6d:5a:f8:62:51:a3:78:29:b5:
ac:41:f8:9f:d8:29:ba:79:37:2f:bf:8b:35:cb:ee:
fa:a4:09:db:28:8c:b8:39:f5:01:74:29:2b:56:7b:
68:3e:0a:1e:eb:89:63:95:f2:ba:fb:a7:b8:8e:27:
18:4e:92:09:36:4a:80:1d:ef:2f:6d:2c:9d:3e:11:
b5:88:2f:50:2f:82:af:c7:42:72:53:d0:15:44:e7:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C0:B8:47:E0:0B:9F:CF:77:74:84:EC:BE:6A:1B:65:AA:FB:D4:50
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/gMC4R-ALn893dITsvmobZar71FA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ab:d2:2f:e0:43:bc:df:55:36:b8:5e:c8:e8:b2:61:b8:dc:
b1:ba:16:ba:29:27:3f:c6:ba:ed:55:7c:bf:bc:3c:6a:9e:4a:
46:2b:f9:ef:d4:f5:9c:d8:10:46:4a:10:bf:36:a0:ca:a0:8b:
d9:7e:d8:6a:67:16:eb:c6:62:10:41:4a:2e:5b:87:a6:f0:29:
67:fc:9e:5d:a8:a5:bc:95:ea:cd:d9:4c:db:4d:53:ca:35:f8:
c9:85:7b:da:e7:b2:31:1d:d2:6b:ee:f3:1e:e0:19:fa:39:09:
b6:97:15:40:84:4d:8b:eb:77:e7:86:8a:bd:a5:2e:05:21:bd:
76:78:44:d8:39:6a:a7:a8:e1:64:05:9c:80:cc:40:5d:c8:9e:
75:e6:04:84:ce:20:e1:fc:56:ed:97:2a:47:e7:41:51:a4:f5:
dc:c1:6a:89:b9:82:72:64:6c:73:c7:66:26:06:d4:7b:66:45:
27:14:29:6d:d8:8b:35:f4:b3:e2:86:8c:29:a6:04:4d:ff:04:
2d:aa:b7:a6:77:cd:18:a5:ae:5b:9c:01:6b:24:a7:2f:05:fe:
2a:b4:53:97:42:b8:16:51:21:89:26:f6:1d:39:d9:23:61:16:
ef:5e:4a:80:d2:fd:3d:c0:2c:94:20:14:c1:7e:28:eb:b2:82:
20:92:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:01:24 2025 by rpki-client