Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/jOPts5UkZ_YSrMraUIq9-nUJaWk.roa
File: jOPts5UkZ_YSrMraUIq9-nUJaWk.roa (raw, json)
Hash identifier: 7GzXuth+T5DNemSJ6o2JLZ3lvk+nnC0LmLsmktNYaWg=
Subject key identifier: 8C:E3:ED:B3:95:24:67:F6:12:AC:CA:DA:50:8A:BD:FA:75:09:69:69
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CD7
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/jOPts5UkZ_YSrMraUIq9-nUJaWk.roa
Signing time: Thu 05 Dec 2024 04:26:20 +0000
ROA not before: Thu 05 Dec 2024 04:26:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 5 04:26:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8CE3EDB3952467F612ACCADA508ABDFA75096969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:60:a0:ae:06:0d:4b:d1:2a:10:00:28:9a:
38:54:d9:58:29:36:be:c2:34:be:60:9b:7d:f5:87:
6b:9d:c2:d3:1e:b3:99:81:02:18:04:89:56:e0:56:
64:73:cf:49:83:6a:54:05:86:ee:8a:23:3d:fe:89:
70:a0:3f:01:0e:16:05:5b:3c:52:f6:26:cf:e8:c5:
d0:62:b7:3e:24:c7:e0:74:1c:d1:8f:7b:1d:b5:56:
bd:56:50:38:98:ec:87:0c:6d:35:9e:5b:50:12:cf:
8e:9a:0e:50:e8:d9:f7:93:d9:af:34:1e:da:e3:83:
8b:35:08:fc:90:88:6c:5a:cb:44:96:11:8d:11:e3:
3f:c1:c9:28:fb:2b:c7:87:57:04:9e:4d:f7:9d:59:
f2:e1:a2:fd:df:d6:8a:75:0f:aa:66:43:df:5b:24:
3f:c1:8d:a8:1d:3d:7f:d0:cc:d4:0c:a6:61:1c:2d:
e2:3b:ca:55:e9:e2:c7:33:36:12:14:66:a3:11:9c:
44:6d:37:5f:8e:0a:e3:08:47:38:ab:97:19:e4:e1:
8c:9f:cc:c8:53:10:71:57:71:29:52:dc:fe:85:f6:
59:88:98:ee:8f:06:a4:c7:6c:40:40:40:31:8a:af:
fb:ee:16:7b:fc:b3:66:9b:2a:f6:67:e9:c4:50:58:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:ED:B3:95:24:67:F6:12:AC:CA:DA:50:8A:BD:FA:75:09:69:69
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/jOPts5UkZ_YSrMraUIq9-nUJaWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:15:8d:63:c1:4b:96:e9:1e:ee:a6:96:c2:2c:80:71:7d:82:
35:f6:4f:e6:12:cd:31:e5:25:3f:49:44:58:ae:de:97:d6:48:
e0:0d:91:7c:93:c5:2d:62:bf:98:d2:8a:76:b2:b1:42:4c:a9:
74:44:0d:5e:11:54:a0:98:24:5a:7f:eb:53:30:bd:a7:fc:54:
b7:79:3e:b1:e9:5e:fb:1d:c7:1b:72:bf:b1:bf:05:67:42:64:
15:47:a2:d5:8f:14:f1:e9:4c:3b:bb:9e:e1:aa:e5:6f:ef:32:
06:c4:7b:fd:48:61:a0:51:b8:72:75:53:96:e6:3b:85:44:6b:
8d:58:0b:2d:61:38:ab:37:ae:85:53:66:5a:30:69:e8:d3:ae:
80:05:d4:ed:17:92:95:2d:59:78:6d:c2:de:d2:3f:9d:5c:48:
4c:23:8f:c4:ae:33:a3:1a:98:ff:ed:44:46:92:06:8e:af:d3:
24:e5:26:79:e3:a5:73:ea:09:5e:30:6e:6e:a4:2c:e7:92:ca:
8a:9b:ae:99:77:ff:b0:9b:ca:42:d7:23:56:63:78:9f:a5:d0:
d6:3f:8e:2b:61:48:c2:ee:43:45:6a:72:1e:a6:9e:2c:71:6d:
13:d7:c5:da:c7:a3:6a:53:22:f5:bc:eb:85:9a:be:ca:db:c0:
3c:5b:28:53
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzA4
NTE1QzhCOUZCNTNGOENFRDQ4OUQyMTM0RjY0NDFGRkFEQTA1RTAeFw0yNDEyMDUw
NDI2MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDRTNFREIzOTUyNDY3
RjYxMkFDQ0FEQTUwOEFCREZBNzUwOTY5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/B2CgrgYNS9EqEAAomjhU2VgpNr7CNL5gm331h2udwtMes5mB
AhgEiVbgVmRzz0mDalQFhu6KIz3+iXCgPwEOFgVbPFL2Js/oxdBitz4kx+B0HNGP
ex21Vr1WUDiY7IcMbTWeW1ASz46aDlDo2feT2a80Htrjg4s1CPyQiGxay0SWEY0R
4z/BySj7K8eHVwSeTfedWfLhov3f1op1D6pmQ99bJD/BjagdPX/QzNQMpmEcLeI7
ylXp4sczNhIUZqMRnERtN1+OCuMIRzirlxnk4YyfzMhTEHFXcSlS3P6F9lmImO6P
BqTHbEBAQDGKr/vuFnv8s2abKvZn6cRQWELbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjOPts5UkZ/YSrMraUIq9+nUJaWkwHwYDVR0jBBgwFoAUwIUVyLn7U/jO1InS
E09kQf+toF4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElEQy93
SVVWeUxuN1Vfak8xSW5TRTA5a1FmLXRvRjQuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dJVVZ5TG43VV9qTzFJblNFMDlrUWYtdG9GNC5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJREMvak9QdHM1VWtaX1lTck1yYVVJcTkt
blVKYVdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdjWDAN
BgkqhkiG9w0BAQsFAAOCAQEAvRWNY8FLluke7qaWwiyAcX2CNfZP5hLNMeUlP0lE
WK7el9ZI4A2RfJPFLWK/mNKKdrKxQkypdEQNXhFUoJgkWn/rUzC9p/xUt3k+sele
+x3HG3K/sb8FZ0JkFUei1Y8U8elMO7ue4arlb+8yBsR7/UhhoFG4cnVTluY7hURr
jVgLLWE4qzeuhVNmWjBp6NOugAXU7ReSlS1ZeG3C3tI/nVxITCOPxK4zoxqY/+1E
RpIGjq/TJOUmeeOlc+oJXjBubqQs55LKipuumXf/sJvKQtcjVmN4n6XQ1j+OK2FI
wu5DRWpyHqaeLHFtE9fF2sejalMi9bzrhZq+ytvAPFsoUw==
-----END CERTIFICATE-----
Generated at Mon May 19 07:08:19 2025 by rpki-client