Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/sLIIEub1JauK9RCdoGn1NNsDLh8.roa
File: sLIIEub1JauK9RCdoGn1NNsDLh8.roa (raw, json)
Hash identifier: +QQSEkdv9JoWoMy/SEcmn1iImZ6mv0FNWQ9xhV1wW5U=
Subject key identifier: B0:B2:08:12:E6:F5:25:AB:8A:F5:10:9D:A0:69:F5:34:DB:03:2E:1F
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C75
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/sLIIEub1JauK9RCdoGn1NNsDLh8.roa
Signing time: Wed 04 Dec 2024 03:56:05 +0000
ROA not before: Wed 04 Dec 2024 03:56:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 03:56:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B0B20812E6F525AB8AF5109DA069F534DB032E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:84:14:5f:17:71:65:66:8f:b2:f0:f3:c5:
83:82:cd:7c:2b:ff:d0:9b:80:ac:fe:b3:d9:30:46:
3a:6c:30:20:33:b0:6d:10:11:b8:a5:95:81:c5:f3:
cb:c5:65:15:88:c2:fb:d5:79:60:91:64:0e:ab:65:
f4:c8:06:b8:38:4c:3e:7b:02:c0:51:51:35:53:26:
5d:0d:eb:a6:14:5b:12:da:28:10:66:30:3f:c6:2a:
7b:e6:c7:a9:b9:c9:13:fb:4a:5f:90:85:3c:dd:fd:
20:8e:aa:90:c8:65:43:c7:e7:e4:36:92:99:e3:ad:
6b:7c:6e:40:ae:aa:50:46:e4:07:e9:4b:d7:e2:5b:
f1:17:70:8d:88:42:28:43:1d:de:e0:9c:77:17:13:
df:e9:86:53:60:0c:92:ec:cf:ed:85:d3:3d:4d:9d:
3e:05:50:95:69:36:bc:59:a2:9c:0f:d2:ce:30:63:
ff:9d:ed:62:00:04:e4:fe:6a:5b:53:3a:34:fd:83:
73:6a:18:10:25:c1:56:0c:50:9c:e0:59:d5:94:c4:
e6:49:ef:82:7f:04:e5:a0:b8:d1:07:df:aa:b1:92:
bd:fb:11:18:d4:a6:ad:25:8c:36:35:40:57:a4:90:
95:68:16:ac:82:da:4b:e8:12:da:d1:d7:50:af:3d:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:08:12:E6:F5:25:AB:8A:F5:10:9D:A0:69:F5:34:DB:03:2E:1F
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/sLIIEub1JauK9RCdoGn1NNsDLh8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:60:15:e7:7a:2b:4a:20:74:89:10:d0:ea:28:a5:54:99:36:
a5:c8:de:fb:a9:6a:b7:4a:72:89:06:2b:dc:e9:02:77:73:a7:
c9:26:ba:70:df:a0:45:2e:bd:91:67:b9:d0:ac:bf:d6:4d:6a:
9c:5d:9c:7f:09:17:dc:8f:56:43:77:98:df:f0:ad:15:88:e3:
e2:ba:c5:ca:2e:85:ee:5c:f9:bf:ef:24:d0:17:22:cc:0a:5a:
38:09:62:05:3b:bf:de:84:f2:fd:46:3e:fa:87:b2:17:a4:13:
27:99:c0:58:b8:5d:11:44:20:31:36:17:d6:1f:21:a1:07:66:
5c:20:e8:ea:8d:78:44:c8:88:49:22:05:ce:d3:0e:42:16:95:
58:25:52:57:6f:24:69:b6:9e:5a:28:48:31:04:e4:df:96:46:
32:00:2d:55:a1:c7:2f:52:05:93:9e:82:d9:41:8c:94:e2:a9:
f2:f0:cc:e7:f5:90:12:b7:66:2b:9e:8e:bf:c4:ed:de:61:70:
46:f4:ad:35:cd:b1:d6:06:3c:9b:21:7c:5f:f9:f3:ac:69:a2:
ad:29:a9:35:e6:27:3c:4e:35:a8:de:aa:dd:6f:44:28:02:e1:
70:cd:18:aa:06:d2:02:8b:3e:45:b9:86:79:3f:e8:5e:34:6c:
b0:dc:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:22:51 2025 by rpki-client