Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa
File: RxLNDBhbmRFtSAhqDIq62vUvecY.roa (raw, json)
Hash identifier: y1UGQ4p73UkndrTtaA5Sek64GoD2Qj8ypy20ePPodnw=
Subject key identifier: 47:12:CD:0C:18:5B:99:11:6D:48:08:6A:0C:8A:BA:DA:F5:2F:79:C6
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 135B
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa
Signing time: Mon 10 Feb 2025 14:03:39 +0000
ROA not before: Mon 10 Feb 2025 14:03:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 14618
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4955 (0x135b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Feb 10 14:03:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4712CD0C185B99116D48086A0C8ABADAF52F79C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:cf:8d:bb:11:9f:c7:05:77:2b:57:45:44:
f4:28:35:8d:75:78:24:81:1f:a2:db:cc:4f:dc:bd:
3a:40:e9:04:a8:ee:4a:d9:b7:56:9c:1e:4b:19:7b:
a1:7c:10:7e:bf:d1:65:1d:38:70:1e:e5:ea:34:d6:
78:1a:9d:7a:87:d9:77:b8:4b:27:c2:1f:42:74:fa:
c5:ef:60:19:2d:07:ff:22:88:0b:4c:f6:f0:73:0c:
11:38:14:af:1c:f0:95:f5:01:30:68:fc:ff:5c:ee:
c6:48:d1:3c:9a:3a:69:96:1b:5d:60:f8:38:64:c8:
df:1f:32:81:10:8f:82:e7:98:08:fd:ef:7f:f4:24:
34:17:ef:55:4f:62:18:54:b6:22:9d:8c:df:65:98:
72:f4:9d:2a:e1:d6:5e:b3:0a:a3:56:cc:d7:b9:8e:
b6:6e:85:4c:b9:a5:e6:39:54:18:3f:2e:07:27:77:
c9:ad:31:68:ec:49:b7:80:f2:05:24:5f:d4:0d:6a:
29:30:77:88:9c:cc:86:c0:46:1c:d6:3b:c6:91:67:
f6:fe:a4:d9:60:43:8f:a3:6b:c8:63:8a:fb:11:04:
ed:3d:3b:c7:e7:c6:e9:01:35:58:9f:f9:86:e9:c7:
9f:d0:4d:23:9a:af:a0:ff:78:c2:59:a6:fc:4a:f7:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:12:CD:0C:18:5B:99:11:6D:48:08:6A:0C:8A:BA:DA:F5:2F:79:C6
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/RxLNDBhbmRFtSAhqDIq62vUvecY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fd:aa:46:bf:e1:e9:70:43:c6:d0:f3:79:52:fa:8c:49:7a:
47:50:b4:a3:2c:da:08:db:06:49:54:bd:8e:1f:66:e4:dd:ff:
06:14:24:fd:46:2f:36:ae:04:bc:6a:cf:f3:6a:a3:7e:25:7b:
d9:62:9c:01:0e:d8:84:a8:ba:5e:84:65:65:a2:2c:db:f2:af:
54:2d:f2:0d:8b:de:b7:d0:6c:ff:c7:46:a7:3a:6f:0f:7f:d8:
a0:41:30:15:ff:64:9d:e7:5a:9b:94:73:a2:f8:d0:02:31:9e:
53:96:e9:24:30:27:e9:9c:34:16:9f:21:35:cd:f8:19:95:03:
52:5d:9b:16:27:d1:50:fa:bb:aa:90:56:a2:d2:ef:a1:be:5c:
77:55:01:61:cb:f8:53:25:53:b8:e8:52:d9:cd:a6:84:94:50:
49:20:f1:fa:b1:1f:36:20:c7:8d:39:c9:d6:96:95:e2:78:58:
ba:43:1d:b3:2c:d7:26:d7:bd:ce:2a:c8:18:b4:ce:fe:f4:31:
9f:dc:2d:06:c3:a1:25:95:b9:86:b6:74:d3:33:90:74:07:eb:
d0:13:d8:d3:f3:f1:56:60:1b:4a:a8:06:e0:6a:79:b6:ad:92:
28:dd:88:07:0e:63:27:e6:f4:a9:f4:16:06:4e:fe:8c:ef:d9:
8a:40:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:28:45 2025 by rpki-client