Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa
File: C3_XjrbY3eZQ89fvuegKAf5JCAI.roa (raw, json)
Hash identifier: ttl0lgbAhc6alBKFZpJYvSsQaJwxBwdkEBjhViqGr3s=
Subject key identifier: 0B:7F:D7:8E:B6:D8:DD:E6:50:F3:D7:EF:B9:E8:0A:01:FE:49:08:02
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 089D
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa
Signing time: Mon 10 Feb 2025 14:11:51 +0000
ROA not before: Mon 10 Feb 2025 14:11:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7483
IP address blocks: 103.148.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Feb 10 14:11:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0B7FD78EB6D8DDE650F3D7EFB9E80A01FE490802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:b9:19:d7:1e:dc:99:af:51:91:7b:a5:92:
af:d6:63:78:46:12:6c:bd:8e:68:2f:ba:7e:b8:9f:
38:57:c3:a9:ea:08:f4:c3:f1:03:21:53:ec:f5:fd:
3e:00:4b:62:b9:15:de:d2:95:d8:53:ef:38:81:b2:
e6:9d:94:ab:0b:81:70:ec:15:0e:06:04:eb:6f:6c:
3d:b5:38:db:50:93:99:56:b2:25:50:bf:f4:e3:2a:
03:cf:53:2b:fe:cf:75:37:8a:ab:7f:ea:6b:49:bb:
50:41:3c:95:88:f7:ae:fc:6e:5f:60:08:9f:f0:87:
e4:0e:37:92:19:fd:17:4e:da:e3:29:6f:bc:a9:3f:
03:33:b8:b0:77:7a:fa:52:26:24:dd:81:59:79:28:
c3:f9:fa:32:05:ae:1a:c6:24:59:7a:a3:99:e9:ac:
10:59:6e:8e:1d:2d:29:d2:e1:98:c9:a7:b6:5e:dc:
09:b1:7c:d5:3d:f8:3e:2a:11:02:07:42:94:06:43:
1b:49:c2:b5:9d:74:3f:4a:fe:b4:e6:38:6b:90:4e:
bf:82:4a:52:ee:bf:75:cb:9f:15:ce:f3:81:e8:a4:
f9:fe:b2:f9:73:de:57:3f:c0:ac:c6:51:64:0e:4d:
40:14:03:02:39:5c:fd:d0:28:78:54:cc:84:f7:8a:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7F:D7:8E:B6:D8:DD:E6:50:F3:D7:EF:B9:E8:0A:01:FE:49:08:02
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/C3_XjrbY3eZQ89fvuegKAf5JCAI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.146.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:0f:53:79:e2:a8:d8:10:13:c7:28:25:ba:56:47:10:c8:01:
01:47:9e:9f:31:ba:39:53:fa:96:cf:3a:47:8b:17:0b:73:08:
16:c4:df:31:6a:97:4e:a7:a3:ce:ff:2d:ad:65:69:a6:11:0b:
0d:27:f9:d6:0c:c5:51:09:67:49:5a:a7:97:78:59:db:03:a7:
24:e0:ae:9b:ba:ac:05:86:82:8c:ef:52:8f:a1:1f:13:a0:7e:
a8:68:91:76:05:74:08:86:eb:e2:6c:e6:9e:82:b0:cd:c1:01:
c8:4c:0d:32:63:e7:86:21:7d:77:09:90:60:60:4f:be:66:c8:
e1:af:7d:30:2c:7a:b1:1b:2e:e6:e0:01:57:94:d1:a4:ad:96:
b2:3a:4e:b2:d1:59:46:42:72:b7:0c:b7:6d:66:c8:6a:65:42:
54:b8:48:3a:59:70:71:26:6e:92:d6:7a:7d:41:dc:94:00:25:
0d:85:04:49:76:b1:a0:e8:ea:a8:88:e7:b3:ec:4a:a5:1c:49:
cb:fc:56:28:a8:27:20:03:b4:54:1b:bc:fb:9a:64:00:5f:a3:
92:d5:7d:4e:6e:6e:02:dc:e6:9b:b7:f7:8a:43:ee:01:49:80:
c3:85:c4:12:95:18:97:26:52:6e:a4:76:99:59:0f:ba:58:59:
7b:b4:ac:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:48:09 2025 by rpki-client