Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa
File: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (raw, json)
Hash identifier: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg=
Subject key identifier: 72:60:4D:24:19:8E:91:5A:0F:47:15:6A:0B:DD:F6:78:49:3C:53:85
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0CB9
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa
Signing time: Mon 10 Feb 2025 13:59:34 +0000
ROA not before: Mon 10 Feb 2025 13:59:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131619
IP address blocks: 103.116.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3257 (0xcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Feb 10 13:59:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=72604D24198E915A0F47156A0BDDF678493C5385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:5d:48:01:cf:0b:d4:19:3f:71:da:ad:8f:
98:c5:5f:64:df:3d:50:72:8b:56:48:c9:22:52:cb:
97:e9:a3:b1:9f:7a:2f:d4:47:1e:de:37:14:44:e4:
28:98:56:b6:51:9f:e3:ff:2a:09:d9:ef:fb:5a:80:
3c:33:ec:2c:f2:82:7c:18:73:93:d8:6a:03:d1:50:
a4:db:dd:b6:9e:c9:c1:f1:e6:a6:ac:41:5a:70:9d:
4c:13:35:3b:fd:91:3a:c0:59:f8:2b:7c:6a:a0:6b:
41:5b:28:d1:fb:8d:a9:77:2b:eb:f4:b6:6d:06:0a:
3a:09:7d:75:53:a2:91:3b:fa:18:1d:99:88:d2:3d:
8d:d7:2b:fe:77:35:1a:70:97:cb:9e:38:16:39:37:
e8:21:61:87:fb:26:6b:1b:cd:b5:09:c7:92:9c:1f:
e4:91:1f:d1:c6:1c:88:a4:fc:61:89:18:1d:08:0c:
b2:ef:7a:9e:2d:20:cc:d2:31:67:b7:8c:ed:8f:a8:
09:e1:50:62:39:d8:d9:37:ec:1a:f1:63:d5:73:fa:
96:6f:74:d8:04:6a:5f:1e:d7:fa:6a:20:e4:73:ad:
1b:6a:f3:4d:03:48:6e:51:59:52:d4:66:33:2d:d5:
90:91:a8:15:2a:0d:ce:e5:71:b0:29:bc:fa:5d:82:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:4D:24:19:8E:91:5A:0F:47:15:6A:0B:DD:F6:78:49:3C:53:85
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.98.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6b:86:f9:db:f6:ab:f7:ea:b8:34:93:d7:71:dd:d4:62:96:
5e:c7:1b:f3:00:5c:52:6a:4f:0a:ec:64:fc:66:9b:b6:1f:7a:
99:25:e3:6e:80:ab:22:3e:b2:a2:26:86:61:24:e8:d0:04:45:
16:de:30:5d:ff:67:46:e7:86:5f:ba:63:cc:37:89:98:3d:8a:
80:a2:37:97:44:a9:1d:fb:80:ba:c5:59:c8:8c:4e:ef:71:ad:
32:1c:e3:09:a8:f2:fe:e4:5f:51:8f:85:90:13:6e:74:36:b9:
4c:cd:04:87:49:40:8a:c1:c6:ba:62:0f:b1:6b:2e:a6:3e:03:
92:a3:91:f9:cc:f5:56:9e:a1:c4:b8:ec:38:2b:cd:da:ad:34:
15:1d:86:3d:96:b9:7d:a4:05:38:be:4f:91:b3:04:9d:89:44:
6e:f9:4d:b7:52:51:15:dc:b1:9c:f8:12:14:89:61:3d:56:e0:
26:07:6e:36:4d:27:c3:a4:81:cb:1c:f0:bc:ff:49:40:53:6d:
e2:bb:ab:6c:e7:a5:8f:0f:f5:a7:09:6e:b4:d9:71:12:30:dc:
e3:ba:5c:ff:91:bc:20:bc:f0:23:3a:fe:87:c5:07:22:60:2b:
9c:56:8f:b0:ad:7e:b2:42:c5:8b:2f:19:83:41:d3:16:7c:e7:
47:36:0d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:37:08 2025 by rpki-client