Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa
File: 9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa (raw, json)
Hash identifier: OpIxSsN+rPTudlFjDz05ES1dtcc55jbmsiOOCuEfAAI=
Subject key identifier: F7:39:46:F4:38:66:D7:98:1E:D8:19:F0:98:A7:D7:E2:FE:E4:0B:EC
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 0763
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa
Signing time: Mon 10 Feb 2025 13:49:11 +0000
ROA not before: Mon 10 Feb 2025 13:49:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17415
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Feb 10 13:49:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F73946F43866D7981ED819F098A7D7E2FEE40BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:6b:82:ee:92:42:3a:91:7f:eb:f8:18:79:
a4:19:1f:d7:f8:5d:f9:db:46:bb:8f:5b:c5:45:9f:
db:c9:9e:6d:db:12:f9:0b:cb:ee:e2:c0:7f:a2:81:
04:e6:0d:99:14:53:ce:8d:29:79:b6:77:fe:27:f1:
e4:2d:b1:11:18:cd:67:aa:95:84:65:d5:8b:53:a3:
d8:42:8f:c0:ea:78:04:85:55:1e:ad:4c:4d:f2:60:
38:3b:5d:73:a8:98:d0:c8:ff:17:65:1a:14:6f:6f:
dd:6d:f1:16:58:49:03:1b:92:57:8d:a4:d4:e8:ac:
79:b6:0a:2d:58:f5:13:91:a9:98:f8:e6:41:64:3b:
47:18:e7:c6:e4:eb:96:2d:a7:39:62:29:25:45:91:
a7:29:43:49:76:f1:2c:5d:88:ca:66:9c:42:b4:f7:
99:0b:8e:9f:4b:dd:e3:1d:d3:14:c4:e4:67:13:8f:
de:01:9c:6a:58:2b:43:a7:e4:75:53:5b:b6:03:a3:
4d:d7:09:05:9f:fe:c9:f2:6c:a2:af:ed:72:2f:3d:
1f:50:4f:52:23:e9:fc:4a:2d:60:a4:5e:be:41:f4:
b8:f1:27:c2:90:dd:7d:e1:b0:6b:02:ce:fe:77:1a:
99:e9:47:8f:30:6f:98:0d:fd:c9:55:ca:80:a4:c3:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:46:F4:38:66:D7:98:1E:D8:19:F0:98:A7:D7:E2:FE:E4:0B:EC
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3b:55:42:f1:94:5d:37:43:7b:60:45:31:5c:1d:87:48:10:
6e:39:ca:a1:2e:ba:9d:ef:e3:70:19:15:a6:9d:40:a9:89:5b:
f9:2b:6c:b2:88:30:b0:d4:c0:e4:e5:4c:12:5b:db:60:f9:5a:
17:9f:24:ef:e5:5f:57:3e:1c:c4:4f:02:f1:fc:37:8d:26:4b:
37:d8:62:87:b2:f2:46:06:69:73:c6:2e:89:56:d4:79:09:8b:
3d:6a:cb:60:32:12:12:a6:c4:2e:de:57:c4:3a:b8:6d:ad:a6:
a0:da:c5:b6:28:29:b2:54:5a:eb:bc:ba:a0:a0:32:7a:a4:a1:
0c:17:d3:65:91:53:21:e2:9e:f4:df:14:df:2f:79:93:e3:85:
aa:2b:fa:fc:a0:99:b3:0f:7c:87:17:a3:1d:ef:b8:c4:6b:c3:
37:a6:0c:06:3d:71:02:cb:ac:93:fc:bc:b7:72:8f:83:f6:be:
24:f0:49:e4:30:d4:fd:99:65:8a:70:a7:ae:8b:d0:dc:d8:f2:
aa:0f:e9:48:cc:08:5d:bc:6e:e1:9e:dd:c7:e8:ce:3f:2b:6d:
ba:17:bd:4b:c4:52:40:55:b1:a2:2a:77:da:91:e0:d4:23:96:
7f:cf:b0:af:66:60:27:61:fb:9c:b0:df:a0:7e:11:c0:50:ee:
3b:2c:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 19:21:03 2025 by rpki-client