Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/5uVsHL2J7UBsIVYCXwXIZAmQu9Y.roa
File: 5uVsHL2J7UBsIVYCXwXIZAmQu9Y.roa (raw, json)
Hash identifier: qN8B/sZvnZ+LbrQNmeixXSdMga4F2TUKQEn5znOi+Mg=
Subject key identifier: E6:E5:6C:1C:BD:89:ED:40:6C:21:56:02:5F:05:C8:64:09:90:BB:D6
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CBF
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/5uVsHL2J7UBsIVYCXwXIZAmQu9Y.roa
Signing time: Wed 04 Dec 2024 22:26:16 +0000
ROA not before: Wed 04 Dec 2024 22:26:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 22:26:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6E56C1CBD89ED406C2156025F05C8640990BBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:5b:03:bc:9d:85:2d:a9:4e:a8:9c:8d:c3:
73:e4:0e:b7:9b:10:db:dc:c5:29:cf:f6:db:c8:ff:
f4:37:dd:fb:3c:c2:27:2a:2c:ea:85:48:3b:40:7c:
82:3a:8e:73:89:dd:1c:91:b7:c7:8f:11:c4:35:45:
54:65:08:ee:f7:01:59:cf:d3:2e:4b:6b:c2:9a:b2:
4b:fb:ff:9a:de:58:fb:75:11:cb:df:7a:58:b2:24:
24:0b:38:eb:fa:18:5f:72:1a:21:ef:71:36:5d:b0:
bf:4b:af:9b:a9:95:36:bb:91:31:d6:01:2a:27:0f:
29:7c:09:c7:ea:f6:c9:c1:71:5d:6c:b7:31:bf:18:
9e:01:be:10:dd:95:63:fa:e7:c2:54:a3:e1:7a:e3:
c2:66:21:cf:9b:07:c5:9b:1c:00:41:09:eb:b2:0a:
68:92:da:e3:d0:82:66:05:e5:6e:ed:02:34:18:51:
79:3d:64:e6:ee:6c:4a:bc:10:f6:7f:ce:b1:5e:a5:
8e:08:c7:f6:b7:b6:1f:c8:37:66:21:e0:f5:c9:4d:
de:f0:2c:04:75:39:75:e7:c4:c9:ce:14:96:2a:bb:
be:1f:8b:96:c6:a4:06:61:48:4d:2e:50:0b:11:fc:
00:64:59:e4:ef:ce:65:42:eb:a8:27:b9:be:25:68:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:6C:1C:BD:89:ED:40:6C:21:56:02:5F:05:C8:64:09:90:BB:D6
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/5uVsHL2J7UBsIVYCXwXIZAmQu9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
65:48:a8:a3:e3:15:20:80:2c:08:95:3f:81:4c:fe:82:41:a4:
6e:14:54:fe:f0:02:c2:b4:46:88:ca:b5:32:3e:18:71:12:49:
6a:7a:0c:3a:fe:2a:3c:04:71:ff:23:a7:4e:24:0a:2c:c1:4d:
63:99:65:a7:b1:9c:22:14:eb:1e:c0:9d:16:b3:c5:53:08:27:
ce:53:00:a2:43:25:9e:ae:bd:94:c7:4f:c7:ea:30:3c:75:a7:
f9:1d:e5:35:6c:9a:49:e1:d2:d2:0c:f3:24:75:d2:48:a1:0c:
c5:89:25:58:f6:1f:df:ca:a6:81:b5:7d:8e:8e:f3:0f:ad:3f:
b2:32:25:94:2d:52:d9:30:63:55:08:e7:01:01:fd:0b:a8:38:
f3:df:17:e7:4c:72:42:0a:11:9b:f6:6a:f8:4e:81:f3:97:3d:
3d:a3:06:29:91:7f:7f:30:ee:fd:da:68:37:f8:5a:28:13:88:
a9:18:06:a8:02:5b:5c:a9:2e:9c:85:d2:95:f0:34:02:cb:54:
03:85:2c:57:b3:a4:98:b2:1a:73:f9:eb:14:4d:53:09:53:c4:
75:10:b7:ec:a7:06:64:8f:c7:a3:9c:30:57:d9:31:22:74:08:
08:6c:54:44:cd:58:02:c0:29:0d:d3:21:f4:f3:d3:32:c4:01:
61:fb:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:14:04 2025 by rpki-client