Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/LwpzGQ0wGrRrP7V3yQ9hiqio-CM.roa
File: LwpzGQ0wGrRrP7V3yQ9hiqio-CM.roa (raw, json)
Hash identifier: 2Uv+BeloYqJaCAQp0/j2F+u3zWxznH+mbysSf6L+HJM=
Subject key identifier: 2F:0A:73:19:0D:30:1A:B4:6B:3F:B5:77:C9:0F:61:8A:A8:A8:F8:23
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C63
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/LwpzGQ0wGrRrP7V3yQ9hiqio-CM.roa
Signing time: Tue 03 Dec 2024 23:26:03 +0000
ROA not before: Tue 03 Dec 2024 23:26:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 3 23:26:03 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2F0A73190D301AB46B3FB577C90F618AA8A8F823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:29:0a:0b:d3:bf:ba:10:22:78:fa:d6:74:
30:e2:f7:2d:eb:c6:08:3f:d5:f7:33:fd:a0:04:7b:
cc:25:80:0b:50:c9:49:32:af:73:3f:4b:c7:fa:ef:
0e:ab:15:12:77:07:8a:ec:46:32:34:f5:4b:83:58:
49:4a:4c:0b:e3:80:ae:9f:ab:69:4b:03:16:47:f6:
f1:82:b2:f2:93:9a:c0:1e:df:6d:6d:3e:3b:30:e8:
98:30:c5:9a:e1:da:c0:a0:95:5e:a3:67:b6:15:ec:
17:28:45:e9:c9:22:90:c7:86:06:74:a7:1c:aa:62:
58:39:64:cc:85:93:4a:e6:f6:2f:e3:fc:bb:6b:1f:
f6:6b:56:79:a6:00:bc:12:3b:d3:51:fd:54:29:f5:
da:ac:55:bb:69:5a:e9:27:e7:c9:a3:fe:5b:9f:43:
3d:bb:e9:ff:43:60:98:00:e5:58:96:d4:1d:8d:74:
c3:25:ed:d4:0e:fa:a9:fd:05:fc:3e:57:ed:9c:77:
18:ed:8c:0a:79:74:f1:e7:38:11:09:b6:8d:92:18:
32:08:33:2f:08:4b:85:73:2b:cd:46:38:78:e8:5c:
53:72:ea:41:e5:79:b1:97:97:77:a7:3c:4e:22:05:
b6:19:ce:9c:ce:a9:45:3c:6b:15:b6:7b:dc:96:b2:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0A:73:19:0D:30:1A:B4:6B:3F:B5:77:C9:0F:61:8A:A8:A8:F8:23
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/LwpzGQ0wGrRrP7V3yQ9hiqio-CM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:74:9b:1a:4f:ed:66:b8:e6:62:e5:fa:76:a1:3b:35:3b:f8:
c9:4d:0b:72:3a:9f:da:9e:24:8c:c7:d5:d9:97:47:01:e0:70:
80:9c:c9:c7:40:b2:b7:35:9a:d9:f0:b4:a2:5b:24:72:79:0c:
0a:6f:0e:4b:f8:57:81:37:85:ee:eb:78:ab:76:8a:6e:69:b4:
2d:7f:3f:54:e2:41:8a:bb:31:07:b0:b4:b7:f0:f4:1a:1d:5f:
d3:30:65:84:4f:c0:61:e7:08:38:81:4a:4a:1d:be:3a:0d:00:
8c:81:45:5f:a2:2d:a2:11:c6:2b:5a:65:35:98:8e:67:4a:0e:
69:f7:d0:d5:ff:f4:60:b6:c0:e2:2b:19:42:43:60:a8:42:4a:
82:66:c1:71:5a:6b:5a:f3:f4:8d:64:66:fc:89:ff:f8:bb:0b:
f8:9f:35:d9:9d:1a:85:3a:a4:ee:b2:f3:95:bd:2c:fa:49:e6:
c8:b2:94:ab:87:43:67:91:28:65:57:ad:de:bf:06:52:38:d5:
1d:73:2b:2a:50:22:15:b3:fd:ba:a2:cb:1a:9a:30:e3:70:05:
96:13:07:7c:89:eb:89:6b:98:d5:6d:92:d5:8a:7d:93:93:9e:
8f:36:2a:0a:db:8f:b0:a3:1b:27:d2:b9:3b:32:47:f7:70:89:
81:85:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 15:14:27 2025 by rpki-client