Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/dxWD1OHq_2LI_5VSbdjlhNv4alM.roa
File: dxWD1OHq_2LI_5VSbdjlhNv4alM.roa (raw, json)
Hash identifier: kuu3ue/U8cB91qiFwZGA7cojKMjc+OmnNto1c4zCejA=
Subject key identifier: 77:15:83:D4:E1:EA:FF:62:C8:FF:95:52:6D:D8:E5:84:DB:F8:6A:53
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CAD
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/dxWD1OHq_2LI_5VSbdjlhNv4alM.roa
Signing time: Wed 04 Dec 2024 17:56:14 +0000
ROA not before: Wed 04 Dec 2024 17:56:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 17:56:14 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=771583D4E1EAFF62C8FF95526DD8E584DBF86A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:0d:b8:07:12:3a:15:68:b2:e5:0e:ee:9c:
84:3a:26:c4:b0:11:2b:c0:89:43:c1:a5:3f:80:bf:
58:7f:36:4e:c0:b3:3a:a8:65:32:f6:37:21:fe:ac:
0a:35:ca:30:00:50:1d:67:89:57:5d:d4:85:ef:eb:
74:e2:08:94:04:05:ea:46:9c:3d:df:24:c6:71:43:
56:08:f6:ae:f9:99:3a:60:b6:aa:0d:ac:80:ba:c8:
b4:37:96:c6:93:9e:8c:c4:f5:58:2a:0b:a5:50:c0:
4e:0b:24:68:62:6a:eb:d6:5d:e0:db:d7:2f:a1:ce:
24:37:64:6d:1c:d4:75:91:2e:a5:c5:69:6b:81:2c:
3b:48:a9:b8:40:94:19:e0:35:56:d7:37:be:99:a7:
d9:89:44:94:d4:f8:c8:62:a5:54:c9:1a:a1:28:05:
e9:c8:12:df:19:5a:d2:5a:80:a4:17:45:c8:cc:28:
18:bc:9e:4d:b0:6a:2f:cd:d2:6e:e5:c3:1e:0a:06:
28:5c:f7:21:04:00:a7:91:f8:b2:be:ca:82:09:6b:
84:da:26:5d:b3:1c:c9:bd:0d:69:16:e5:65:73:ad:
83:ca:bd:32:1d:97:ad:8a:f3:46:aa:7d:8b:e2:ee:
c5:01:02:03:54:23:96:4b:e6:06:d3:2d:eb:b0:1f:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:83:D4:E1:EA:FF:62:C8:FF:95:52:6D:D8:E5:84:DB:F8:6A:53
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/dxWD1OHq_2LI_5VSbdjlhNv4alM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
29:13:63:ce:d6:c4:07:b3:e3:cd:54:92:63:60:b3:b8:10:b9:
ea:6e:33:5c:62:9e:50:ed:00:04:cf:01:da:90:df:9c:df:71:
48:87:a1:48:f9:66:70:90:5c:a2:29:ff:92:46:98:3f:50:8e:
97:3f:e9:3a:96:aa:1c:a0:ba:f9:0b:62:98:96:70:d5:e3:cd:
30:73:1a:78:f1:24:ae:07:37:ff:34:2f:ee:d6:f5:3f:66:52:
e8:96:fd:67:64:70:57:f9:4d:f0:2e:51:05:7f:b9:a4:12:8a:
c3:5b:88:92:5a:4d:c5:92:99:1b:19:5f:36:e0:85:cd:3d:ca:
63:0d:27:9b:5d:27:9c:a8:94:bd:03:7d:82:25:15:2f:f7:c0:
eb:f0:48:8e:e8:47:0a:0d:01:34:9f:99:dd:f7:bc:d1:cd:d7:
40:0f:31:49:32:42:f6:36:40:e3:6d:c5:4c:1c:1c:03:ee:c5:
e8:3c:ea:2b:1b:91:16:b5:d1:f7:33:39:39:11:f1:54:75:15:
12:74:62:ce:65:8e:f6:fc:9e:88:c7:bc:39:1a:56:2a:3e:69:
87:86:24:07:4b:ac:13:61:b2:87:08:5f:75:61:c1:e1:a1:1f:
95:70:8c:fe:b9:7c:57:ba:cc:7a:b7:e4:43:ab:1c:24:27:22:
d9:b7:5d:57
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzA4
NTE1QzhCOUZCNTNGOENFRDQ4OUQyMTM0RjY0NDFGRkFEQTA1RTAeFw0yNDEyMDQx
NzU2MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3MTU4M0Q0RTFFQUZG
NjJDOEZGOTU1MjZERDhFNTg0REJGODZBNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSSg24BxI6FWiy5Q7unIQ6JsSwESvAiUPBpT+Av1h/Nk7Aszqo
ZTL2NyH+rAo1yjAAUB1niVdd1IXv63TiCJQEBepGnD3fJMZxQ1YI9q75mTpgtqoN
rIC6yLQ3lsaTnozE9VgqC6VQwE4LJGhiauvWXeDb1y+hziQ3ZG0c1HWRLqXFaWuB
LDtIqbhAlBngNVbXN76Zp9mJRJTU+MhipVTJGqEoBenIEt8ZWtJagKQXRcjMKBi8
nk2wai/N0m7lwx4KBihc9yEEAKeR+LK+yoIJa4TaJl2zHMm9DWkW5WVzrYPKvTId
l62K80aqfYvi7sUBAgNUI5ZL5gbTLeuwH1j5AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUdxWD1OHq/2LI/5VSbdjlhNv4alMwHwYDVR0jBBgwFoAUwIUVyLn7U/jO1InS
E09kQf+toF4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElEQy93
SVVWeUxuN1Vfak8xSW5TRTA5a1FmLXRvRjQuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dJVVZ5TG43VV9qTzFJblNFMDlrUWYtdG9GNC5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJREMvZHhXRDFPSHFfMkxJXzVWU2Jkamxo
TnY0YWxNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdjWDAN
BgkqhkiG9w0BAQsFAAOCAQEAKRNjztbEB7PjzVSSY2CzuBC56m4zXGKeUO0ABM8B
2pDfnN9xSIehSPlmcJBcoin/kkaYP1COlz/pOpaqHKC6+QtimJZw1ePNMHMaePEk
rgc3/zQv7tb1P2ZS6Jb9Z2RwV/lN8C5RBX+5pBKKw1uIklpNxZKZGxlfNuCFzT3K
Yw0nm10nnKiUvQN9giUVL/fA6/BIjuhHCg0BNJ+Z3fe80c3XQA8xSTJC9jZA423F
TBwcA+7F6DzqKxuRFrXR9zM5ORHxVHUVEnRizmWO9vyeiMe8ORpWKj5ph4YkB0us
E2GyhwhfdWHB4aEflXCM/rl8V7rMerfkQ6scJCci2bddVw==
-----END CERTIFICATE-----
Generated at Sun Jun 22 14:38:06 2025 by rpki-client