Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa
File: ieuknTk_x95aDPjV2I9kOuk_1u4.roa (raw, json)
Hash identifier: s32n/uEah3qtZBNeWXYybbMMbVgKU0qJLJnOoEVdh7I=
Subject key identifier: 89:EB:A4:9D:39:3F:C7:DE:5A:0C:F8:D5:D8:8F:64:3A:E9:3F:D6:EE
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 05D8
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa
Signing time: Mon 10 Feb 2025 13:57:52 +0000
ROA not before: Mon 10 Feb 2025 13:57:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 41255
IP address blocks: 103.156.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Feb 10 13:57:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=89EBA49D393FC7DE5A0CF8D5D88F643AE93FD6EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:53:6e:dc:da:91:64:b4:7f:3e:5e:c9:9c:
69:84:44:ee:ec:94:dd:ed:df:a0:2a:9e:aa:ec:78:
b0:3e:36:f0:06:36:2d:3a:dc:1d:dc:c7:72:dd:a8:
0b:1e:79:c4:48:11:de:3c:e6:09:1a:d7:99:ef:3d:
e4:66:48:d4:77:61:f1:24:d1:8b:9c:0e:08:fe:5e:
0f:24:68:7d:15:e9:e7:3a:78:29:1e:04:12:fb:f8:
4f:54:fd:d3:e1:a9:37:e4:25:58:47:1a:ae:d9:40:
ae:2f:bf:df:f8:78:7c:e2:1c:84:10:1d:c2:74:ec:
73:e3:80:b9:11:d4:04:b8:d8:77:9b:86:87:c6:27:
4c:84:93:f7:e1:6c:9e:43:b1:0e:67:fd:81:d7:39:
57:f4:d7:49:07:6d:94:e6:4d:b0:62:46:bd:dd:d7:
06:b7:15:fe:26:a6:96:5a:67:86:e2:00:ad:b1:44:
49:6d:1f:a3:18:3d:d4:8c:81:71:90:27:04:ee:5e:
75:63:32:75:4c:05:36:75:40:20:fb:37:7b:c0:5c:
a1:b6:96:2d:60:41:57:86:d9:84:3f:46:97:a2:61:
3c:6d:6f:af:ca:d3:6e:22:00:e8:d9:64:1c:00:fe:
60:a8:4c:84:f0:4f:52:33:5b:44:f5:18:18:8b:aa:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:A4:9D:39:3F:C7:DE:5A:0C:F8:D5:D8:8F:64:3A:E9:3F:D6:EE
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/ieuknTk_x95aDPjV2I9kOuk_1u4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/24
Signature Algorithm: sha256WithRSAEncryption
87:cf:f5:1a:6b:5b:83:2b:dc:6d:25:07:da:11:af:76:7b:30:
67:5f:45:62:16:29:de:ad:ba:13:3c:11:e7:8e:ee:91:93:36:
7b:21:98:39:5e:6f:c5:23:94:da:f9:fb:f5:3a:be:f4:a1:b4:
0e:af:4b:8f:71:a8:de:99:3a:8b:4e:12:e4:3e:5e:48:d1:b5:
35:e4:f6:e7:58:00:fb:83:c1:5a:40:09:20:9d:7f:c7:56:21:
ee:2b:5a:c2:e3:24:96:94:ac:52:5b:3d:bf:8c:4e:d2:d0:d3:
df:19:14:e2:12:df:f9:3b:0f:44:b0:5f:9c:bb:fe:ad:9b:bc:
b2:01:4c:8f:4e:90:90:6b:c4:9a:62:75:66:94:cb:24:ab:63:
64:a1:86:2d:c9:a7:85:bc:35:a8:7f:36:d3:68:36:e9:04:64:
76:bd:44:19:ec:b3:8a:51:2b:a0:81:34:d6:fe:27:4e:71:8f:
ad:65:bc:c3:a1:b1:d1:68:19:96:3a:f8:1d:93:f3:a5:7b:55:
e8:a3:cc:5d:b8:63:57:68:be:06:c2:9b:1e:ac:ea:2a:6d:61:
09:e8:b2:be:3a:8c:90:18:0e:5c:3f:2b:61:1d:02:c8:e3:d3:
71:24:57:aa:1a:95:92:64:c6:fe:59:a2:a8:85:cc:f3:ef:ea:
5f:0e:d9:d9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTAyMTAx
MzU3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg5RUJBNDlEMzkzRkM3
REU1QTBDRjhENUQ4OEY2NDNBRTkzRkQ2RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCLFNu3NqRZLR/Pl7JnGmERO7slN3t36AqnqrseLA+NvAGNi06
3B3cx3LdqAseecRIEd485gka15nvPeRmSNR3YfEk0YucDgj+Xg8kaH0V6ec6eCke
BBL7+E9U/dPhqTfkJVhHGq7ZQK4vv9/4eHziHIQQHcJ07HPjgLkR1AS42HebhofG
J0yEk/fhbJ5DsQ5n/YHXOVf010kHbZTmTbBiRr3d1wa3Ff4mppZaZ4biAK2xRElt
H6MYPdSMgXGQJwTuXnVjMnVMBTZ1QCD7N3vAXKG2li1gQVeG2YQ/RpeiYTxtb6/K
024iAOjZZBwA/mCoTITwT1IzW0T1GBiLqt/NAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUieuknTk/x95aDPjV2I9kOuk/1u4wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvaWV1a25Ua194OTVhRFBq
VjJJOWtPdWtfMXU0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGecuDANBgkqhkiG9w0BAQsFAAOCAQEAh8/1GmtbgyvcbSUH2hGvdnswZ19FYhYp
3q26EzwR547ukZM2eyGYOV5vxSOU2vn79Tq+9KG0Dq9Lj3Go3pk6i04S5D5eSNG1
NeT251gA+4PBWkAJIJ1/x1Yh7itawuMklpSsUls9v4xO0tDT3xkU4hLf+TsPRLBf
nLv+rZu8sgFMj06QkGvEmmJ1ZpTLJKtjZKGGLcmnhbw1qH8202g26QRkdr1EGeyz
ilEroIE01v4nTnGPrWW8w6Gx0WgZljr4HZPzpXtV6KPMXbhjV2i+BsKbHqzqKm1h
CeiyvjqMkBgOXD8rYR0CyOPTcSRXqhqVkmTG/lmiqIXM8+/qXw7Z2Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:13:12 2025 by rpki-client