Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa
File: 1kR-yITaHu34J2DHalWbP_GwEYg.roa (raw, json)
Hash identifier: dp0sktjUEd0VuoBeAPISN0c/87ECwrm7CxluZ86ITEI=
Subject key identifier: D6:44:7E:C8:84:DA:1E:ED:F8:27:60:C7:6A:55:9B:3F:F1:B0:11:88
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12AF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa
Signing time: Mon 10 Feb 2025 14:15:08 +0000
ROA not before: Mon 10 Feb 2025 14:15:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.5.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4783 (0x12af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6447EC884DA1EEDF82760C76A559B3FF1B01188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:24:e0:89:52:8e:b5:09:24:90:bd:11:ab:
24:5a:d5:db:54:b7:92:ba:09:a4:d4:ff:41:1e:54:
dd:1d:05:3b:a3:95:bc:38:f2:13:2c:5e:ee:34:db:
46:55:f0:23:d3:0b:ef:62:d5:b8:94:08:92:f1:f8:
da:3f:2c:21:50:ac:16:3e:93:11:93:bd:eb:f0:a4:
81:a1:87:47:7d:3a:35:4d:4a:03:eb:34:3b:99:93:
0f:16:44:91:b1:53:4b:9d:c6:5b:fe:f6:41:d9:14:
ec:7a:8f:31:e9:a7:19:c1:68:b1:32:39:7a:3a:40:
2f:d9:fd:a0:a9:a6:6a:27:de:29:8b:12:a3:98:60:
bf:67:a3:0b:0b:1c:d5:7c:0f:cf:1e:83:b5:70:f9:
4b:8c:11:83:59:1f:0e:bb:f9:54:38:d1:e5:72:e1:
f3:2c:35:ac:64:f4:06:f6:bf:21:7d:22:01:6c:9f:
37:a6:2b:84:96:24:45:37:51:12:05:70:be:91:a3:
cd:c5:05:45:8f:e0:ff:b6:f9:22:dd:e7:69:f8:18:
14:cd:9d:5f:a9:c8:33:77:57:62:73:9d:0b:a4:dc:
9f:c5:35:ef:a5:10:83:ac:c1:8c:94:82:fb:10:fe:
5a:9b:56:fb:e0:20:52:35:a0:12:3d:c6:5b:15:b5:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:44:7E:C8:84:DA:1E:ED:F8:27:60:C7:6A:55:9B:3F:F1:B0:11:88
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1kR-yITaHu34J2DHalWbP_GwEYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.100.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:57:76:f2:14:67:a2:ce:55:6c:78:4f:05:19:24:f6:9b:dc:
d7:c2:a3:f9:e1:27:df:a4:65:16:39:7a:f0:ec:3c:7a:3f:e6:
9e:31:43:70:e9:d0:66:e9:af:a5:06:50:c2:b5:2b:21:3d:9a:
42:ec:d4:c7:13:8b:b8:99:aa:1e:fd:58:54:77:48:d7:3f:49:
0c:01:33:88:b7:e4:62:85:e5:b7:f6:a8:b2:ef:7c:f2:62:6f:
9a:31:e2:77:82:58:6a:a8:0b:70:0d:2f:77:b2:9e:1e:41:f2:
cb:db:51:ad:09:52:8f:09:d0:62:c6:d8:8d:91:d8:d4:a9:67:
54:48:00:a5:b1:20:07:1a:52:a5:e7:d3:38:60:8c:ef:38:d5:
e5:70:68:dc:49:ab:c3:3c:07:d3:bb:97:ec:4d:f9:eb:c3:f8:
ff:c1:b9:28:c1:2a:e2:9f:19:d4:b6:f0:c8:de:c3:c9:1d:8e:
cc:a6:a8:97:7e:e3:d1:90:bf:25:90:24:a6:ce:6f:99:13:08:
d7:d4:c1:0b:a3:12:6f:58:d4:e6:39:72:71:7c:8b:c3:d6:3a:
ef:28:35:73:ac:ce:b2:7a:a4:06:5e:de:f7:1e:5a:27:54:0c:
41:ac:1d:a3:bc:73:75:e2:cd:68:30:3e:17:9f:d1:63:f9:85:
a2:b6:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:08 2025 by rpki-client