Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/JztNl43WtOtEhx2MSpU7XXdJPsg.roa
File: JztNl43WtOtEhx2MSpU7XXdJPsg.roa (raw, json)
Hash identifier: osrbAunlhSduFeIWiH0Ov8TUtjV/ltMZeufzqs1BA+Y=
Subject key identifier: 27:3B:4D:97:8D:D6:B4:EB:44:87:1D:8C:4A:95:3B:5D:77:49:3E:C8
Certificate issuer: /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial: 0237
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/JztNl43WtOtEhx2MSpU7XXdJPsg.roa
Signing time: Mon 10 Feb 2025 14:15:34 +0000
ROA not before: Mon 10 Feb 2025 14:15:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 983
IP address blocks: 103.36.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Validity
Not Before: Feb 10 14:15:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=273B4D978DD6B4EB44871D8C4A953B5D77493EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:dd:96:b2:72:9c:97:45:a3:26:58:39:fe:
e9:ef:15:d4:a2:7a:f2:bf:15:af:f6:97:8f:40:0c:
ec:bf:82:3a:86:20:bb:96:f1:28:12:cc:6d:99:b6:
bb:97:e4:e7:32:f8:be:64:6a:a4:30:62:85:45:66:
4d:eb:cb:bc:b2:a3:95:53:f7:56:a0:4c:67:be:8c:
fc:ad:5c:4e:0a:1b:f7:40:d3:ab:82:46:90:34:34:
a3:99:af:6b:91:4e:e1:e2:96:9f:70:d5:05:71:d8:
e8:89:fe:80:1b:2e:6c:a1:e4:76:4d:d5:dd:5c:79:
e1:6e:be:04:2a:0d:48:bb:4c:1f:5a:16:3e:f2:87:
1f:c5:51:56:76:f6:45:fd:ac:73:ef:76:13:96:7c:
bc:20:7a:cd:0a:bb:f7:d2:20:86:c3:78:ba:48:3d:
fe:c7:a6:fd:34:fa:c2:49:82:fb:7a:42:1f:77:0c:
10:ce:0a:f3:fa:7f:d6:b9:8f:71:7f:58:a3:b8:78:
3d:ca:ab:d2:25:5d:af:13:b2:0c:52:54:41:36:f9:
46:13:24:ec:2c:5b:f8:74:ba:d1:04:90:65:42:be:
0d:98:74:ad:11:f9:46:49:3d:06:c7:37:be:a3:0c:
1c:63:1b:af:1b:3f:96:cc:f9:71:6a:ca:5e:e5:e9:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:4D:97:8D:D6:B4:EB:44:87:1D:8C:4A:95:3B:5D:77:49:3E:C8
X509v3 Authority Key Identifier:
keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/JztNl43WtOtEhx2MSpU7XXdJPsg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.24.0/23
Signature Algorithm: sha256WithRSAEncryption
77:02:17:30:49:9d:00:26:6f:51:6c:1c:85:7e:37:42:c8:b6:
cb:d6:91:bb:a5:50:8d:58:6f:cb:b8:e9:6a:27:1d:10:27:1f:
4f:45:b7:b1:70:2f:ec:eb:61:51:a5:95:a0:d8:e6:11:d2:ed:
5b:56:dc:10:59:f0:22:77:5a:65:3c:5c:20:78:50:3c:e2:14:
42:e0:de:a5:01:35:dd:74:9d:11:e8:a7:31:90:16:6a:fd:6e:
00:3a:9b:bd:c9:15:b7:1f:d5:96:68:ad:49:5a:e7:1a:d4:c8:
66:0f:b4:cf:cd:0c:31:21:8f:3a:29:6c:94:29:b1:8b:d2:ca:
ce:84:0e:61:50:49:48:ee:5e:54:26:21:20:f3:03:9d:1f:c0:
ea:5a:77:13:d6:f4:24:f6:a2:8e:eb:c4:03:65:f6:a5:32:d5:
32:c2:c8:3e:f2:db:a5:8a:96:94:24:25:09:b4:d4:f3:51:74:
12:98:ac:a0:3a:32:5d:1e:ec:90:00:1d:fb:3c:b8:d3:a2:92:
9a:a1:fd:9d:fa:4b:cf:be:ab:f6:99:e8:54:aa:43:c7:d6:05:
62:d8:72:45:9c:43:6f:14:9f:f9:35:7e:cb:66:ff:ac:af:20:
a5:98:05:be:22:72:c6:d4:e9:db:67:b5:7b:a5:96:46:a1:8a:
e3:df:fc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:30 2025 by rpki-client