Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/ATv3QjeRnCtk9Rqc0XEAM9IMC6Q.roa
File: ATv3QjeRnCtk9Rqc0XEAM9IMC6Q.roa (raw, json)
Hash identifier: 8ZQ30MpSI6d2PE+YZTGRBaBI/oUSxm0ZoWkPZ5X5Xck=
Subject key identifier: 01:3B:F7:42:37:91:9C:2B:64:F5:1A:9C:D1:71:00:33:D2:0C:0B:A4
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 1266
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/ATv3QjeRnCtk9Rqc0XEAM9IMC6Q.roa
Signing time: Mon 10 Feb 2025 14:21:15 +0000
ROA not before: Mon 10 Feb 2025 14:21:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63199
IP address blocks: 103.124.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4710 (0x1266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Feb 10 14:21:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=013BF74237919C2B64F51A9CD1710033D20C0BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:ca:0c:1f:f0:2d:1d:95:90:33:88:90:e8:
33:95:7b:a0:e4:e1:14:8a:bd:2d:8c:02:7c:34:2d:
83:12:a4:20:e1:87:64:cd:47:b2:c8:ed:50:e7:a0:
a8:ed:42:89:14:37:db:9c:c4:47:a6:5a:d9:1d:56:
59:99:cc:2c:11:67:f3:3a:02:a2:de:46:ca:ec:06:
d4:a1:fb:a6:85:9e:28:e6:ff:be:d9:2a:a5:e5:b4:
52:70:bd:ab:55:30:d3:10:2b:d7:e3:2b:5a:a3:82:
68:94:c2:2c:a0:b0:73:e5:ee:e7:f0:ba:65:2c:f2:
92:5e:04:92:ec:d7:06:c0:fa:90:45:4b:46:c0:f9:
ab:96:ed:ad:67:48:51:fd:d2:1d:1b:f8:30:48:53:
34:19:71:c0:c3:4b:e3:7d:de:dd:e2:fa:09:a2:c5:
da:55:f5:1a:fb:0b:1c:05:d4:8a:8e:29:90:8d:b4:
1a:ce:da:77:5a:dc:7c:5d:4e:15:f6:0d:04:43:73:
d6:42:ed:53:0a:d9:8a:61:3f:e8:56:22:fc:f8:e5:
be:67:76:88:c9:06:eb:00:b4:75:ee:1f:63:13:04:
c7:3e:a5:16:8d:6a:bd:c3:d1:45:ac:cd:19:32:8c:
c4:47:79:20:26:9b:e3:d0:2b:e6:c1:e6:23:7a:c3:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:F7:42:37:91:9C:2B:64:F5:1A:9C:D1:71:00:33:D2:0C:0B:A4
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/ATv3QjeRnCtk9Rqc0XEAM9IMC6Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.150.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:b4:54:87:f8:c0:8b:cc:5b:c0:34:5e:fc:7a:d3:2e:15:a6:
ca:e6:b0:73:71:90:cf:18:e5:9e:f6:67:ca:9b:cf:5e:c1:ce:
63:5f:1b:ba:f9:da:dc:5e:94:06:25:74:2c:0f:01:9c:e8:ac:
44:8e:bb:37:9a:6c:70:dd:ee:cf:e7:20:cd:b4:fd:7f:c5:0c:
39:02:11:03:41:bf:c2:7e:f0:dd:87:46:6d:96:75:64:85:62:
65:b2:03:f8:5d:62:de:24:a1:12:bd:75:ce:9e:00:c9:7d:48:
ec:e5:e0:03:16:8d:dd:3b:04:43:a6:b3:5e:d2:7d:69:92:f3:
e5:a9:e8:41:89:92:aa:ba:f3:14:ca:30:c2:10:bc:a2:f8:e5:
be:dd:39:81:64:42:bd:ff:09:4c:4a:c6:89:cc:8a:b3:fe:60:
47:21:0d:f0:50:e3:9a:a9:43:a7:bf:90:88:4f:6e:2d:8c:4c:
24:da:19:94:e2:dd:8e:f4:a5:ca:d6:47:b2:19:64:a5:2b:0b:
ca:cc:26:83:08:e2:06:95:1d:2e:a0:42:a9:e9:51:95:ff:17:
4c:b3:19:48:cb:3e:60:60:fd:98:1f:78:9d:6d:16:0e:6a:17:
e3:4c:3f:c1:82:a0:b9:6a:e9:81:1e:26:3b:42:eb:84:c7:0c:
df:26:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:34 2025 by rpki-client