Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa
File: 0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa (raw, json)
Hash identifier: BFUUdTK/ExzNrZ0gWJD6fh1807QOfq333o+RUVRfbtk=
Subject key identifier: D1:17:24:D7:C4:A7:E5:24:BC:49:FC:AF:24:B9:24:66:56:75:01:20
Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial: 0186
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa
Signing time: Mon 10 Feb 2025 13:42:19 +0000
ROA not before: Mon 10 Feb 2025 13:42:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38136
IP address blocks: 103.236.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Validity
Not Before: Feb 10 13:42:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D11724D7C4A7E524BC49FCAF24B9246656750120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:68:71:a4:54:6c:b4:66:d2:c2:0a:c6:af:
e4:a0:85:c6:c7:71:5c:f2:65:26:67:68:dd:91:15:
78:75:9b:ba:52:3a:03:d4:00:0f:f7:82:db:b4:0c:
71:43:77:10:e4:ca:29:f5:8e:ab:3e:0a:2c:05:f0:
31:3d:13:9a:07:53:a3:30:f0:07:60:0d:c6:7a:9e:
a5:cc:97:a0:53:18:3d:92:57:53:7e:30:28:04:0f:
54:e3:67:bd:05:8d:93:8e:ed:e6:d5:b8:8e:c6:b3:
3a:87:ae:4c:17:95:88:fb:44:e2:e0:f5:4d:65:34:
52:ba:3e:b5:fd:05:f5:61:4a:6f:eb:a4:eb:80:8d:
f1:a9:86:e8:23:9b:0d:dd:6a:e4:f2:8f:3f:b4:13:
f6:80:df:be:50:52:f1:2d:a5:b8:0b:74:34:a8:60:
e6:0a:88:be:ad:6a:d8:33:94:ad:3b:d5:9e:56:e8:
0e:76:76:6c:b0:7d:6e:26:f4:fd:61:ff:f5:79:81:
44:33:f0:dc:ba:f0:a4:21:b8:b1:c0:ca:d7:d3:fb:
96:36:42:1c:98:58:f4:11:64:f4:da:2b:e8:fe:57:
40:34:f7:de:95:32:20:35:b0:40:48:fd:b3:cc:3d:
6e:96:ec:a1:34:c5:d2:12:a1:45:38:3d:6d:4c:bf:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:24:D7:C4:A7:E5:24:BC:49:FC:AF:24:B9:24:66:56:75:01:20
X509v3 Authority Key Identifier:
keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/0Rck18Sn5SS8SfyvJLkkZlZ1ASA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.226.0/23
Signature Algorithm: sha256WithRSAEncryption
51:b8:c1:d2:f7:d6:cf:aa:fd:0b:2b:03:64:b5:4f:66:e6:32:
8f:8e:a7:48:c3:96:fc:2e:a7:b1:6d:91:2d:2f:a5:d7:8a:25:
38:3d:bd:1e:75:6f:06:bf:80:be:4a:d0:0f:eb:ba:b6:b0:99:
2b:19:6b:5d:c4:b6:c6:d3:88:73:72:40:9f:61:58:9b:08:3f:
83:7f:6e:07:4b:a6:bf:66:03:cd:63:63:1d:27:cd:a1:99:9c:
0a:e0:43:d8:29:b0:8d:72:f8:f3:45:af:e3:59:f3:80:c7:bf:
c3:7a:27:ce:54:76:17:62:c8:86:62:cb:c4:83:cf:91:ac:18:
f7:20:db:f1:55:b2:cc:2a:00:04:92:4c:c4:1c:26:a3:c2:3f:
2d:98:07:4d:8d:b3:f8:3e:a9:d5:9d:1f:28:2d:81:02:47:90:
d8:36:c9:56:6a:71:e9:0d:66:df:6d:e9:de:60:c5:d1:26:be:
7c:48:94:57:e9:2f:73:c7:4b:db:21:bd:61:8a:28:39:a5:42:
8b:e5:fd:b0:d9:77:be:74:e9:b5:b0:3a:6d:96:d4:46:2b:86:
b7:52:58:6f:6e:c5:0d:41:7e:4d:60:f6:c0:30:af:ab:74:c2:
5c:34:81:13:39:0c:58:27:92:3e:df:f0:37:23:60:c4:39:81:
8f:c6:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:19 2025 by rpki-client