Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa
File: 2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa (raw, json)
Hash identifier: VaHX/rm570xTBFVJkPHv2PgCswZO9qRT2Lr9jIvQTww=
Subject key identifier: DB:F0:0B:C5:1C:D4:86:21:70:B0:DB:65:CA:56:FC:63:69:AE:99:34
Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial: 0104
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa
Signing time: Mon 26 Aug 2024 05:19:19 +0000
ROA not before: Mon 26 Aug 2024 05:19:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38136
IP address blocks: 103.236.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Validity
Not Before: Aug 26 05:19:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DBF00BC51CD4862170B0DB65CA56FC6369AE9934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:a3:f7:d5:e6:0e:7c:88:f0:7d:a9:e7:60:
0e:4c:84:b9:87:93:8c:53:f2:72:d3:66:a1:6c:cc:
80:7a:c9:b1:4a:0e:d9:a6:1d:64:a7:c6:ab:9e:3c:
f8:9a:7a:7a:8d:3b:6d:25:9a:11:f2:f8:f9:7c:ea:
68:b7:a4:28:1d:62:5c:70:e2:47:68:c6:e5:5f:e9:
ca:ff:9d:e4:c4:cd:97:c5:57:ce:b9:14:24:48:8d:
30:71:1c:4d:85:10:c4:cc:95:07:75:ff:c9:4e:06:
ff:e9:f6:17:3b:fc:70:1d:2c:d4:9c:4b:8a:a7:e7:
a3:ba:d4:0c:6e:04:53:11:5c:c9:20:96:67:56:8f:
4c:ad:b5:ed:46:60:0a:17:e1:ac:05:63:b5:64:f6:
b5:07:d6:b9:46:47:b4:ee:ea:ab:f8:11:b1:bd:44:
b1:d4:8f:d8:9a:f4:00:43:57:67:44:56:91:7a:66:
5a:de:5e:56:07:c0:77:c6:bb:ba:1e:bf:a6:f8:fe:
3e:4a:04:d9:49:78:a1:71:d3:2c:6e:5f:6d:1e:36:
bb:b5:4d:48:c8:d2:0d:9b:92:3e:f2:1d:7e:ba:d0:
7b:d5:ec:39:15:13:d5:2f:26:5c:03:11:aa:39:a0:
be:a3:44:0c:49:5b:db:d6:97:fb:3b:17:27:7f:e6:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:0B:C5:1C:D4:86:21:70:B0:DB:65:CA:56:FC:63:69:AE:99:34
X509v3 Authority Key Identifier:
keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.226.0/23
Signature Algorithm: sha256WithRSAEncryption
25:19:62:66:d1:d8:0a:ee:a8:42:a8:bd:72:4a:b5:21:5c:9c:
9f:ec:69:9e:d3:27:ca:05:34:1c:48:e4:7d:a0:ca:49:78:3d:
12:a8:ad:4d:3f:89:f7:a7:d9:71:d5:4f:e9:b1:99:ad:f7:9d:
8f:66:75:66:66:22:aa:a3:19:1c:d0:d8:ed:8f:77:99:ca:7c:
c2:55:3f:e2:78:09:94:75:6a:ec:21:b6:9e:bf:67:80:fe:d3:
ce:d0:58:bf:cc:18:31:18:55:2e:c3:13:97:eb:02:a4:9e:e7:
a1:ff:e7:a1:0a:7f:86:4b:70:63:5b:d7:d0:12:f9:a8:6e:0d:
89:bd:6a:c2:6e:22:3e:bc:35:89:b8:7c:34:ac:fa:da:0b:30:
99:13:c4:0b:ca:1b:a1:84:64:f2:e4:f1:c0:95:cf:ce:e5:b1:
d4:64:88:8e:a4:2b:42:5a:bf:5a:ad:68:71:ce:b7:4c:d1:44:
c8:c8:57:ff:14:55:98:79:09:02:e4:fd:ca:cb:44:ae:76:50:
4e:40:06:a6:80:78:d0:dd:e6:b0:51:b2:46:31:f9:41:bf:f3:
43:4e:d2:13:36:8e:09:83:16:66:26:9f:c9:f0:23:a6:29:79:
0a:12:cf:42:9d:a7:99:a3:db:61:d2:b9:b7:dc:65:a8:d3:fe:
70:a1:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:09 2025 by rpki-client