Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/obGNcSJ3Tf91MbDiELC-CcpMAGc.roa
File: obGNcSJ3Tf91MbDiELC-CcpMAGc.roa (raw, json)
Hash identifier: yLIMYl4k/EvGS+pgHPJqC06iFFMNmlhemZu+hqKBXSs=
Subject key identifier: A1:B1:8D:71:22:77:4D:FF:75:31:B0:E2:10:B0:BE:09:CA:4C:00:67
Certificate issuer: /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial: 1299
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/obGNcSJ3Tf91MbDiELC-CcpMAGc.roa
Signing time: Mon 10 Feb 2025 14:14:31 +0000
ROA not before: Mon 10 Feb 2025 14:14:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 103.124.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4761 (0x1299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Validity
Not Before: Feb 10 14:14:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A1B18D7122774DFF7531B0E210B0BE09CA4C0067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:31:bb:f6:21:2b:de:2a:44:33:1b:8f:b3:
22:25:24:5d:b9:64:a2:a0:03:7f:c8:f1:03:3b:85:
ea:a9:48:53:81:b8:3f:e6:be:cf:3a:a8:10:7c:58:
08:29:42:eb:ed:74:8f:41:e8:5b:24:df:13:35:78:
84:ea:16:dc:04:cd:fd:8e:f7:18:55:4e:d7:83:c7:
9c:11:e1:35:c4:e6:a9:6c:d1:10:f4:5c:84:f8:f4:
10:45:f7:4e:da:f5:22:d6:58:64:68:99:24:bd:a8:
26:e9:c1:2a:b5:3c:2a:46:5e:76:81:68:69:ac:90:
1c:22:7a:ab:d5:30:27:7f:df:37:e1:06:46:0e:aa:
13:28:27:2f:3b:46:4d:f6:5b:84:49:78:26:b8:58:
73:db:99:31:e4:f7:6d:24:ec:6c:94:50:5c:fb:4d:
8a:54:dd:12:49:ce:2b:d7:ff:f7:ac:f8:6e:37:75:
c8:13:95:d6:39:d7:09:a7:03:6c:25:70:5a:9e:41:
89:a0:b3:29:82:ca:0e:0f:80:72:54:95:09:d6:05:
52:8e:63:3f:3f:1f:cc:2a:97:ad:c9:69:9e:d2:78:
14:c9:9d:94:ac:cf:15:8e:bb:dd:b7:61:9a:6d:b7:
8e:ee:75:00:29:e2:35:c8:69:43:4f:27:77:4c:22:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:8D:71:22:77:4D:FF:75:31:B0:E2:10:B0:BE:09:CA:4C:00:67
X509v3 Authority Key Identifier:
keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/obGNcSJ3Tf91MbDiELC-CcpMAGc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.176.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:1c:62:ee:5d:8a:b0:7a:50:ae:9b:1d:24:49:82:4d:d8:a3:
7e:71:33:14:18:63:a0:55:20:b0:c8:13:b2:b9:87:b3:75:1f:
f6:f5:6a:02:7f:09:86:e6:02:01:d8:5c:ba:c8:79:c7:5f:48:
e4:10:a1:97:3c:b3:91:0a:e7:c9:5a:9e:79:32:3f:a6:cc:47:
a2:e3:e4:ad:0d:3d:be:f5:6e:ae:d5:20:f5:80:43:ed:1d:12:
db:99:a0:96:86:9e:95:be:9c:98:df:d4:46:8d:ef:d1:39:f0:
c6:7c:cc:88:49:16:87:1f:18:71:e4:c2:91:96:27:05:98:2b:
99:3b:e0:68:a1:51:c5:ad:a0:d2:47:f8:c4:2e:46:22:d1:c9:
33:6b:76:e7:b0:09:6a:81:c2:ef:1a:f0:e6:2e:e5:6e:22:0c:
1d:09:ea:ca:c7:f7:42:a3:3b:b2:c3:1a:22:66:c0:66:da:74:
67:bb:40:39:d3:81:7f:10:2e:85:6d:b4:1e:7a:5c:8e:9c:3b:
eb:b3:43:d5:aa:5c:8a:78:41:fd:dc:d5:e7:1c:f5:21:68:d4:
1a:22:a8:07:46:f7:50:f7:98:54:cb:49:b6:8a:65:49:01:e7:
95:09:84:84:9c:a8:cb:61:4f:a2:01:bd:e9:93:ed:a9:fd:bb:
13:97:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:17 2025 by rpki-client