Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/573soS85QBX--qShdmUYJy0gLHU.roa
File: 573soS85QBX--qShdmUYJy0gLHU.roa (raw, json)
Hash identifier: y8P5tynbtJNQvhb7eHB6gpl3DvNH3XBNBQ+Yl0sD0kk=
Subject key identifier: E7:BD:EC:A1:2F:39:40:15:FE:FA:A4:A1:76:65:18:27:2D:20:2C:75
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0EC4
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/573soS85QBX--qShdmUYJy0gLHU.roa
Signing time: Mon 20 Jan 2025 02:19:48 +0000
ROA not before: Mon 20 Jan 2025 02:19:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 5065
IP address blocks: 103.135.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Jan 20 02:19:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E7BDECA12F394015FEFAA4A1766518272D202C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:bb:0c:8a:ce:7b:01:0b:d9:e3:a3:c5:ad:
f8:56:2c:63:fe:38:72:02:22:4a:8b:9f:df:11:72:
79:72:5c:18:12:0b:7f:34:e2:71:c6:d0:0f:c7:90:
82:a7:d0:31:18:80:79:58:27:53:08:16:43:76:7b:
71:2d:15:44:2e:98:24:4a:57:c9:48:59:4d:78:af:
c4:c0:26:44:c9:b0:f0:eb:04:8d:68:80:6b:ae:b5:
ce:6e:69:3a:e0:a0:63:67:84:6c:59:9a:f9:47:93:
49:d9:13:ea:ee:96:79:51:f0:cb:9e:e8:51:21:06:
1f:70:b8:06:fe:c4:fd:d9:ee:f5:87:4b:6c:2e:33:
60:94:6f:1d:9e:a0:9b:42:ce:fa:c9:cc:cc:24:d0:
2c:51:ad:de:0a:01:52:47:1e:ee:62:5d:ca:1d:cb:
8e:b7:83:f0:af:f1:bd:71:25:b7:6d:3c:b6:57:ca:
44:71:34:48:d6:39:42:25:a2:9b:a1:35:2d:94:58:
d3:ce:da:d5:b4:91:68:8d:23:11:a4:5c:c6:1e:de:
8f:a0:6a:0a:25:bb:2c:2d:62:f7:1e:53:7c:12:3f:
cf:39:83:31:85:87:88:f2:26:0e:5a:cf:79:35:98:
c0:01:88:38:f4:4a:aa:ee:60:a0:6e:a9:48:d8:a5:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BD:EC:A1:2F:39:40:15:FE:FA:A4:A1:76:65:18:27:2D:20:2C:75
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/573soS85QBX--qShdmUYJy0gLHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.22.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:0e:7d:db:31:75:4b:ff:51:59:91:41:a7:c4:0f:7e:43:de:
de:16:dd:c2:70:39:2a:b0:c1:eb:7e:65:1d:b3:4d:ee:4c:7b:
57:04:28:51:ab:3e:9d:53:26:8e:7c:66:52:df:f1:9c:64:56:
a6:ec:c1:83:5a:19:1a:0d:c3:67:52:4e:01:3e:fd:96:00:2a:
c9:c4:57:63:3c:88:db:bf:c6:ff:45:8a:e5:8b:8c:e9:ab:57:
fa:9c:c2:92:44:2b:ea:9e:02:20:bc:b8:84:e9:04:60:37:90:
af:3e:f7:12:6a:ea:5c:be:c8:1b:27:1e:11:43:36:11:fa:64:
b5:ee:6d:58:06:a5:fa:e1:d5:c3:e1:98:5d:43:85:99:95:eb:
f6:3f:09:23:34:a9:60:f8:08:6b:7e:06:2c:80:e3:1b:29:cc:
f4:83:1c:82:a2:36:22:c1:9d:9b:dd:bf:9a:17:36:c1:5a:31:
c5:85:ad:2b:c9:a0:02:7d:dd:a8:6f:15:d1:0c:35:c9:3c:e4:
9e:33:22:cf:44:4c:55:05:4b:d3:d8:67:0e:63:29:d7:e7:f7:
3b:89:f0:08:f5:22:08:55:ef:ce:55:75:c6:48:66:ca:0f:ac:
fc:1c:ff:f1:80:3f:a5:f3:c1:9a:0d:bc:58:e6:d2:0b:70:cf:
d2:f8:fc:99
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDsQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4
RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTAxMjAw
MjE5NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3QkRFQ0ExMkYzOTQw
MTVGRUZBQTRBMTc2NjUxODI3MkQyMDJDNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV1bsMis57AQvZ46PFrfhWLGP+OHICIkqLn98RcnlyXBgSC380
4nHG0A/HkIKn0DEYgHlYJ1MIFkN2e3EtFUQumCRKV8lIWU14r8TAJkTJsPDrBI1o
gGuutc5uaTrgoGNnhGxZmvlHk0nZE+rulnlR8Mue6FEhBh9wuAb+xP3Z7vWHS2wu
M2CUbx2eoJtCzvrJzMwk0CxRrd4KAVJHHu5iXcody463g/Cv8b1xJbdtPLZXykRx
NEjWOUIlopuhNS2UWNPO2tW0kWiNIxGkXMYe3o+gagoluywtYvceU3wSP885gzGF
h4jyJg5az3k1mMABiDj0SqruYKBuqUjYpf6XAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQU573soS85QBX++qShdmUYJy0gLHUwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/
fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vNTczc29TODVR
QlgtLXFTaGRtVVlKeTBnTEhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWeHFjANBgkqhkiG9w0BAQsFAAOCAQEAsg592zF1S/9RWZFBp8QPfkPe
3hbdwnA5KrDB635lHbNN7kx7VwQoUas+nVMmjnxmUt/xnGRWpuzBg1oZGg3DZ1JO
AT79lgAqycRXYzyI27/G/0WK5YuM6atX+pzCkkQr6p4CILy4hOkEYDeQrz73Emrq
XL7IGyceEUM2Efpkte5tWAal+uHVw+GYXUOFmZXr9j8JIzSpYPgIa34GLIDjGynM
9IMcgqI2IsGdm92/mhc2wVoxxYWtK8mgAn3dqG8V0Qw1yTzknjMiz0RMVQVL09hn
DmMp1+f3O4nwCPUiCFXvzlV1xkhmyg+s/Bz/8YA/pfPBmg28WObSC3DP0vj8mQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:59 2025 by rpki-client