Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XevbeAn2jUWAdZn8sVhFhtVf1EQ.roa
File: XevbeAn2jUWAdZn8sVhFhtVf1EQ.roa (raw, json)
Hash identifier: 6Io584lrE6i+7uRmvtYgNvjjWW1nX4ejsEoyn6MLItQ=
Subject key identifier: 5D:EB:DB:78:09:F6:8D:45:80:75:99:FC:B1:58:45:86:D5:5F:D4:44
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0D1B
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XevbeAn2jUWAdZn8sVhFhtVf1EQ.roa
Signing time: Mon 10 Feb 2025 14:23:27 +0000
ROA not before: Mon 10 Feb 2025 14:23:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 103.31.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Feb 10 14:23:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5DEBDB7809F68D45807599FCB1584586D55FD444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:4a:8d:67:0e:fc:6e:66:82:15:2d:05:22:
ce:5a:00:4c:53:f5:d6:ea:8a:cb:3c:32:7f:aa:4d:
54:84:c6:d7:d8:7c:fb:7f:f1:d0:62:54:de:1f:22:
49:ed:af:13:b7:b8:58:96:70:f1:7a:01:03:18:3a:
6d:06:6f:cc:ea:e9:d1:61:a8:8c:09:0c:4f:4e:d8:
84:b4:29:49:d4:a0:c4:9f:cf:4b:57:b9:d6:64:ff:
f6:43:a6:58:47:a5:f5:21:e5:f5:53:f0:c2:2f:4a:
8c:1f:05:d9:a6:f0:be:55:87:88:3f:30:66:16:a2:
97:50:d3:05:50:06:f1:c1:c1:23:35:a8:ed:bf:60:
85:5c:a6:f2:16:52:cd:a0:be:fc:ba:ec:68:c8:7f:
d4:8d:88:c3:15:31:df:15:91:b0:33:aa:c5:71:ed:
c5:1e:ac:dc:eb:92:23:cf:07:94:6e:ff:7b:7d:72:
13:1e:25:5b:44:90:b4:37:88:7c:c6:5b:a9:13:4a:
2b:36:71:f9:9d:dd:3b:fc:07:ca:ab:7f:80:3f:66:
15:70:c4:9e:a6:e4:ac:23:b4:07:4b:91:c9:bf:d9:
27:12:12:21:97:b7:56:81:39:44:4a:28:4b:73:e1:
dd:db:96:14:5f:ce:c8:2d:33:62:2c:6d:65:89:d6:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EB:DB:78:09:F6:8D:45:80:75:99:FC:B1:58:45:86:D5:5F:D4:44
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XevbeAn2jUWAdZn8sVhFhtVf1EQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.196.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:30:c5:62:44:37:0a:74:23:f1:f7:e4:73:a8:1a:3e:4a:5e:
43:a5:50:76:94:06:9f:af:ac:51:01:07:f5:16:46:26:b6:d3:
d8:49:f6:cc:56:b7:6a:62:7e:52:de:00:9d:e3:f9:f3:0e:c8:
3a:ff:af:7f:19:bf:18:1d:7a:51:4c:90:c1:72:07:43:a6:c0:
63:fc:b2:94:a6:65:bf:c6:cb:37:de:e7:51:dd:b1:bf:c0:12:
dd:7a:32:6c:9a:73:60:15:23:83:a9:79:d4:4d:26:d5:2b:a1:
de:18:4f:ce:72:18:72:1e:57:d0:45:e4:be:17:7d:7b:88:6c:
c2:36:90:5a:8c:93:f3:1a:ee:27:51:7e:01:44:25:0b:73:0b:
9f:c2:ad:47:a0:68:91:b0:35:a4:b4:18:46:d6:bc:31:9b:53:
85:34:e1:e6:c1:09:c2:3d:6b:e0:15:ae:f3:a2:af:6d:f8:3b:
d6:7e:00:d2:a0:03:bc:a7:68:d4:b7:b3:6d:04:79:67:90:17:
e2:8a:b7:06:56:5f:78:5c:8c:63:f6:9c:63:a0:2e:cd:ea:0f:
57:fa:ab:32:46:07:d0:46:a2:fb:56:e5:46:42:8c:59:d6:a2:
c9:64:31:99:06:65:c8:8f:fa:05:97:41:fb:aa:81:46:b7:33:
6e:e4:20:6d
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx
NDIzMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVERUJEQjc4MDlGNjhE
NDU4MDc1OTlGQ0IxNTg0NTg2RDU1RkQ0NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhsUqNZw78bmaCFS0FIs5aAExT9dbqiss8Mn+qTVSExtfYfPt/
8dBiVN4fIkntrxO3uFiWcPF6AQMYOm0Gb8zq6dFhqIwJDE9O2IS0KUnUoMSfz0tX
udZk//ZDplhHpfUh5fVT8MIvSowfBdmm8L5Vh4g/MGYWopdQ0wVQBvHBwSM1qO2/
YIVcpvIWUs2gvvy67GjIf9SNiMMVMd8VkbAzqsVx7cUerNzrkiPPB5Ru/3t9chMe
JVtEkLQ3iHzGW6kTSis2cfmd3Tv8B8qrf4A/ZhVwxJ6m5KwjtAdLkcm/2ScSEiGX
t1aBOURKKEtz4d3blhRfzsgtM2IsbWWJ1s1BAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUXevbeAn2jUWAdZn8sVhFhtVf1EQwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L1hldmJlQW4yalVX
QWRabjhzVmhGaHRWZjFFUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnH8QwDQYJKoZIhvcNAQELBQADggEBANwwxWJENwp0I/H35HOoGj5KXkOl
UHaUBp+vrFEBB/UWRia209hJ9sxWt2piflLeAJ3j+fMOyDr/r38ZvxgdelFMkMFy
B0OmwGP8spSmZb/Gyzfe51Hdsb/AEt16Mmyac2AVI4OpedRNJtUrod4YT85yGHIe
V9BF5L4XfXuIbMI2kFqMk/Ma7idRfgFEJQtzC5/CrUegaJGwNaS0GEbWvDGbU4U0
4ebBCcI9a+AVrvOir234O9Z+ANKgA7ynaNS3s20EeWeQF+KKtwZWX3hcjGP2nGOg
Ls3qD1f6qzJGB9BGovtW5UZCjFnWoslkMZkGZciP+gWXQfuqgUa3M27kIG0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:44:48 2025 by rpki-client