Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/S4biQ5raTqeLOxE2s2tpiNmW6RI.roa
File: S4biQ5raTqeLOxE2s2tpiNmW6RI.roa (raw, json)
Hash identifier: JU1xyywzjKSxxi4Q4VGMKYviomoaBGz3WTObGIKwbAA=
Subject key identifier: 4B:86:E2:43:9A:DA:4E:A7:8B:3B:11:36:B3:6B:69:88:D9:96:E9:12
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C71
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/S4biQ5raTqeLOxE2s2tpiNmW6RI.roa
Signing time: Wed 04 Dec 2024 02:56:05 +0000
ROA not before: Wed 04 Dec 2024 02:56:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 02:56:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4B86E2439ADA4EA78B3B1136B36B6988D996E912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:96:5c:80:53:ff:21:20:b0:fd:53:fa:f5:36:
bb:0d:64:af:54:ca:1b:81:c1:21:6d:7e:3d:22:bf:
0e:1d:de:39:29:4d:ca:5e:97:d0:23:ba:eb:60:26:
73:b0:6b:08:44:19:30:a8:1b:8f:6d:e5:ed:d3:68:
51:3f:97:f9:cf:df:b7:31:16:f6:f6:96:12:05:f5:
df:00:65:f4:e9:0a:3f:42:50:e7:f7:0e:60:1d:30:
ce:90:33:4e:f5:71:a7:3a:b7:25:22:f3:83:4c:69:
94:d6:18:8d:1f:01:f6:89:db:ea:7b:af:0e:e5:7e:
d5:57:f7:6b:b6:21:47:37:f7:48:5c:c0:22:4f:b8:
89:c2:62:94:9b:60:ed:6c:3f:c2:51:43:71:38:d9:
3e:e3:cb:50:29:ea:2c:87:eb:5a:41:4f:ea:df:c5:
d7:4a:84:9a:4c:5b:78:f8:a5:8c:3b:1c:d1:3e:4f:
f9:cf:78:c9:c0:80:7f:b6:5e:1a:29:2f:2c:04:58:
1a:77:09:6e:e5:51:6b:62:78:05:35:58:be:91:e3:
4a:64:5e:ef:f9:fd:ca:94:6b:01:35:1d:38:b7:11:
02:e9:ad:9f:ad:08:6f:07:9f:66:cf:3a:1f:6f:7f:
3c:ad:ff:6b:f4:41:31:e3:a4:3c:5a:8b:13:02:13:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:E2:43:9A:DA:4E:A7:8B:3B:11:36:B3:6B:69:88:D9:96:E9:12
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/S4biQ5raTqeLOxE2s2tpiNmW6RI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:0a:fa:80:96:8f:0b:bb:7f:bb:2f:1b:6d:13:e6:ca:39:9e:
40:bb:5e:c2:48:c4:e8:4d:22:c7:59:8f:27:34:ad:a4:fd:44:
05:b5:a1:65:9c:81:4e:54:99:28:9a:f5:40:45:8d:6f:a2:68:
04:b6:47:87:e5:35:91:c9:0b:a9:df:4d:4e:f6:1d:13:5d:1d:
c1:77:0b:6e:07:1b:15:9d:0e:24:be:11:6e:3f:81:e0:ce:a6:
42:23:86:c1:b3:bd:06:2b:d1:48:e1:5b:06:17:22:c8:30:89:
23:50:7d:b7:d1:8c:73:bf:5f:a1:e0:86:81:d1:07:1d:b8:3f:
12:98:70:f6:91:13:db:b9:ea:7c:6b:aa:4a:cb:ff:4f:71:20:
5c:22:97:c6:ec:4e:1e:47:75:c3:3b:50:e0:c1:11:2e:0d:ad:
63:ef:96:3d:a3:2f:c7:29:88:6b:52:66:fa:e7:0a:f0:8b:aa:
eb:d3:db:f3:c6:b0:de:33:d4:50:9a:b3:54:16:08:6c:ab:2e:
20:cd:fc:17:51:45:23:cd:de:e4:67:47:9b:e3:78:5c:00:28:
34:65:77:bd:fa:b3:3c:b7:06:b9:29:be:d2:da:81:fc:77:41:
a4:df:5d:c5:05:c0:49:a3:9a:0d:50:55:e0:8e:12:45:32:16:
52:f2:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:00 2025 by rpki-client