Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/xnLVoU6sxejj8bNAt-cBP449uE8.roa
File: xnLVoU6sxejj8bNAt-cBP449uE8.roa (raw, json)
Hash identifier: OewbTKGvgUaUXvo/qgqamnqJakEMvcgrrAdATqHXkT8=
Subject key identifier: C6:72:D5:A1:4E:AC:C5:E8:E3:F1:B3:40:B7:E7:01:3F:8E:3D:B8:4F
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CE3
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/xnLVoU6sxejj8bNAt-cBP449uE8.roa
Signing time: Thu 05 Dec 2024 07:26:21 +0000
ROA not before: Thu 05 Dec 2024 07:26:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 5 07:26:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C672D5A14EACC5E8E3F1B340B7E7013F8E3DB84F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:c7:db:31:9f:ea:c7:4f:b3:02:aa:fc:67:
ba:0d:c2:f4:07:d3:0e:48:66:e5:8d:77:1b:c5:78:
6a:e2:f7:4e:37:5d:c6:8f:2e:51:61:bb:93:ba:46:
ff:5f:6c:9f:29:1e:b0:24:6e:c1:05:5d:4f:50:7c:
b4:e2:4e:26:6c:cf:11:75:b0:4e:5a:bb:b1:37:8c:
e2:e0:77:d5:e5:64:54:5e:44:f6:d9:93:c7:6a:fb:
fb:55:e7:00:3e:21:27:8f:72:dc:81:f8:1c:40:e7:
35:64:48:16:86:43:b6:d0:d1:22:d1:62:e6:17:1f:
fd:59:1f:1a:40:39:93:70:26:9c:ba:de:05:f3:9c:
74:95:cb:55:65:7e:fe:9e:07:ce:af:64:3f:82:b7:
8d:16:d1:bc:16:67:65:b4:bd:21:fe:e9:2c:c2:4c:
2d:d9:25:74:10:4a:fd:d8:cd:58:69:9a:11:a5:d1:
d7:32:14:f3:a0:da:51:20:33:91:b4:79:84:5c:5c:
bd:4e:1f:2a:5a:6b:c8:94:49:f3:30:b8:f8:a5:9b:
0b:ef:d7:2e:30:d5:a4:ba:f0:03:00:84:b3:ad:54:
74:72:cb:1b:6c:8a:06:41:2c:bc:a9:47:7c:c5:2e:
fc:ee:5a:75:50:a2:34:98:6f:02:ed:00:98:de:42:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:D5:A1:4E:AC:C5:E8:E3:F1:B3:40:B7:E7:01:3F:8E:3D:B8:4F
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/xnLVoU6sxejj8bNAt-cBP449uE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a8:d4:f6:12:3f:8c:81:8f:65:b2:25:49:38:a4:9a:e9:af:
d5:f0:5c:ea:26:68:42:3a:01:42:29:56:59:23:1f:1b:07:10:
b1:56:78:83:19:55:bc:59:0c:a2:a1:4a:1d:97:d0:f4:b4:1e:
77:66:6f:59:f7:5f:9b:e5:0a:4c:5e:e5:5d:6b:70:65:35:92:
e8:31:0e:a5:c6:74:17:66:c5:6d:77:39:3b:7d:22:ca:39:0c:
ed:6a:2b:94:34:3e:38:86:7b:85:e4:b5:6a:13:37:ce:44:6d:
12:f1:89:40:68:4b:b9:e1:b0:ee:a8:09:bf:fe:db:ed:24:62:
b9:a9:b4:1c:b3:55:d5:0d:79:92:5c:a4:12:62:54:43:00:9c:
f5:52:bc:55:f9:62:19:de:03:c5:ec:1f:87:60:dc:45:46:61:
e8:57:9f:d0:f6:e4:6d:cf:3e:04:c1:03:8c:8b:26:b4:d6:20:
46:f6:20:74:1e:72:e2:89:b1:58:ee:49:01:fb:ac:94:d9:8c:
12:95:5a:ff:44:34:70:73:af:0b:d2:c7:b6:22:21:c7:b5:16:
d0:f3:92:96:ab:52:36:8a:96:54:0c:0a:c5:00:92:cd:94:ee:
f3:28:04:e7:78:87:88:81:46:32:b5:71:19:54:7f:76:fd:5e:
6f:24:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:10:32 2025 by rpki-client