Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/zqn7Dk0x3wR5_sdfzWZ__MLMn3o.roa
File: zqn7Dk0x3wR5_sdfzWZ__MLMn3o.roa (raw, json)
Hash identifier: VI8nREBPUOa0M2Ux0Wv4yOb3aYe+dADWoDKYNywhHkg=
Subject key identifier: CE:A9:FB:0E:4D:31:DF:04:79:FE:C7:5F:CD:66:7F:FC:C2:CC:9F:7A
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C8B
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/zqn7Dk0x3wR5_sdfzWZ__MLMn3o.roa
Signing time: Wed 04 Dec 2024 09:26:08 +0000
ROA not before: Wed 04 Dec 2024 09:26:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 09:26:08 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CEA9FB0E4D31DF0479FEC75FCD667FFCC2CC9F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:a6:f3:b4:9a:81:a3:90:fe:d0:63:64:1c:
09:97:a1:ca:9b:02:80:8b:04:30:90:af:ab:13:e9:
db:e6:97:b2:a0:43:56:8d:e4:1f:cd:b2:c1:be:87:
cd:c2:6b:42:2c:85:b7:f1:7c:b0:70:6b:7a:fe:08:
d4:31:0c:c5:f6:32:4d:1d:4b:a3:b4:9f:b4:0f:50:
c7:7d:ea:d0:89:6a:8f:92:dd:ce:05:5f:20:86:b2:
a1:5d:e6:86:89:c6:47:49:75:c3:83:2a:b4:b5:a8:
3b:1c:85:8b:41:20:cb:c7:14:b9:2d:6e:21:a0:70:
a1:00:dc:f3:c3:9c:f0:f9:60:a6:48:52:b2:9d:e6:
75:90:79:57:3e:8c:0d:a7:5c:e0:df:8a:3d:44:02:
a3:13:dd:8a:1c:d5:51:a6:d1:23:53:59:ee:22:e3:
c4:fd:ca:51:2c:11:ba:d6:56:36:ee:cf:e2:a4:7b:
48:80:b6:27:aa:97:d5:c6:83:26:53:e6:9a:1c:bd:
ed:52:3b:bd:af:88:c6:c8:b7:48:6b:5e:41:e1:3c:
12:7f:72:d0:a6:24:86:ea:8b:7b:5f:e1:55:75:14:
54:67:3c:3a:f3:03:45:d4:7b:34:2e:56:9e:56:5c:
f0:02:e4:c7:95:e0:b6:a2:39:db:0b:bf:ea:aa:60:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A9:FB:0E:4D:31:DF:04:79:FE:C7:5F:CD:66:7F:FC:C2:CC:9F:7A
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/zqn7Dk0x3wR5_sdfzWZ__MLMn3o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:6f:10:4f:5d:51:14:e3:78:5f:5b:c0:c1:d2:87:68:9d:ce:
59:ae:4a:71:33:c2:a7:a9:2d:38:75:d5:8c:1a:d1:09:b6:51:
45:1c:8c:f0:2b:50:11:25:e8:37:2d:91:87:95:98:31:94:25:
78:3c:6d:15:f7:4e:c2:9d:1e:61:88:8d:11:dc:99:ae:fd:3e:
02:9b:2b:f3:cf:26:1e:f6:2f:7f:9a:6f:8d:18:6e:b8:5c:75:
d7:a1:5d:ae:c0:3f:08:f8:25:f8:c6:e7:fc:2b:5c:16:d7:38:
34:62:4a:92:a5:a8:20:45:24:b4:a1:0f:2d:ae:ba:4c:0d:8d:
25:73:51:10:f9:70:94:23:c8:d8:3e:bd:99:cc:67:6d:4d:e4:
ad:53:b5:55:4f:da:c0:cc:18:52:82:31:41:24:3e:c6:a2:72:
2d:f9:d3:c0:d0:ab:1f:b7:db:34:03:84:c7:38:fd:01:8f:9d:
ff:82:d6:03:55:d1:ff:e6:89:a9:69:1f:c9:80:f1:a6:80:80:
66:a4:81:fc:15:ac:33:0e:69:a8:5e:64:72:f7:0b:41:e7:4a:
d1:63:3b:a5:11:e0:1f:9f:e5:f8:c9:b4:17:4e:16:de:4e:67:
28:80:07:2a:be:21:49:36:a5:bc:02:93:82:f3:4b:cf:9f:0f:
c6:f7:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:42:59 2025 by rpki-client