Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V5TTXgngseDSg_i89Nl0I2HYUo8.roa
File: V5TTXgngseDSg_i89Nl0I2HYUo8.roa (raw, json)
Hash identifier: E4y52rlBAma0V3bZeMvBHCQRpVC57xHhOWdYFRv/Tmc=
Subject key identifier: 57:94:D3:5E:09:E0:B1:E0:D2:83:F8:BC:F4:D9:74:23:61:D8:52:8F
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 05DA
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V5TTXgngseDSg_i89Nl0I2HYUo8.roa
Signing time: Mon 10 Feb 2025 13:57:52 +0000
ROA not before: Mon 10 Feb 2025 13:57:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7480
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Feb 10 13:57:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5794D35E09E0B1E0D283F8BCF4D9742361D8528F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:40:0c:40:e5:b6:e0:ce:4a:5b:45:ab:4b:
69:e0:b9:b6:b2:da:66:3f:79:b4:a0:61:8f:4d:75:
24:69:b0:e5:1f:45:d0:70:5c:11:85:ab:19:91:4c:
d1:44:9e:69:3e:ef:a2:68:f7:9a:93:a0:f9:8d:8f:
b4:e5:d4:9e:df:a0:e7:44:78:4f:35:ee:b0:04:7c:
6a:3b:42:21:2a:aa:7b:84:8f:59:f2:c9:08:4c:fe:
e5:e8:a6:02:5c:67:9d:89:3d:6b:eb:bc:23:6a:ed:
a4:7b:05:56:d2:22:ce:82:f2:08:59:c8:60:86:83:
61:fe:33:d4:c3:e5:58:fd:f4:b1:1e:f2:44:bb:a4:
5a:3c:68:f2:75:24:9a:83:3b:68:39:10:bc:9f:fd:
72:e7:7c:d6:cb:49:11:90:ab:d7:1b:64:64:99:65:
4d:46:03:09:82:53:8e:2b:1b:a9:69:d8:da:37:76:
5a:bd:e2:c4:8e:1d:df:9c:51:c6:59:76:95:c1:d2:
4d:4f:9b:fe:ea:25:d5:18:4a:b5:98:ff:c0:9e:ba:
43:61:ed:ba:60:9f:96:29:6a:db:b5:b2:63:c0:41:
d2:81:b7:b4:95:cc:e3:6f:15:d3:6a:5d:14:3a:8c:
e2:1a:27:d4:c0:c9:41:4e:2e:8f:17:61:7c:dd:a0:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:D3:5E:09:E0:B1:E0:D2:83:F8:BC:F4:D9:74:23:61:D8:52:8F
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V5TTXgngseDSg_i89Nl0I2HYUo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f2:e9:ec:1d:b2:4a:5f:6c:e4:93:79:c9:3f:dd:26:24:17:
77:06:a9:c9:c9:d0:23:c3:11:9c:76:60:c6:a8:68:af:83:50:
4a:38:74:24:79:3e:36:cc:fd:90:86:d1:bb:03:9d:53:75:b8:
84:8c:31:8f:0b:29:d8:b9:92:db:82:fc:a6:b2:e3:63:c3:e7:
4b:63:bb:08:4e:b3:77:cc:fa:a2:17:f6:0b:49:38:9f:68:fa:
21:c0:62:80:0a:48:71:1f:62:16:68:94:12:73:1e:8c:ca:9a:
44:a2:38:13:23:87:2a:10:94:86:53:97:82:85:22:4e:3b:88:
90:32:27:11:ce:63:f5:e0:89:89:dc:e1:4f:38:0e:ef:3f:8a:
df:97:82:48:fe:95:be:09:c4:03:29:4a:88:28:c4:37:f4:1b:
cb:6d:df:2c:80:16:98:0b:a1:bb:58:b1:51:fa:90:d4:22:70:
5e:3c:f5:19:bf:77:51:8e:77:f3:ec:f8:d7:4e:d4:74:12:47:
5a:c7:80:3b:f4:c0:0d:73:12:89:13:90:ce:92:e3:7e:e8:a8:
56:94:06:48:14:36:c7:08:79:3a:f8:6f:5d:2d:0c:ed:0e:22:
d3:17:55:62:3e:ef:f6:e2:fd:94:4d:e2:12:18:f3:c1:b9:7c:
8c:55:cb:1d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNTAyMTAx
MzU3NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3OTREMzVFMDlFMEIx
RTBEMjgzRjhCQ0Y0RDk3NDIzNjFEODUyOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC2EAMQOW24M5KW0WrS2ngubay2mY/ebSgYY9NdSRpsOUfRdBw
XBGFqxmRTNFEnmk+76Jo95qToPmNj7Tl1J7foOdEeE817rAEfGo7QiEqqnuEj1ny
yQhM/uXopgJcZ52JPWvrvCNq7aR7BVbSIs6C8ghZyGCGg2H+M9TD5Vj99LEe8kS7
pFo8aPJ1JJqDO2g5ELyf/XLnfNbLSRGQq9cbZGSZZU1GAwmCU44rG6lp2No3dlq9
4sSOHd+cUcZZdpXB0k1Pm/7qJdUYSrWY/8CeukNh7bpgn5Ypatu1smPAQdKBt7SV
zONvFdNqXRQ6jOIaJ9TAyUFOLo8XYXzdoIL3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUV5TTXgngseDSg/i89Nl0I2HYUo8wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvVjVUVFhnbmdzZURTZ19p
ODlObDBJMkhZVW84LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAkfLp7B2ySl9s5JN5yT/dJiQXdwapycnQ
I8MRnHZgxqhor4NQSjh0JHk+Nsz9kIbRuwOdU3W4hIwxjwsp2LmS24L8prLjY8Pn
S2O7CE6zd8z6ohf2C0k4n2j6IcBigApIcR9iFmiUEnMejMqaRKI4EyOHKhCUhlOX
goUiTjuIkDInEc5j9eCJidzhTzgO7z+K35eCSP6VvgnEAylKiCjEN/Qby23fLIAW
mAuhu1ixUfqQ1CJwXjz1Gb93UY538+z4107UdBJHWseAO/TADXMSiROQzpLjfuio
VpQGSBQ2xwh5OvhvXS0M7Q4i0xdVYj7v9uL9lE3iEhjzwbl8jFXLHQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:21 2025 by rpki-client