Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/_uEw4IrDCNoHorZeDDlSrhTLVB4.roa
File: _uEw4IrDCNoHorZeDDlSrhTLVB4.roa (raw, json)
Hash identifier: lVJCUHczXSGcyuv2cOVe5J/HYsPTOzBhk043RP2zizY=
Subject key identifier: FE:E1:30:E0:8A:C3:08:DA:07:A2:B6:5E:0C:39:52:AE:14:CB:54:1E
Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Certificate serial: 0CD3
Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/_uEw4IrDCNoHorZeDDlSrhTLVB4.roa
Signing time: Mon 10 Feb 2025 13:49:57 +0000
ROA not before: Mon 10 Feb 2025 13:49:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 138145
IP address blocks: 103.135.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477
Validity
Not Before: Feb 10 13:49:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FEE130E08AC308DA07A2B65E0C3952AE14CB541E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:e3:da:e6:b1:32:9a:3e:0f:dc:f4:20:02:
57:12:a4:4d:59:11:08:10:8a:75:4d:a4:5c:fe:09:
a1:ed:7f:98:64:3d:df:15:bc:22:54:5d:e6:80:55:
85:e3:22:f5:02:9e:6b:df:00:3a:3f:79:bc:d6:58:
67:cb:96:ee:2f:35:d6:d3:63:f8:4e:4b:c7:c8:d2:
45:34:58:07:5d:85:bc:02:b0:db:e4:97:3b:67:b5:
70:cd:1a:6e:6d:40:f7:3e:be:95:7b:e3:13:d0:b4:
95:fe:46:96:61:c4:bc:52:a7:b3:c7:13:d6:d6:11:
97:f7:3b:ab:7f:c0:80:db:c3:99:97:f3:13:71:ef:
cc:17:8c:7e:34:ff:51:b2:17:ce:63:b8:98:62:44:
80:15:50:4b:19:b5:a1:6f:2d:a6:04:0e:57:4f:b3:
09:a0:55:c6:2d:56:da:33:dc:3d:a3:b3:8f:ff:c9:
90:08:c3:c0:bb:52:13:7b:9e:3d:43:0e:ff:fa:55:
ef:57:f5:02:00:01:7b:ce:e9:f9:8b:93:16:79:a9:
93:cf:84:17:0c:2a:d0:85:70:27:be:bc:30:47:9e:
02:e9:e0:8e:a3:72:d1:f4:05:af:71:77:83:2e:2a:
0e:9d:5c:b1:33:31:7f:33:8d:e2:c9:05:ee:25:75:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:30:E0:8A:C3:08:DA:07:A2:B6:5E:0C:39:52:AE:14:CB:54:1E
X509v3 Authority Key Identifier:
keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/_uEw4IrDCNoHorZeDDlSrhTLVB4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.16.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fe:c6:05:e4:75:cb:12:82:68:9b:61:9e:34:e8:0b:f8:70:
eb:af:3b:7a:94:2f:c0:6b:88:60:33:75:fd:df:d6:04:a6:90:
d1:e2:00:ec:cc:ec:87:95:66:24:2f:f2:e0:c8:6a:d1:f4:44:
c2:88:49:98:bd:8a:d5:99:78:25:68:67:0b:40:4c:84:9e:d3:
91:c0:6c:a7:97:75:46:f1:12:38:0a:fc:5c:95:7e:54:3f:0a:
4a:18:a1:40:36:8c:9f:c5:0b:84:a9:6e:ce:46:de:1b:2e:cd:
5c:47:cb:42:e5:c3:30:13:74:c1:91:d1:90:c6:96:d3:a6:63:
2b:3a:df:15:31:22:f0:87:92:54:a5:fd:e8:67:09:05:03:5d:
9f:de:c8:ea:32:9f:63:f7:04:bf:1e:da:72:5d:53:e3:ad:3f:
4b:84:eb:cc:19:3f:ef:0c:0a:df:a5:e6:19:41:18:4d:a5:4a:
4e:c0:27:9c:97:0b:7a:b1:7c:6e:cb:35:17:dc:12:11:af:07:
83:96:8d:0a:83:2d:93:bc:9f:dc:13:4a:ae:2b:f2:1b:b2:5b:
3b:ff:8e:dd:b6:5b:bc:23:9e:d7:84:33:45:35:89:6f:85:96:
25:55:dd:81:2e:2d:8b:b0:b4:c0:49:8c:f4:74:11:2f:58:03:
37:b8:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:26 2025 by rpki-client