Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa
File: YPdc360PEFbWhqVvEyvpCKka3nA.roa (raw, json)
Hash identifier: 10K5Gw/UVEhmWYYssZijTApkxWDVY4Mqc0Kk1pUWEXU=
Subject key identifier: 60:F7:5C:DF:AD:0F:10:56:D6:86:A5:6F:13:2B:E9:08:A9:1A:DE:70
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F99
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa
Signing time: Mon 10 Feb 2025 14:30:54 +0000
ROA not before: Mon 10 Feb 2025 14:30:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24168
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Feb 10 14:30:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=60F75CDFAD0F1056D686A56F132BE908A91ADE70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:68:df:8c:cc:6c:66:46:30:2e:b4:15:f1:
98:14:6b:8c:1d:24:1d:cb:c4:a5:47:cd:5c:ab:29:
75:d4:80:d7:9f:09:85:71:21:ca:7c:04:a5:f1:0a:
da:c1:d0:51:d5:d4:15:c2:2a:f8:e1:04:fc:a2:e8:
d5:9a:fb:bb:37:e5:ea:f7:61:7c:bc:f9:b9:de:d2:
9a:fe:91:e7:6c:dc:19:04:71:8c:7b:d7:85:b9:41:
82:7b:ab:9a:93:e8:28:ca:61:1b:48:de:b8:cf:9f:
c0:1c:6c:b0:77:6d:58:f3:1a:7e:bf:6c:99:0f:99:
b7:0b:cc:ad:ad:ce:4b:dd:c6:66:e0:ac:97:04:38:
de:41:5e:9a:e2:3f:a9:dd:3e:1a:92:7d:85:af:b9:
ba:27:5b:2b:9e:0c:39:79:81:6b:a0:5c:81:1f:b0:
1c:7d:86:ae:04:8f:2d:95:be:6b:14:3d:16:56:e8:
20:6a:46:8d:ac:4e:e2:9a:a9:34:50:51:72:cb:6d:
c0:cc:fe:c7:f3:3d:a2:f1:17:6e:52:09:80:fb:44:
3c:b9:fe:35:af:01:7c:c0:aa:08:eb:fa:7d:c5:83:
35:24:1e:4d:c9:ce:da:c9:92:22:42:cd:68:32:b1:
51:9c:7e:53:e5:34:a2:d3:bf:9b:5c:89:9b:78:16:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:5C:DF:AD:0F:10:56:D6:86:A5:6F:13:2B:E9:08:A9:1A:DE:70
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/YPdc360PEFbWhqVvEyvpCKka3nA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b7:9b:1f:da:b5:e0:79:42:93:dc:95:56:59:31:bd:99:15:
f4:e0:a6:c9:81:d4:47:e5:da:7c:7f:df:f9:d0:0e:6f:ae:89:
3c:42:a5:8c:99:7a:2d:92:3a:c7:d2:57:6d:5a:1a:71:e5:48:
13:24:42:6e:49:51:e2:ab:c3:58:c5:54:50:67:63:b3:bd:3b:
4f:cc:52:3d:eb:af:97:d3:f1:71:18:81:13:2d:d6:a8:ed:85:
a0:91:46:af:c8:82:c7:07:a5:a5:9d:82:4b:73:30:b6:d1:80:
5b:b6:0f:d4:3f:b7:5b:8e:aa:79:03:58:12:ff:99:1f:e9:ce:
59:65:ab:31:e5:0a:69:94:cf:73:02:67:a5:99:74:4e:95:f1:
05:ae:b5:c9:a1:f3:44:6c:f2:04:70:1e:42:26:c1:72:f3:75:
ad:ee:f0:85:1b:c3:fb:f2:51:3a:07:3e:13:23:10:19:15:ed:
47:33:c4:d1:60:35:1d:8a:43:f7:d2:7e:84:a4:59:bd:e7:7c:
ac:9b:d4:e9:3d:e6:21:2e:64:78:3c:8f:d8:a4:de:14:d5:d9:
e1:26:17:28:68:f5:36:e4:34:31:78:27:eb:e7:72:65:ef:7a:
1f:9a:72:50:83:bc:51:d7:7a:52:84:e7:07:cd:b6:55:01:fe:
42:18:65:81
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG
MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx
NDMwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwRjc1Q0RGQUQwRjEw
NTZENjg2QTU2RjEzMkJFOTA4QTkxQURFNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX02jfjMxsZkYwLrQV8ZgUa4wdJB3LxKVHzVyrKXXUgNefCYVx
Icp8BKXxCtrB0FHV1BXCKvjhBPyi6NWa+7s35er3YXy8+bne0pr+keds3BkEcYx7
14W5QYJ7q5qT6CjKYRtI3rjPn8AcbLB3bVjzGn6/bJkPmbcLzK2tzkvdxmbgrJcE
ON5BXpriP6ndPhqSfYWvubonWyueDDl5gWugXIEfsBx9hq4Ejy2VvmsUPRZW6CBq
Ro2sTuKaqTRQUXLLbcDM/sfzPaLxF25SCYD7RDy5/jWvAXzAqgjr+n3FgzUkHk3J
ztrJkiJCzWgysVGcflPlNKLTv5tciZt4FmE5AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUYPdc360PEFbWhqVvEyvpCKka3nAwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75
mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ
RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL1lQZGMzNjBQRUZiV2hxVnZFeXZwQ0tr
YTNuQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniD0wDQYJ
KoZIhvcNAQELBQADggEBAKi3mx/ateB5QpPclVZZMb2ZFfTgpsmB1Efl2nx/3/nQ
Dm+uiTxCpYyZei2SOsfSV21aGnHlSBMkQm5JUeKrw1jFVFBnY7O9O0/MUj3rr5fT
8XEYgRMt1qjthaCRRq/IgscHpaWdgktzMLbRgFu2D9Q/t1uOqnkDWBL/mR/pzlll
qzHlCmmUz3MCZ6WZdE6V8QWutcmh80Rs8gRwHkImwXLzda3u8IUbw/vyUToHPhMj
EBkV7UczxNFgNR2KQ/fSfoSkWb3nfKyb1Ok95iEuZHg8j9ik3hTV2eEmFyho9Tbk
NDF4J+vncmXveh+aclCDvFHXelKE5wfNtlUB/kIYZYE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:17 2025 by rpki-client