Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa
File: eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa (raw, json)
Hash identifier: XihPeSndSy61JAi+Zwro9P2JuemF+3b89GbgcsvmWok=
Subject key identifier: 79:15:84:E9:AE:6F:7E:85:82:58:23:09:C2:55:B0:4E:AC:C6:14:C3
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F97
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa
Signing time: Mon 10 Feb 2025 14:30:53 +0000
ROA not before: Mon 10 Feb 2025 14:30:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131641
IP address blocks: 103.136.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Feb 10 14:30:53 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=791584E9AE6F7E8582582309C255B04EACC614C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:d5:1e:96:62:39:13:9e:3d:72:86:0f:03:
aa:e5:b9:8f:45:08:c5:6f:aa:e8:c5:3e:ec:8c:b6:
bf:fc:b4:71:35:a1:3e:61:ac:58:b8:58:bb:58:72:
dd:ca:b5:e2:d8:bc:96:27:13:ee:ab:76:73:59:63:
aa:33:6e:82:32:83:fc:89:a2:1a:b6:dd:f4:2a:ca:
8d:5c:33:7f:86:8b:c9:5c:af:71:71:3b:55:e8:be:
14:f9:56:5e:c2:93:30:05:b6:f7:88:1b:ce:ff:28:
8a:cf:ea:d8:1b:7a:52:01:b1:97:e7:f4:87:46:07:
ee:6c:e2:42:62:87:c6:b7:c8:78:5b:8c:1b:81:72:
c5:37:89:87:5b:94:d8:ce:05:9b:14:1a:3a:fc:2f:
04:c3:95:6c:ad:82:c4:05:70:77:60:f4:85:e6:2f:
b5:a0:31:7a:b1:ed:9f:6a:20:c2:57:66:da:c3:61:
c6:3e:9a:10:60:3e:36:87:5a:69:6a:30:c4:4a:69:
b6:2e:3c:d2:23:61:bd:87:a5:06:f4:ca:9a:d2:12:
04:60:27:ad:b2:14:88:02:ad:87:ab:cd:f8:be:b8:
93:22:d3:4a:47:0b:c4:fa:b0:68:d5:bd:0b:e1:6b:
e0:bc:ab:e3:66:61:70:b1:75:9a:56:36:db:3c:9a:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:84:E9:AE:6F:7E:85:82:58:23:09:C2:55:B0:4E:AC:C6:14:C3
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:88:59:6d:45:b0:00:13:e6:39:61:fd:3c:79:b0:7e:b4:99:
02:21:cb:7e:70:34:21:de:d0:1d:50:83:5c:b3:3e:d4:9c:32:
38:35:78:de:89:a7:c0:6e:8c:77:78:c1:8f:2e:09:a1:2c:dd:
28:88:2b:38:e1:f5:56:d3:cc:f1:a9:a2:df:31:ed:e9:03:f1:
cc:0c:0e:35:15:99:e8:f9:67:fa:6c:36:b4:c7:4e:7f:fa:8b:
55:05:b4:24:45:48:98:c6:30:c0:66:00:9c:95:ac:fd:50:66:
97:f7:a1:42:3a:20:8f:5d:3a:78:0d:15:9e:92:49:76:98:00:
df:bd:67:d1:9b:90:7d:3e:9d:dd:54:c8:06:01:9a:fa:72:2d:
3e:72:b2:5f:d8:01:66:fc:b2:82:92:a5:b7:18:d8:bc:e5:bc:
8e:ba:be:14:dc:e7:b0:19:e7:7f:98:2e:de:d9:30:b8:eb:ab:
e1:3d:06:7b:09:0a:9d:ea:d4:96:c7:9c:71:89:93:93:8b:51:
32:aa:23:27:22:12:e1:0f:3a:ee:66:89:a0:5e:68:46:f6:dd:
fd:3d:02:2b:c7:6d:7f:3d:b0:3f:79:c8:9d:c0:a4:87:14:dd:
14:38:c4:a0:af:81:57:13:8e:59:1e:9c:59:75:45:ae:f1:8d:
7e:bf:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:47 2025 by rpki-client