Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa
File: mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa (raw, json)
Hash identifier: Q3PKKLm+2lFbBPPWZDJx6s4Y08oGpPv83go4EVgOnM0=
Subject key identifier: 9A:0E:4F:6F:7E:84:77:C4:2F:DE:4F:D8:12:A6:85:66:F1:11:7B:42
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0F95
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa
Signing time: Mon 10 Feb 2025 14:30:52 +0000
ROA not before: Mon 10 Feb 2025 14:30:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18424
IP address blocks: 103.136.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3989 (0xf95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Feb 10 14:30:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9A0E4F6F7E8477C42FDE4FD812A68566F1117B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:83:48:e3:92:ff:49:44:01:4c:69:3d:41:
88:7a:54:b5:aa:82:67:1e:9f:f2:16:bb:55:5f:4c:
69:56:04:9d:ad:20:55:28:cc:be:44:7b:78:72:ca:
34:23:b5:27:04:16:70:6c:ed:84:e3:ba:ec:d8:8c:
26:1f:d9:19:fd:c4:27:f6:ab:d1:41:b9:d0:b8:25:
57:9e:1b:17:26:95:9d:eb:99:cf:9c:58:06:b9:e2:
a1:f8:43:1b:88:b7:d3:53:f1:91:fc:a6:71:af:b5:
5d:70:a2:8e:ee:72:ee:16:3b:61:27:d8:8a:f3:e7:
56:ec:7c:2d:7e:3a:d4:13:68:0a:ef:4a:73:a5:6a:
f3:01:99:92:bb:04:68:84:c9:30:4e:3d:51:6f:d9:
a0:4e:6d:0b:5a:10:16:1b:db:42:02:4b:f8:fc:7b:
03:58:ac:1c:d3:84:61:cb:b2:c4:7b:d9:21:62:82:
bc:51:e4:0e:d2:21:72:cd:30:bc:1d:bc:0b:28:b3:
dc:bf:31:9c:f3:fb:81:04:98:ee:b3:0e:ff:f8:d1:
51:87:81:d8:8f:ec:6e:d1:c3:9c:a9:e8:c8:98:50:
d1:50:b6:1f:e9:e5:7f:60:bb:64:72:b4:a0:27:a8:
8c:cd:01:27:9f:56:98:ab:40:9c:20:0f:1d:a8:22:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0E:4F:6F:7E:84:77:C4:2F:DE:4F:D8:12:A6:85:66:F1:11:7B:42
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
18:41:2c:4b:60:df:e0:a2:19:9a:e3:b9:3d:9f:d6:6b:df:7e:
b4:0b:27:6b:44:0a:f2:28:2d:0d:bb:fb:42:5e:78:b4:95:a6:
e0:07:21:ed:69:f9:37:e7:e9:d6:7b:71:f0:00:d8:a5:c7:b8:
14:77:3e:b9:5a:4e:36:5a:9e:07:fb:72:05:f3:43:3a:ba:34:
0c:a4:00:dc:f4:69:31:94:0c:c9:51:b9:c4:f1:e2:72:01:b0:
a6:a8:be:8c:f0:fd:a1:b0:d6:ae:0b:7b:3f:dd:cf:b6:f0:79:
d4:4b:67:8c:92:38:e9:2b:3f:a8:37:fd:e1:f1:e7:d7:9e:63:
ea:10:ea:70:6e:a1:4e:7e:61:a0:d7:e5:0f:32:ef:ae:39:65:
62:e0:33:4c:c2:7f:7b:73:4a:23:33:d6:1e:e7:d9:56:76:e4:
c2:7d:d6:bc:36:03:7b:8a:b9:38:7d:ea:b6:8b:53:9d:17:d5:
77:60:e8:f1:f6:f9:15:22:c4:0b:07:5f:ae:14:43:af:63:14:
f2:06:3d:6a:b2:20:9c:d7:96:d7:71:3d:4e:73:94:d6:21:7f:
99:db:7f:e3:15:04:28:3f:b2:17:34:06:6e:82:10:13:27:a8:
2a:34:9f:6f:b4:34:5e:59:d0:6e:03:72:2d:c4:19:27:a4:09:
53:db:ca:87
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG
MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTAx
NDMwNTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBMEU0RjZGN0U4NDc3
QzQyRkRFNEZEODEyQTY4NTY2RjExMTdCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmMYNI45L/SUQBTGk9QYh6VLWqgmcen/IWu1VfTGlWBJ2tIFUo
zL5Ee3hyyjQjtScEFnBs7YTjuuzYjCYf2Rn9xCf2q9FBudC4JVeeGxcmlZ3rmc+c
WAa54qH4QxuIt9NT8ZH8pnGvtV1woo7ucu4WO2En2Irz51bsfC1+OtQTaArvSnOl
avMBmZK7BGiEyTBOPVFv2aBObQtaEBYb20ICS/j8ewNYrBzThGHLssR72SFigrxR
5A7SIXLNMLwdvAsos9y/MZzz+4EEmO6zDv/40VGHgdiP7G7Rw5yp6MiYUNFQth/p
5X9gu2RytKAnqIzNASefVpirQJwgDx2oIjujAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUmg5Pb36Ed8Qv3k/YEqaFZvERe0IwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75
mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ
RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL21nNVBiMzZFZDhRdjNrX1lFcWFGWnZF
UmUwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ
KoZIhvcNAQELBQADggEBABhBLEtg3+CiGZrjuT2f1mvffrQLJ2tECvIoLQ27+0Je
eLSVpuAHIe1p+Tfn6dZ7cfAA2KXHuBR3PrlaTjZangf7cgXzQzq6NAykANz0aTGU
DMlRucTx4nIBsKaovozw/aGw1q4Lez/dz7bwedRLZ4ySOOkrP6g3/eHx59eeY+oQ
6nBuoU5+YaDX5Q8y7645ZWLgM0zCf3tzSiMz1h7n2VZ25MJ91rw2A3uKuTh96raL
U50X1Xdg6PH2+RUixAsHX64UQ69jFPIGPWqyIJzXltdxPU5zlNYhf5nbf+MVBCg/
shc0Bm6CEBMnqCo0n2+0NF5Z0G4Dci3EGSekCVPbyoc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:28 2025 by rpki-client