Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/DSXcGHdg5vHmXwOAEq_LV3ehgwo.roa
File: DSXcGHdg5vHmXwOAEq_LV3ehgwo.roa (raw, json)
Hash identifier: 4nJdtjNTUxSwU9k6hBVyoPJ01ACE0Am4EZbJJlxJKp4=
Subject key identifier: 0D:25:DC:18:77:60:E6:F1:E6:5F:03:80:12:AF:CB:57:77:A1:83:0A
Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial: 037D
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/DSXcGHdg5vHmXwOAEq_LV3ehgwo.roa
Signing time: Mon 10 Feb 2025 13:57:04 +0000
ROA not before: Mon 10 Feb 2025 13:57:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38852
IP address blocks: 103.169.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893 (0x37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Validity
Not Before: Feb 10 13:57:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D25DC187760E6F1E65F038012AFCB5777A1830A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:31:5c:62:e0:ca:85:cd:b1:d1:9a:06:f5:
fa:9c:f0:06:0c:ba:c6:55:12:e5:de:9c:97:86:fe:
8f:63:ac:2b:ee:89:21:44:3b:e6:0b:dc:26:ad:33:
8a:12:14:80:44:dd:a6:e5:82:f8:cd:d5:8b:f7:d5:
f5:f8:6b:a2:cb:bd:35:69:d3:ac:a6:e2:fc:b8:7d:
65:d3:e8:74:71:eb:41:24:83:17:29:64:ea:be:b8:
f3:d5:17:61:a6:2b:77:af:64:51:8d:25:21:df:ff:
67:bb:46:00:2d:e0:b3:5d:f1:e4:31:b6:d5:b5:52:
1d:ae:3b:91:2e:3f:72:c5:80:ec:fb:fd:54:36:b5:
81:85:9d:94:c2:30:83:af:ab:ae:41:b9:af:e6:79:
c3:81:1f:8f:62:ba:57:e4:3e:2c:7c:46:87:df:63:
81:3a:3a:d9:80:1c:e9:65:d8:90:14:1e:e0:cf:90:
5c:aa:56:cc:5d:d5:28:b4:f0:4f:4d:c4:9e:71:56:
9c:70:04:6f:26:03:eb:b9:5d:c9:59:04:3e:de:b5:
44:03:88:31:6c:97:ed:c2:3c:03:45:8a:ac:b6:d8:
e9:8a:20:90:5e:d3:e2:b7:30:cd:21:c2:81:05:60:
d2:0d:ab:b3:cb:c1:42:a5:06:31:22:1b:1f:fa:38:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:DC:18:77:60:E6:F1:E6:5F:03:80:12:AF:CB:57:77:A1:83:0A
X509v3 Authority Key Identifier:
keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/DSXcGHdg5vHmXwOAEq_LV3ehgwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c2:ac:20:0d:9b:6e:4b:60:79:a8:fc:81:b3:55:b5:e2:3e:
c9:ae:45:7b:76:7f:36:55:f2:9e:1f:ae:a1:0b:3f:bb:67:23:
af:07:02:fc:2c:5b:b8:1e:ae:5f:7e:e7:b3:53:fc:59:78:69:
c9:2e:67:5b:04:61:cf:5a:81:af:65:d6:5e:b7:bb:12:dd:6e:
5c:25:5a:41:37:16:44:c0:23:d3:13:d2:ea:88:d2:9e:46:59:
58:9a:6f:2f:d9:4a:28:0d:ec:49:51:6c:7b:a6:8e:66:09:b6:
7a:ed:b2:47:f1:00:a0:9f:c7:aa:16:2a:9a:7f:85:0e:d7:99:
a6:db:4a:62:44:7a:9b:a3:82:96:67:61:e4:a1:c2:c1:e7:40:
15:90:2d:b8:85:23:b7:e2:c0:61:d8:d7:5a:0f:d5:a6:41:dc:
fc:03:f9:f6:44:78:28:f0:06:75:b8:89:e7:ce:0e:98:8b:96:
46:70:f0:fb:08:f6:43:55:3b:6a:b6:68:1e:01:f4:64:af:4c:
47:17:52:d5:4c:93:15:88:35:c2:ed:14:1c:4c:64:a6:57:8a:
73:b9:7f:2a:bc:0f:c4:92:13:c5:12:fa:a8:66:7f:72:23:2a:
43:59:b3:95:c6:d2:e6:9b:d7:1e:67:07:ef:d2:30:54:cd:d7:
20:70:3d:0f
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICA30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDBE
Q0YwNTBDNENFQUU1MDIxQUE4RDMxMTk1M0YwMkQ2MTIxRkQ4RDAeFw0yNTAyMTAx
MzU3MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEMjVEQzE4Nzc2MEU2
RjFFNjVGMDM4MDEyQUZDQjU3NzdBMTgzMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdITFcYuDKhc2x0ZoG9fqc8AYMusZVEuXenJeG/o9jrCvuiSFE
O+YL3CatM4oSFIBE3ablgvjN1Yv31fX4a6LLvTVp06ym4vy4fWXT6HRx60Ekgxcp
ZOq+uPPVF2GmK3evZFGNJSHf/2e7RgAt4LNd8eQxttW1Uh2uO5EuP3LFgOz7/VQ2
tYGFnZTCMIOvq65Bua/mecOBH49iulfkPix8RoffY4E6OtmAHOll2JAUHuDPkFyq
Vsxd1Si08E9NxJ5xVpxwBG8mA+u5XclZBD7etUQDiDFsl+3CPANFiqy22OmKIJBe
0+K3MM0hwoEFYNINq7PLwUKlBjEiGx/6OETrAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUDSXcGHdg5vHmXwOAEq/LV3ehgwowHwYDVR0jBBgwFoAUANzwUMTOrlAhqo0x
GVPwLWEh/Y0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlN
T05FWS9BTnp3VU1UT3JsQWhxbzB4R1ZQd0xXRWhfWTAuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hBUFBZTU9ORVkvRFNYY0dIZGc1
dkhtWHdPQUVxX0xWM2VoZ3dvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGep1DANBgkqhkiG9w0BAQsFAAOCAQEAacKsIA2bbktgeaj8gbNVteI+
ya5Fe3Z/NlXynh+uoQs/u2cjrwcC/CxbuB6uX37ns1P8WXhpyS5nWwRhz1qBr2XW
Xre7Et1uXCVaQTcWRMAj0xPS6ojSnkZZWJpvL9lKKA3sSVFse6aOZgm2eu2yR/EA
oJ/HqhYqmn+FDteZpttKYkR6m6OClmdh5KHCwedAFZAtuIUjt+LAYdjXWg/VpkHc
/AP59kR4KPAGdbiJ584OmIuWRnDw+wj2Q1U7arZoHgH0ZK9MRxdS1UyTFYg1wu0U
HExkpleKc7l/KrwPxJITxRL6qGZ/ciMqQ1mzlcbS5pvXHmcH79IwVM3XIHA9Dw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:39 2025 by rpki-client