Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa
File: Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa (raw, json)
Hash identifier: Dc+jgZV6FbEHEx+1c6V4rkSFYf0Dir0CqHxCngR7Gbg=
Subject key identifier: 5E:CC:7D:25:5B:E0:01:93:DB:F8:8B:DE:8C:22:D8:03:E0:70:C6:01
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 07B0
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa
Signing time: Mon 10 Feb 2025 13:44:39 +0000
ROA not before: Mon 10 Feb 2025 13:44:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17418
IP address blocks: 103.153.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Feb 10 13:44:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5ECC7D255BE00193DBF88BDE8C22D803E070C601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:ad:1b:21:cd:b7:61:1b:db:c6:88:3b:6b:
71:6f:a6:8c:53:6d:d4:62:78:d8:b7:47:27:a9:bf:
0f:6a:d9:ec:36:71:fe:4b:a3:37:5e:74:78:49:33:
04:d3:4d:00:aa:73:cc:ff:57:f1:04:72:78:8e:43:
d0:28:11:3f:86:a2:47:cd:f5:56:fe:b6:77:df:3e:
1c:bf:6e:49:43:52:93:da:33:28:8d:76:23:a3:07:
cf:78:0d:bb:99:7b:fc:53:69:57:8e:7a:41:09:ce:
ce:60:ea:3c:fe:3a:a8:17:e8:54:0b:44:87:c6:c6:
21:6e:94:39:f2:f8:25:c2:2a:48:66:39:c9:70:49:
b5:ad:b5:40:1a:f7:0c:45:2b:70:2a:f2:57:e7:8d:
cb:46:2a:ba:4f:3c:a8:5b:e8:c2:3b:99:68:72:58:
25:2c:a6:ae:25:a5:23:c9:ed:45:3a:25:25:3b:83:
1d:74:83:d0:a2:e2:8e:3d:cd:23:23:1e:cd:9b:47:
88:87:19:a1:99:60:1d:d3:90:84:ce:30:be:82:e2:
15:67:2f:58:ac:74:a7:37:6e:3b:0a:71:65:dc:5f:
25:58:4c:15:9b:54:dc:b4:7b:f9:f8:37:97:9d:ba:
f8:5c:73:bd:af:a8:a2:ec:02:f7:42:9b:17:a4:f7:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:7D:25:5B:E0:01:93:DB:F8:8B:DE:8C:22:D8:03:E0:70:C6:01
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e9:e1:a7:f0:fa:dd:ff:2e:b0:d6:f8:e3:82:05:13:fb:ef:
f0:cf:38:89:74:70:5a:ad:fe:07:b8:9f:69:ab:06:ed:4f:c7:
f8:cf:dc:92:21:d0:53:29:57:67:2b:ad:72:d4:27:73:05:ca:
2d:86:7d:3e:c9:3a:ad:17:ad:a2:b9:e8:5e:53:26:ca:be:fa:
e8:ae:9f:e4:d8:3d:09:24:53:a2:1f:a5:f9:f9:89:e5:2e:08:
21:37:fc:28:84:da:38:c6:21:cc:32:c4:67:19:24:c3:5f:3b:
4d:c8:59:0a:a3:ed:b3:a1:fa:ca:d0:03:23:b8:09:d0:90:af:
12:22:6b:60:84:de:8e:c6:37:e8:b5:ad:c4:a8:08:e0:05:86:
4b:95:cb:1a:b9:c3:be:c8:c0:d8:5b:19:38:7b:ff:ab:11:ac:
9a:62:9c:66:46:06:04:cd:1c:68:ee:39:93:d2:c0:ce:2c:dc:
8f:41:68:ce:ac:82:7c:e7:64:4f:b5:06:ba:9f:b9:e6:da:81:
81:47:e6:33:a3:d2:e8:79:cb:b1:ed:56:33:22:fe:6b:ac:4e:
16:fe:35:fe:7b:f9:74:00:59:23:e6:5f:21:07:33:83:ee:1e:
29:eb:e9:6f:9f:35:3b:c4:d6:4a:71:b0:08:bd:e3:25:5a:81:
50:d4:f3:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNTAyMTAx
MzQ0MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFQ0M3RDI1NUJFMDAx
OTNEQkY4OEJERThDMjJEODAzRTA3MEM2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMuq0bIc23YRvbxog7a3FvpoxTbdRieNi3Ryepvw9q2ew2cf5L
ozdedHhJMwTTTQCqc8z/V/EEcniOQ9AoET+GokfN9Vb+tnffPhy/bklDUpPaMyiN
diOjB894DbuZe/xTaVeOekEJzs5g6jz+OqgX6FQLRIfGxiFulDny+CXCKkhmOclw
SbWttUAa9wxFK3Aq8lfnjctGKrpPPKhb6MI7mWhyWCUspq4lpSPJ7UU6JSU7gx10
g9Ci4o49zSMjHs2bR4iHGaGZYB3TkITOML6C4hVnL1isdKc3bjsKcWXcXyVYTBWb
VNy0e/n4N5eduvhcc72vqKLsAvdCmxek9+BxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXsx9JVvgAZPb+IvejCLYA+BwxgEwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL1hzeDlKVnZnQVpQYi1JdmVq
Q0xZQS1Cd3hnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
mbAwDQYJKoZIhvcNAQELBQADggEBAATp4afw+t3/LrDW+OOCBRP77/DPOIl0cFqt
/ge4n2mrBu1Px/jP3JIh0FMpV2crrXLUJ3MFyi2GfT7JOq0XraK56F5TJsq++uiu
n+TYPQkkU6Ifpfn5ieUuCCE3/CiE2jjGIcwyxGcZJMNfO03IWQqj7bOh+srQAyO4
CdCQrxIia2CE3o7GN+i1rcSoCOAFhkuVyxq5w77IwNhbGTh7/6sRrJpinGZGBgTN
HGjuOZPSwM4s3I9BaM6sgnznZE+1BrqfuebagYFH5jOj0uh5y7HtVjMi/musThb+
Nf57+XQAWSPmXyEHM4PuHinr6W+fNTvE1kpxsAi94yVagVDU88o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:48 2025 by rpki-client