Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa
File: c4LoAVmfNvmmHmA5v26pvti8j0Y.roa (raw, json)
Hash identifier: F3QCsAdSCr76uq3OirACN7UfXUUV4dvPsA+GMj9iouk=
Subject key identifier: 73:82:E8:01:59:9F:36:F9:A6:1E:60:39:BF:6E:A9:BE:D8:BC:8F:46
Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial: 0187
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa
Signing time: Mon 10 Feb 2025 13:42:19 +0000
ROA not before: Mon 10 Feb 2025 13:42:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 103.236.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Validity
Not Before: Feb 10 13:42:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7382E801599F36F9A61E6039BF6EA9BED8BC8F46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:36:71:71:23:47:4a:54:f0:5d:af:a8:43:
cb:18:e8:52:da:ba:2a:2f:26:ad:21:8a:45:21:90:
89:37:42:77:6f:dd:9d:2a:53:f1:94:bc:4a:03:b9:
b9:1b:2e:e8:22:13:97:29:e6:89:9c:a9:1f:d7:c4:
26:87:09:d9:ff:87:50:67:3d:71:0a:14:b8:bc:47:
5c:5f:08:1d:a5:cb:7d:ca:35:4e:43:a9:50:99:d0:
fd:3a:fd:f9:a3:39:17:bb:d7:f9:fa:b4:b9:2d:5d:
fb:66:c8:bc:bc:7c:52:19:88:71:5a:cc:f8:00:82:
2d:54:17:3c:cc:75:aa:d6:63:14:e7:8b:11:21:6c:
9f:b1:0e:13:93:2b:ec:45:53:8c:40:da:01:ca:fe:
55:bd:18:a3:54:bb:f8:9a:67:f0:03:66:05:02:4d:
52:81:62:af:23:00:32:72:b4:e9:fe:6e:19:3a:de:
99:28:19:53:fa:3d:75:be:75:89:2c:9c:1d:eb:ba:
49:a1:38:e3:2d:ee:12:c1:52:41:81:ec:36:b9:dd:
d1:a4:17:8d:49:88:6b:e5:c1:94:96:c7:5e:89:6d:
17:bf:6d:11:2b:4d:be:70:a1:fe:17:56:86:64:86:
26:f9:ee:3e:78:ce:85:a9:a4:11:6e:36:1f:7b:dd:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:E8:01:59:9F:36:F9:A6:1E:60:39:BF:6E:A9:BE:D8:BC:8F:46
X509v3 Authority Key Identifier:
keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/c4LoAVmfNvmmHmA5v26pvti8j0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:d5:b7:46:99:a4:df:f4:b6:f9:c6:68:c0:ee:f6:28:f6:7c:
6f:26:95:62:72:ab:bf:b3:bf:6b:61:de:1c:f6:61:43:87:a1:
60:59:a6:52:e8:38:2d:12:e5:64:f8:e4:9f:1c:82:57:b1:5f:
e9:be:8d:b9:2e:69:72:24:6e:47:84:ec:bd:d6:79:96:a5:ed:
7f:f5:9c:da:57:82:87:e4:c0:ef:16:03:f9:b2:d6:81:ea:5c:
49:1f:d8:fd:76:b9:84:05:e2:28:ad:bc:db:22:9d:00:6f:49:
d2:35:1f:82:dc:e3:62:f4:d7:75:72:3e:df:7d:18:af:dd:64:
4d:33:98:bd:c4:fb:25:bb:b3:fa:3c:09:74:0d:70:62:23:c9:
92:b3:72:94:58:e7:aa:28:b1:c1:21:32:9f:51:03:4c:8c:6b:
73:e3:8c:cc:b0:81:55:49:e3:7c:b5:24:84:4f:7e:da:4f:9b:
3a:25:6e:cb:4a:1b:f1:44:64:5a:4c:11:1f:16:8a:44:7b:fd:
97:50:35:d6:0c:92:67:17:e7:5f:78:69:e0:e2:9a:7a:df:4f:
49:14:8e:97:e8:bf:93:12:0a:24:60:31:d0:61:89:a4:98:71:
96:ac:5e:c4:b8:f2:75:17:b9:49:80:23:ab:32:b9:af:98:da:
99:09:e6:8d
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3
RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNTAyMTAx
MzQyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczODJFODAxNTk5RjM2
RjlBNjFFNjAzOUJGNkVBOUJFRDhCQzhGNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWuzZxcSNHSlTwXa+oQ8sY6FLauiovJq0hikUhkIk3Qndv3Z0q
U/GUvEoDubkbLugiE5cp5omcqR/XxCaHCdn/h1BnPXEKFLi8R1xfCB2ly33KNU5D
qVCZ0P06/fmjORe71/n6tLktXftmyLy8fFIZiHFazPgAgi1UFzzMdarWYxTnixEh
bJ+xDhOTK+xFU4xA2gHK/lW9GKNUu/iaZ/ADZgUCTVKBYq8jADJytOn+bhk63pko
GVP6PXW+dYksnB3rukmhOOMt7hLBUkGB7Da53dGkF41JiGvlwZSWx16JbRe/bREr
Tb5wof4XVoZkhib57j54zoWppBFuNh973eh9AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUc4LoAVmfNvmmHmA5v26pvti8j0YwHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV
sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu
MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL2M0TG9BVm1mTnZtbUhtQTV2MjZwdnRp
OGowWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ
KoZIhvcNAQELBQADggEBAK3Vt0aZpN/0tvnGaMDu9ij2fG8mlWJyq7+zv2th3hz2
YUOHoWBZplLoOC0S5WT45J8cglexX+m+jbkuaXIkbkeE7L3WeZal7X/1nNpXgofk
wO8WA/my1oHqXEkf2P12uYQF4iitvNsinQBvSdI1H4Lc42L013VyPt99GK/dZE0z
mL3E+yW7s/o8CXQNcGIjyZKzcpRY56ooscEhMp9RA0yMa3PjjMywgVVJ43y1JIRP
ftpPmzolbstKG/FEZFpMER8WikR7/ZdQNdYMkmcX5194aeDimnrfT0kUjpfov5MS
CiRgMdBhiaSYcZasXsS48nUXuUmAI6syua+Y2pkJ5o0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:27 2025 by rpki-client