Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa
File: 3IPXO0Uwk_IveGOSDc68OJlJv4g.roa (raw, json)
Hash identifier: RiKoikzIoTKHlrKHKzfC5BEKNoVw1AO7y2Px6Ysbnlg=
Subject key identifier: DC:83:D7:3B:45:30:93:F2:2F:78:63:92:0D:CE:BC:38:99:49:BF:88
Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Certificate serial: 020B
Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa
Signing time: Mon 10 Feb 2025 14:02:22 +0000
ROA not before: Mon 10 Feb 2025 14:02:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9915
IP address blocks: 103.67.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Validity
Not Before: Feb 10 14:02:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DC83D73B453093F22F7863920DCEBC389949BF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:6c:57:65:ec:81:dc:9a:dc:a5:fb:5c:2e:
47:9a:cb:75:c3:cb:d7:8f:77:da:00:41:36:1b:ca:
ab:fa:97:4d:43:42:46:f7:af:18:8f:75:d3:7e:78:
c2:d1:7a:02:3b:3a:4d:f4:e3:fe:23:29:5f:77:22:
b8:a1:d0:81:94:96:52:30:03:35:8a:fd:38:53:91:
a6:5b:0a:b8:c0:9d:42:a5:69:c8:6d:9f:b2:63:6b:
f8:09:b4:83:ad:9d:f2:1a:d8:1e:32:3c:f0:fb:a7:
eb:2c:2e:0e:95:8c:a2:a3:f3:10:30:15:a3:9c:e8:
47:b3:11:eb:a9:76:ca:ef:42:e7:f3:74:dc:f6:54:
cc:cc:e7:dc:8d:04:7b:9a:75:ff:d6:5c:92:83:7c:
32:ed:ea:3a:a6:8d:32:d2:f8:84:c3:29:60:ba:a7:
e4:26:63:cb:d7:2c:7a:a5:18:b1:26:ff:53:e5:43:
2b:b1:66:58:93:8b:19:cb:31:30:4a:5b:27:f3:96:
69:d3:5c:c0:d0:8f:ce:b4:c4:4e:12:69:5a:a1:4f:
9d:2f:7e:66:c0:e3:3c:c9:0a:79:f9:30:9b:e8:2d:
ab:57:dd:b8:f6:b2:19:95:47:8b:c3:98:b6:b5:cd:
00:00:9f:06:03:db:29:67:5e:22:c4:fc:10:ab:c7:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:D7:3B:45:30:93:F2:2F:78:63:92:0D:CE:BC:38:99:49:BF:88
X509v3 Authority Key Identifier:
keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/3IPXO0Uwk_IveGOSDc68OJlJv4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.160.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2b:86:17:40:ad:87:7f:1a:e1:85:e1:60:0e:0e:c6:ac:9a:
3a:3b:80:ba:7d:cf:c9:c8:f7:09:80:8d:56:dc:f4:ea:9d:6e:
ad:62:6d:84:a9:5b:78:5d:8b:8f:95:9f:df:77:8c:b0:ee:fa:
8c:75:8d:67:1f:d1:ef:f4:10:9e:1d:45:e6:fc:3b:7a:21:25:
3c:1d:f4:d8:de:d0:0d:d4:4a:7c:b6:32:0f:84:f0:b5:aa:fc:
25:48:1f:50:69:e1:81:bc:c7:e4:db:e3:ed:e7:d6:83:88:22:
ac:23:8c:79:75:3f:b9:dc:db:45:b0:fd:1b:cc:1a:61:40:2a:
c2:86:93:97:6f:7f:8c:84:26:c7:bb:76:1a:f8:e1:c3:5e:e5:
d4:93:5e:74:59:e5:18:bd:79:4d:8b:45:86:d0:eb:a0:cb:20:
45:b8:f7:c9:e5:8d:f9:93:a9:4b:d9:a8:d8:a7:98:bd:20:0a:
34:ba:4d:4e:23:c0:aa:f0:cb:8d:7b:20:1a:48:07:75:e7:8d:
47:5b:c2:0d:3d:a6:b6:88:24:0e:fb:d9:d9:98:31:20:19:fd:
1e:43:ec:75:a3:f5:51:42:09:fe:1c:10:29:98:59:32:18:e6:
aa:91:2e:5a:95:ea:f1:28:cb:dd:2e:b6:9d:03:af:ca:fc:9f:
33:8d:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:39:25 2025 by rpki-client