Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa
File: -LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa (raw, json)
Hash identifier: iRDk2Oqad20hAKeEZC3fxkepM/Lnpw5Rxv0JCz7TknQ=
Subject key identifier: F8:B6:8D:49:DE:5B:73:23:70:7E:F2:50:12:75:96:D1:8F:94:3D:3C
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0EDC
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa
Signing time: Mon 10 Feb 2025 14:12:02 +0000
ROA not before: Mon 10 Feb 2025 14:12:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63897
IP address blocks: 103.135.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Feb 10 14:12:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F8B68D49DE5B7323707EF250127596D18F943D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:4c:1e:10:67:16:e6:77:af:73:15:79:7d:
2c:72:1c:af:e4:ef:dd:ee:52:64:fd:81:66:7c:57:
73:78:d8:d9:03:cd:e8:34:69:04:bf:f3:a2:69:00:
2c:37:bd:80:c2:e6:72:99:48:be:d9:09:4e:a2:94:
20:79:7a:ee:a8:01:84:c9:14:b5:36:ba:4c:3e:e8:
a7:ad:aa:76:69:04:c6:75:05:3e:e4:a3:dc:be:82:
3a:34:c8:21:30:6d:6d:e3:fd:dc:0b:ad:c3:af:54:
95:a2:0d:7e:0f:93:00:ef:39:0f:69:d3:0a:cf:9e:
da:35:2e:36:39:ed:d9:c7:79:4a:5f:6c:61:ea:21:
82:cb:1e:91:04:3a:ec:0d:a4:b7:06:44:b6:66:a2:
62:bc:d9:b1:5e:26:2c:52:35:2a:d6:2d:0a:33:6e:
73:db:77:37:98:60:9c:62:3a:cf:ee:65:71:ea:40:
9e:1e:b4:68:96:3f:d0:8c:0d:d4:04:e5:a4:7c:84:
45:77:90:29:26:65:a6:8f:95:31:39:7a:a4:08:f2:
26:8b:d9:4c:8c:02:49:c0:3c:7a:62:8c:45:96:39:
61:89:bf:0d:f1:fe:69:ec:91:d1:15:43:1c:ea:7e:
cb:d5:e4:76:6b:91:bf:89:b1:2a:d8:29:5d:ed:ae:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:8D:49:DE:5B:73:23:70:7E:F2:50:12:75:96:D1:8F:94:3D:3C
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/-LaNSd5bcyNwfvJQEnWW0Y-UPTw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.21.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a0:e4:bd:a4:17:cf:31:51:53:0f:11:f7:9e:64:ca:e3:83:
b0:c7:9c:4d:fd:32:63:99:66:46:55:1f:ce:97:66:cb:03:ed:
2a:79:f1:73:c6:09:8a:32:21:d9:d9:47:9a:3e:e9:5e:b4:c5:
ae:0d:a9:ef:0c:5f:67:33:5b:92:b2:36:42:13:1e:54:5e:81:
46:8c:d4:a9:32:2b:4b:07:84:c1:8b:e0:8c:48:e8:42:6f:8b:
09:b3:60:41:e8:f8:91:d2:0c:f8:59:72:bf:02:4c:c9:15:23:
25:88:26:1f:4b:1d:4c:e0:24:b2:e7:7e:ab:71:e9:21:c4:35:
64:cc:a7:97:53:42:f8:32:bd:f9:b5:86:43:5e:9b:3c:63:50:
87:01:d2:e2:f8:94:06:ca:68:cd:34:ce:b7:f6:18:90:6f:f0:
13:7c:7d:81:31:8c:b5:45:2b:93:92:bc:8c:6a:88:fe:96:3c:
75:27:86:ae:46:bd:d7:1b:70:19:15:7a:ff:b6:c2:a7:60:92:
5a:7f:ce:c8:19:bf:52:52:bf:ab:3a:c4:9c:49:9d:38:55:90:
9d:29:2f:ba:25:f4:eb:f5:7f:ce:40:26:f0:5d:ff:bf:53:1c:
8e:7a:dc:d7:40:27:97:f5:6d:bd:75:f4:41:f9:a7:31:95:cd:
de:74:16:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:45 2025 by rpki-client