Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DhEqXIQuAA2aoTXyEws4N4phbSk.roa
File: DhEqXIQuAA2aoTXyEws4N4phbSk.roa (raw, json)
Hash identifier: NaXAXyyJgIcnoGRjeEboh+0InjSETEE+uz0gM9Mhckk=
Subject key identifier: 0E:11:2A:5C:84:2E:00:0D:9A:A1:35:F2:13:0B:38:37:8A:61:6D:29
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0D84
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DhEqXIQuAA2aoTXyEws4N4phbSk.roa
Signing time: Fri 17 Nov 2023 02:31:25 +0000
ROA not before: Fri 17 Nov 2023 02:31:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 208932
IP address blocks: 103.135.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3460 (0xd84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Nov 17 02:31:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0E112A5C842E000D9AA135F2130B38378A616D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:39:b7:39:f1:ce:10:a4:82:18:9c:35:7f:
6b:1a:c5:55:ec:d2:d4:4c:12:c6:d2:82:00:0a:51:
8d:7f:44:5d:81:43:0d:10:af:50:80:40:5d:52:58:
ca:df:b7:19:a7:26:f7:8b:73:af:58:b1:6f:21:1b:
04:15:57:19:7a:77:cf:31:90:80:39:e9:2e:4b:dc:
b3:a8:2e:c2:77:2f:e4:d5:5e:59:78:0f:32:38:7a:
8c:74:c2:cb:71:23:68:43:9a:4d:86:23:47:8e:47:
75:a5:03:02:71:4f:e0:2a:cf:67:b3:19:23:44:c1:
02:98:00:c4:09:7d:46:99:9c:33:93:ad:35:54:2c:
de:54:7c:6b:64:66:16:6c:25:91:95:90:f7:3a:e1:
51:d7:fd:89:0e:58:8e:5d:bd:d1:00:d3:93:0b:f5:
c2:de:80:f2:7d:a0:f3:0f:30:b3:2e:07:70:60:c7:
f2:89:4b:e3:4b:0b:4a:9f:85:76:2e:17:c7:a5:2f:
af:4e:c6:ce:69:18:11:7b:b8:fe:79:b9:00:97:86:
e2:eb:0c:75:d1:5c:d9:94:8f:f9:14:9f:8f:7a:a5:
48:ea:f9:8c:c5:28:48:28:9d:20:b2:a3:6e:79:ec:
a2:52:e2:f3:a5:95:8c:21:f5:29:b3:68:d1:cc:e7:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:2A:5C:84:2E:00:0D:9A:A1:35:F2:13:0B:38:37:8A:61:6D:29
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/DhEqXIQuAA2aoTXyEws4N4phbSk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.20.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0e:ce:04:f3:25:a0:f8:10:7b:0e:f7:40:d2:20:5d:9a:f0:
01:1f:b3:58:05:71:52:0d:2c:f2:d5:2c:8e:d4:3f:b5:e4:a8:
5c:fe:a8:ff:2b:29:a0:2e:01:c8:d4:cb:77:4c:8d:19:3a:5d:
ec:04:d0:53:2b:b9:e0:0e:cd:fc:2f:31:25:64:da:9e:8d:f6:
e0:ab:1d:71:b0:f4:c4:af:3b:58:8e:a4:d6:aa:7a:33:63:b7:
95:2e:1c:37:8c:33:f0:f5:e4:62:b0:bd:ac:d1:71:ff:4a:61:
cd:5b:c0:2b:61:86:55:ba:61:a5:a2:29:65:c1:0b:c0:3f:15:
ba:a8:aa:85:70:d1:49:8d:45:e4:58:91:c9:6a:d5:be:0d:7c:
fd:da:3a:0b:bf:93:60:e2:67:40:b2:78:3e:43:e2:dc:4f:3c:
2a:4e:b5:53:29:60:d4:ae:ce:dc:ad:3f:34:e4:66:a9:1f:be:
4d:fd:4a:7a:c8:9a:80:7f:8c:2e:b1:25:34:0d:34:2f:24:95:
5e:bd:a1:e7:31:20:95:54:83:86:cc:1b:cc:1f:a7:06:3b:33:
be:03:17:a5:fe:a6:30:35:5f:8a:58:43:80:a6:e7:f3:34:5e:
d9:15:f4:85:94:db:8e:db:a9:8f:30:0f:d8:4f:d2:7f:6a:8b:
9e:2e:64:85
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4
RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yMzExMTcw
MjMxMjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBFMTEyQTVDODQyRTAw
MEQ5QUExMzVGMjEzMEIzODM3OEE2MTZEMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrkjm3OfHOEKSCGJw1f2saxVXs0tRMEsbSggAKUY1/RF2BQw0Q
r1CAQF1SWMrftxmnJveLc69YsW8hGwQVVxl6d88xkIA56S5L3LOoLsJ3L+TVXll4
DzI4eox0wstxI2hDmk2GI0eOR3WlAwJxT+Aqz2ezGSNEwQKYAMQJfUaZnDOTrTVU
LN5UfGtkZhZsJZGVkPc64VHX/YkOWI5dvdEA05ML9cLegPJ9oPMPMLMuB3Bgx/KJ
S+NLC0qfhXYuF8elL69Oxs5pGBF7uP55uQCXhuLrDHXRXNmUj/kUn496pUjq+YzF
KEgonSCyo2557KJS4vOllYwh9SmzaNHM5wNXAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUDhEqXIQuAA2aoTXyEws4N4phbSkwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/
fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vRGhFcVhJUXVB
QTJhb1RYeUV3czRONHBoYlNrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGeHFDANBgkqhkiG9w0BAQsFAAOCAQEAVQ7OBPMloPgQew73QNIgXZrw
AR+zWAVxUg0s8tUsjtQ/teSoXP6o/yspoC4ByNTLd0yNGTpd7ATQUyu54A7N/C8x
JWTano324KsdcbD0xK87WI6k1qp6M2O3lS4cN4wz8PXkYrC9rNFx/0phzVvAK2GG
VbphpaIpZcELwD8VuqiqhXDRSY1F5FiRyWrVvg18/do6C7+TYOJnQLJ4PkPi3E88
Kk61Uylg1K7O3K0/NORmqR++Tf1KesiagH+MLrElNA00LySVXr2h5zEglVSDhswb
zB+nBjszvgMXpf6mMDVfilhDgKbn8zRe2RX0hZTbjtupjzAP2E/Sf2qLni5khQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org