Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/jnLQjztvxw9vQpc1H9FsDKf_E28.roa
File: jnLQjztvxw9vQpc1H9FsDKf_E28.roa (raw, json)
Hash identifier: UNqaMyebJwnnkFcFbVd/JSZ1xnycNNp4ET9j/8dspfU=
Subject key identifier: 8E:72:D0:8F:3B:6F:C7:0F:6F:42:97:35:1F:D1:6C:0C:A7:FF:13:6F
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0ED4
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/jnLQjztvxw9vQpc1H9FsDKf_E28.roa
Signing time: Mon 10 Feb 2025 14:12:00 +0000
ROA not before: Mon 10 Feb 2025 14:12:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 5065
IP address blocks: 103.135.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Feb 10 14:12:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8E72D08F3B6FC70F6F4297351FD16C0CA7FF136F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:90:63:6f:90:b9:55:0d:29:40:93:93:84:
73:81:2b:97:e7:7b:e6:10:ef:9d:76:15:84:2c:e5:
a8:3a:3a:8b:6d:5c:56:0e:a2:47:e6:4c:d1:d6:70:
c5:96:d2:5d:ad:ca:87:ef:d0:08:21:2d:31:52:6d:
05:2a:72:6b:32:ce:42:14:b9:15:17:1a:c3:25:f3:
c9:00:2c:a4:63:6c:c4:09:9f:bb:6e:87:58:ca:81:
57:be:8f:7e:1d:4b:2c:c4:da:07:33:05:b2:41:ac:
93:a8:1b:58:8e:92:73:7a:f9:75:df:04:e5:1d:03:
a2:b9:0b:b3:b6:cb:e3:8d:6b:16:67:5e:32:fe:37:
f9:12:95:5f:53:0e:b7:d9:d8:6c:04:e8:99:66:80:
54:24:3f:ea:8f:cc:9a:cc:6d:2d:5a:a9:52:06:4f:
b0:86:eb:ed:3b:33:59:d1:74:31:70:ca:8e:e0:be:
d3:bb:5d:71:47:20:20:c7:cd:bc:c6:05:62:a0:4e:
08:85:97:8f:10:6b:79:8f:f6:96:e1:4c:4c:2b:ee:
13:8d:be:6c:bf:62:28:1d:5b:01:21:c0:ba:0a:25:
a8:ae:29:79:fc:1d:4c:d5:9a:0d:cc:fe:d5:b6:88:
38:1e:4c:a1:24:89:40:16:ae:b4:30:36:ef:1d:5a:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:D0:8F:3B:6F:C7:0F:6F:42:97:35:1F:D1:6C:0C:A7:FF:13:6F
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/jnLQjztvxw9vQpc1H9FsDKf_E28.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:23:26:ab:a7:3d:78:cb:d3:a2:c6:7e:0d:ca:cb:be:c0:15:
3f:2d:9b:64:fa:67:a4:d3:31:e6:9c:76:d4:9c:cd:67:16:19:
60:8d:87:db:d4:90:7e:6b:14:0a:9c:63:e6:6c:6c:02:bd:b1:
77:06:1b:2b:ff:8e:7f:87:0a:c7:98:f8:c2:14:28:c1:50:02:
26:08:a5:7c:28:76:11:f5:bf:70:55:cc:78:12:f5:71:f5:8a:
7a:fb:33:4d:78:0f:83:c6:a5:c1:c3:f2:03:cc:1a:51:45:51:
de:22:11:d0:01:ac:7c:97:76:30:d5:72:11:8a:d4:06:02:ba:
a2:22:4c:43:a9:c4:86:63:cb:74:7d:2e:94:55:2c:7b:43:59:
2d:4d:1f:bb:54:d7:82:47:a7:96:db:57:be:d9:5c:22:fb:df:
fc:57:99:94:93:41:fc:29:6a:79:41:6a:84:47:25:76:06:f6:
82:02:1e:0b:d1:1d:2b:a7:47:af:52:b7:62:8f:9f:b9:52:00:
d5:77:97:ed:1d:10:2e:4c:ee:e4:2a:d9:e5:b8:81:68:9b:7e:
3e:e6:26:d5:25:5c:04:aa:50:c9:83:48:7b:95:02:67:f9:6c:
ff:10:71:3a:3f:27:ea:c4:bd:b2:5a:15:35:6a:0b:fd:8a:b4:
ce:44:3d:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:39 2025 by rpki-client