Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa
File: rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa (raw, json)
Hash identifier: 54MeS1mlwqytYpiLo8OUyb1hGtFaPS0BAz6Lrllk5Is=
Subject key identifier: AC:3E:55:C6:4F:F2:9C:EA:23:EB:EE:89:14:2C:DF:40:14:25:75:13
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0ED6
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa
Signing time: Mon 10 Feb 2025 14:12:00 +0000
ROA not before: Mon 10 Feb 2025 14:12:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 5065
IP address blocks: 103.135.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Feb 10 14:12:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AC3E55C64FF29CEA23EBEE89142CDF4014257513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:e3:64:43:d2:0f:71:9f:78:23:c7:c6:f2:
b1:b0:61:4c:fa:c6:53:5a:c5:50:cc:98:69:25:0d:
5e:ed:30:7e:e3:8e:e9:5e:91:50:9f:fd:b2:d7:32:
d7:4c:93:88:25:76:7c:3b:b9:db:16:ae:7b:db:49:
f2:68:82:18:dc:54:99:11:e6:7f:46:3f:28:65:67:
2b:b0:2e:0e:e4:89:2b:7c:40:dd:57:92:17:f3:2e:
1e:39:0f:e5:a2:b7:3b:96:d7:bb:60:b5:c7:b4:89:
35:35:f3:47:45:9e:b1:46:ac:cf:2e:4d:3c:bd:6d:
8b:2c:01:69:73:b8:9f:7c:ef:96:d9:49:2d:02:9a:
e6:a9:3b:d4:b8:34:ed:b1:bd:0b:5d:37:e2:95:41:
37:4f:4f:3f:21:5b:46:81:50:46:b9:b7:64:b0:ed:
9a:7c:86:ff:87:98:e6:aa:b4:92:f1:f3:27:5f:c7:
37:92:6f:9b:67:47:0b:36:ed:c4:33:22:81:2e:ce:
a0:32:07:de:be:48:88:f4:18:68:2a:b8:e7:5d:7e:
2f:31:4f:f1:c6:64:c9:39:5f:f7:bd:97:86:1a:96:
26:d4:92:74:f1:ec:28:70:92:80:87:eb:87:02:28:
92:b0:2e:38:0d:b3:27:9d:2a:c2:a1:3b:56:20:3d:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3E:55:C6:4F:F2:9C:EA:23:EB:EE:89:14:2C:DF:40:14:25:75:13
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/rD5Vxk_ynOoj6-6JFCzfQBQldRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.22.0/23
Signature Algorithm: sha256WithRSAEncryption
50:e5:2d:ba:98:b7:1b:e6:43:41:16:58:2a:bc:20:fe:5f:d4:
2c:66:d4:41:43:58:5b:28:7b:af:d0:e0:9d:f4:85:fe:d2:0c:
74:cb:a1:fe:dc:2e:87:26:bc:f5:69:87:2a:59:de:54:8f:30:
63:0e:53:ae:26:0f:24:1e:95:e1:7c:84:f9:6c:ab:cd:d1:5d:
98:4d:b9:5d:6a:1e:0f:b7:f8:c2:db:01:41:e8:21:5f:98:7a:
02:e8:bd:b6:92:ca:54:9b:a8:62:8c:a3:71:65:5f:10:63:bd:
6c:58:0a:0a:e1:da:83:71:ca:5c:86:1a:65:9a:56:b1:6d:6c:
70:b4:92:29:0c:26:ee:48:70:94:ea:b7:fe:76:3e:0a:ec:24:
8a:59:aa:a7:23:3f:44:4e:02:f6:bc:ff:83:a2:8e:9a:f8:ca:
30:9c:8a:51:a7:40:3b:4c:f2:d5:47:a1:f5:dc:99:3f:13:35:
eb:49:5a:3e:12:c2:d1:05:30:ab:f6:79:9d:ee:38:03:74:26:
79:6f:50:3c:84:ca:07:b1:a1:6d:db:50:44:2b:e6:37:17:4b:
3b:b3:84:f5:2f:7d:18:ce:6a:70:66:01:55:f8:23:ba:fa:50:
18:a7:46:8c:79:6d:11:ce:2b:9e:3e:60:04:19:88:39:0f:f9:
30:34:74:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:53 2025 by rpki-client