Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa
File: WsgN_xKfukmQhWxbg9-JwMoPmmY.roa (raw, json)
Hash identifier: 3TM0yfRdg6Wy/SOcYgYDK4CwMu53s+7ClRK6A8imPMw=
Subject key identifier: 5A:C8:0D:FF:12:9F:BA:49:90:85:6C:5B:83:DF:89:C0:CA:0F:9A:66
Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial: 01D2
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa
Signing time: Mon 10 Feb 2025 14:26:25 +0000
ROA not before: Mon 10 Feb 2025 14:26:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 8075
IP address blocks: 103.131.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Validity
Not Before: Feb 10 14:26:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5AC80DFF129FBA4990856C5B83DF89C0CA0F9A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:10:c4:da:b4:da:de:28:ed:2f:e9:f0:0b:
a0:38:e5:5f:d2:bd:34:04:20:39:7f:8e:71:ba:fa:
b1:f1:f3:2a:88:5a:02:8f:20:37:ce:db:b4:7b:04:
07:b7:d9:58:98:d8:af:5e:d3:52:ae:33:6d:b4:f6:
95:17:c4:01:2d:46:ff:27:a1:82:33:1e:99:0a:cf:
e8:61:5a:f7:e0:70:5e:ed:7e:0e:29:82:40:97:eb:
5a:72:76:78:fa:e8:d8:98:5c:bb:68:d7:61:64:41:
85:98:fc:21:31:02:9b:21:36:7d:32:57:96:ad:41:
b2:b8:04:8d:e7:af:37:83:73:58:32:eb:a7:f8:22:
93:d6:8b:63:70:a6:3f:1d:f6:ed:a4:83:1f:67:04:
cd:4e:6d:49:70:89:cf:f9:16:3d:a9:2e:58:9b:15:
8f:04:b5:c8:89:3f:09:d1:ba:f0:7d:68:e4:5e:a6:
1b:a0:4f:67:c1:2c:8c:a4:e6:57:c3:06:54:94:17:
d2:51:6c:e5:f3:7d:65:3e:52:3e:61:a1:63:c3:76:
e8:5c:b0:ff:43:c9:b0:75:71:3f:27:8a:f2:d3:74:
d0:61:0f:18:7f:ae:90:26:81:97:b9:da:22:b1:ba:
ee:90:46:81:8a:79:a4:90:b8:ce:85:02:a2:f0:99:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C8:0D:FF:12:9F:BA:49:90:85:6C:5B:83:DF:89:C0:CA:0F:9A:66
X509v3 Authority Key Identifier:
keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/WsgN_xKfukmQhWxbg9-JwMoPmmY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9b:9e:92:3b:d2:01:f2:3d:b1:27:7d:bb:ab:59:a7:23:07:
dd:01:92:89:a2:ba:b0:2d:2c:f3:b2:52:9e:e8:8a:0c:39:fa:
1c:94:6f:b2:c6:00:ea:6e:c0:fd:49:88:df:bb:42:0f:65:cb:
77:2c:64:e0:5d:89:aa:3d:6f:9d:31:b3:9a:84:d5:99:09:71:
5f:a6:0d:a4:20:a6:b8:37:5f:06:af:98:ed:a6:57:c4:a7:67:
a5:0e:ce:c8:ea:96:ea:b4:88:3d:6f:fb:20:76:01:63:af:86:
b8:42:89:4e:98:82:32:3c:c8:65:41:0c:89:11:d2:5b:63:45:
ee:dc:4d:ab:b6:e8:91:2f:df:0f:8e:1b:87:a0:c8:90:2c:6e:
a4:e6:4d:73:47:b2:20:39:81:e7:c5:ab:5f:2b:59:ed:52:5c:
5b:bc:1c:3a:30:4b:a6:a1:7f:fa:0a:07:94:8b:dc:95:5e:14:
53:32:a5:f3:e3:aa:c1:78:c9:22:07:83:9a:11:0a:64:1c:19:
fd:6d:1c:8f:8c:65:98:77:54:2d:dd:1b:b5:12:52:8b:ec:00:
df:e9:0b:8c:df:26:ac:f6:1a:61:ab:4d:25:fa:47:ce:e0:3e:
9c:d4:8a:82:1d:ca:30:6e:9c:d1:1c:93:22:ff:3f:93:15:18:
42:c8:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:58:04 2025 by rpki-client