Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa
File: ug2ewxKtJa3GO2zTODrw7Im0dGk.roa (raw, json)
Hash identifier: ApKKuZYFEhGIjW82Rv7jzVFB96OjxPf+56E7aMxTvu4=
Subject key identifier: BA:0D:9E:C3:12:AD:25:AD:C6:3B:6C:D3:38:3A:F0:EC:89:B4:74:69
Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial: 019B
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa
Signing time: Mon 10 Feb 2025 13:42:38 +0000
ROA not before: Mon 10 Feb 2025 13:42:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Validity
Not Before: Feb 10 13:42:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA0D9EC312AD25ADC63B6CD3383AF0EC89B47469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:42:1c:e8:62:a2:8a:89:3d:5c:cc:48:b2:
32:76:c6:3f:60:4f:c5:b3:d4:5b:5a:e2:a9:10:43:
c8:91:83:6e:ff:ad:29:11:ba:f8:fb:dd:0e:98:c0:
88:b6:68:fb:92:69:28:10:45:28:54:cc:f2:24:6f:
7d:52:00:cc:d4:32:f2:8a:f3:a7:bf:1a:2b:34:dd:
f7:82:b4:67:15:bc:75:24:38:28:68:88:b7:71:84:
c3:93:5f:c6:66:6d:1b:cf:d3:44:dd:da:e1:f4:4e:
59:13:a9:35:bb:6d:05:4c:68:e4:81:98:e0:19:0e:
9d:da:bb:8c:d7:64:4f:d1:9c:ad:fe:b2:48:ea:8f:
e4:b9:ec:73:51:d7:e2:6b:88:55:4e:73:bb:ed:35:
24:66:d3:b2:9a:a3:36:e3:83:ae:83:37:42:ec:78:
b2:2a:ec:48:4d:82:da:c1:53:e6:bb:6b:67:d7:17:
c4:d9:59:30:54:0d:66:04:1f:47:a5:cf:23:c7:05:
2c:d9:94:a7:0b:aa:b3:53:a6:e6:8a:2c:e0:d8:8a:
b7:09:d0:fb:b8:63:cd:bf:f0:91:94:45:5d:01:91:
d6:e4:38:37:e8:28:48:f2:14:26:5d:f9:70:b2:c3:
ae:88:38:05:44:2b:9b:7e:29:f3:a6:dc:30:2c:99:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:9E:C3:12:AD:25:AD:C6:3B:6C:D3:38:3A:F0:EC:89:B4:74:69
X509v3 Authority Key Identifier:
keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/ug2ewxKtJa3GO2zTODrw7Im0dGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:8a:aa:e5:51:c2:45:26:d9:7a:92:6c:6e:3a:be:be:10:57:
1f:2f:8b:2e:fd:02:e8:7b:bb:ef:6c:ff:9f:27:53:d4:fc:25:
0a:09:b5:33:aa:93:48:98:7c:99:95:c8:21:38:ce:02:41:34:
64:4e:b4:07:a8:f1:7f:e8:09:b5:5e:07:c0:00:d2:ef:a9:75:
fd:4b:04:84:3b:01:2d:fb:42:df:07:ba:07:e2:14:41:19:7f:
fd:91:95:0c:d7:0f:63:d2:cd:b3:7a:53:6b:b1:e5:08:8e:12:
6e:cc:cd:55:34:56:6d:c7:44:a0:89:fe:92:38:12:90:13:c7:
08:9c:4c:e7:1d:cd:57:5f:72:2c:91:7c:9c:dc:11:7e:1f:37:
e3:61:c1:89:5a:88:43:22:31:a6:30:97:a4:5c:9e:e1:2e:21:
19:bf:44:b1:1b:4b:45:79:d1:45:e8:81:da:40:7c:24:c3:82:
38:35:d8:72:ad:6a:2b:36:36:d0:72:41:1c:54:16:9b:07:bc:
54:61:7b:8e:da:32:e0:ba:f9:bb:d6:29:de:9e:ab:d0:ca:78:
9d:79:f7:b1:d0:44:a2:a8:29:76:d1:24:20:df:f1:40:8b:d7:
d5:6d:ea:d6:80:7e:f5:00:fc:c4:d5:6b:8d:c6:f5:94:fb:17:
de:82:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:43 2025 by rpki-client