Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/5LjmM8TjDjX8m4EZ_CNlRlWBwiY.roa
File: 5LjmM8TjDjX8m4EZ_CNlRlWBwiY.roa (raw, json)
Hash identifier: Q8q949YYS+KpAgl625K113PmScihYROdwJN8stdwFbc=
Subject key identifier: E4:B8:E6:33:C4:E3:0E:35:FC:9B:81:19:FC:23:65:46:55:81:C2:26
Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial: 0CCC
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/5LjmM8TjDjX8m4EZ_CNlRlWBwiY.roa
Signing time: Mon 10 Feb 2025 14:15:25 +0000
ROA not before: Mon 10 Feb 2025 14:15:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 103.123.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Validity
Not Before: Feb 10 14:15:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E4B8E633C4E30E35FC9B8119FC2365465581C226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:26:7a:5a:e4:35:4e:82:b1:90:39:f4:da:
2f:d4:2c:36:3c:e7:18:80:5e:4c:4d:f1:d7:04:95:
1d:d9:2b:75:a0:6c:06:9f:f4:ca:04:ff:6a:28:77:
7a:bf:01:3a:d3:6b:19:b4:63:cc:ce:3c:44:92:b3:
d8:c5:e5:ca:15:dd:31:83:80:22:60:85:cd:72:41:
8d:65:23:f4:d0:56:75:6e:d3:1f:cd:26:9b:41:9e:
86:2e:8e:1a:c1:71:cf:4a:44:6e:ad:94:14:a5:e8:
2b:de:89:15:c9:9e:5c:fe:16:f4:e0:80:41:4c:54:
c5:61:af:dd:fe:2b:e0:f6:bb:81:85:0e:b5:fe:ad:
a8:e6:bb:81:85:ff:09:27:bf:eb:52:3b:bb:ca:d7:
3a:b5:4c:d6:a3:83:63:2a:20:1d:b8:a9:8c:27:90:
0a:7a:f8:2f:02:46:0f:76:67:10:e2:0f:da:86:79:
4f:4c:75:ef:f2:d1:cd:43:13:fb:e2:c5:f4:92:64:
fc:19:e9:22:e2:ac:ec:f0:7c:1c:92:42:28:a3:95:
ed:82:49:bc:1e:0d:1b:6e:ef:1a:cc:55:b1:24:0a:
e2:6d:d5:c6:16:8c:82:33:f1:40:1a:a1:09:10:9c:
a1:e9:72:ab:cb:91:a8:af:b4:4a:f8:6e:ea:21:3e:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:E6:33:C4:E3:0E:35:FC:9B:81:19:FC:23:65:46:55:81:C2:26
X509v3 Authority Key Identifier:
keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/5LjmM8TjDjX8m4EZ_CNlRlWBwiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.140.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8c:b8:9b:52:74:c6:c4:17:d0:b6:a1:44:73:e4:e6:6d:72:
9b:0d:e8:02:54:3a:80:f7:29:23:e6:63:e7:62:67:42:6f:8a:
d2:45:1c:cc:22:c6:57:95:52:10:f6:b2:3d:82:f3:c9:71:50:
7c:b6:f7:63:ef:01:26:ce:b9:ca:c7:69:5d:fe:e3:40:a2:4b:
56:55:77:56:51:e8:81:d1:bd:00:be:db:07:6c:c2:97:bf:76:
a3:1d:a3:e4:bc:74:b5:26:46:22:59:5a:44:a7:52:07:57:de:
dc:9d:68:2e:b0:a7:cd:16:d0:9d:dd:ad:4f:c5:f8:2a:eb:eb:
6d:48:6d:6b:e4:70:5a:81:f7:7d:95:4b:05:0e:11:a6:dc:0c:
e0:20:82:d6:26:20:27:49:4f:e0:06:ce:d0:b3:73:b0:05:3e:
a1:0a:b5:ac:14:96:d3:8c:d9:59:76:17:3e:e7:88:64:92:74:
04:59:76:1b:ed:97:71:29:81:fe:50:4e:dc:95:7e:48:14:69:
ef:0e:9b:b8:9e:cd:f5:1d:32:b0:37:45:4d:5c:10:1a:e8:d3:
c8:2f:b5:41:90:17:9c:11:16:ed:9e:3d:a7:39:1e:d1:1f:e4:
93:db:93:18:19:4e:ec:14:40:e4:e3:4c:8f:f1:8d:e3:87:b5:
1d:70:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:26:55 2025 by rpki-client