Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/qJAWhq6IL4nkm8o9Ejy3FgHJ3f8.roa
File: qJAWhq6IL4nkm8o9Ejy3FgHJ3f8.roa (raw, json)
Hash identifier: s3ypu/ktlaa4ZZZeYOzknrh//O30E2xXTwR/eHHfETM=
Subject key identifier: A8:90:16:86:AE:88:2F:89:E4:9B:CA:3D:12:3C:B7:16:01:C9:DD:FF
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0C6B
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/qJAWhq6IL4nkm8o9Ejy3FgHJ3f8.roa
Signing time: Mon 09 Dec 2024 03:21:46 +0000
ROA not before: Mon 09 Dec 2024 03:21:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 396982
IP address blocks: 103.122.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Dec 9 03:21:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A8901686AE882F89E49BCA3D123CB71601C9DDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:85:77:a9:4d:e0:9e:8d:57:4c:87:dc:5b:
9e:98:fe:dd:05:e1:f2:26:7f:d0:99:3c:7e:ba:ee:
26:e7:ae:5d:f6:47:48:c7:fd:4d:97:7e:6a:fe:28:
c2:13:0c:78:b0:6b:f2:09:8f:f6:08:b9:4d:ae:dc:
2e:38:98:7a:ce:ba:b4:c6:b8:4c:6a:6d:a5:44:c0:
71:52:fc:5e:42:77:22:34:f3:12:5f:10:b9:bc:d2:
71:45:b1:65:3c:46:1a:fd:47:c4:c7:81:aa:3c:57:
60:dc:8e:44:ba:68:c2:4e:4c:e7:6c:1d:98:04:47:
ae:3a:82:c0:4c:a7:6a:38:15:81:9d:68:e5:d7:e2:
07:ed:ed:c9:80:76:ba:f8:e6:c2:e4:e1:50:d3:02:
6c:d4:bb:65:02:16:93:c9:7d:14:59:e9:70:a7:a3:
0f:4a:2c:be:7e:ca:cf:b6:77:1d:fc:d6:a1:5b:12:
f9:e3:62:fd:f7:94:c7:65:fd:72:15:6c:02:5d:85:
b7:33:e2:cc:f9:56:7c:10:aa:61:b8:8b:b4:86:13:
ef:fe:a2:f5:a4:52:47:fb:03:3a:58:67:f9:4b:50:
5f:1e:c8:6e:46:e3:fb:e6:78:54:36:96:57:0f:75:
30:21:1c:60:84:8a:82:6d:f8:08:47:16:fb:b8:ef:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:16:86:AE:88:2F:89:E4:9B:CA:3D:12:3C:B7:16:01:C9:DD:FF
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/qJAWhq6IL4nkm8o9Ejy3FgHJ3f8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:df:2f:26:91:13:e4:f1:a2:55:df:dc:73:8c:45:a6:93:25:
ba:65:89:d2:9f:02:9e:50:36:89:43:58:18:a4:54:d3:79:f9:
9a:b5:e8:31:bf:61:7c:ce:8c:ac:78:36:6d:93:c7:ca:45:d8:
20:97:40:18:37:eb:3f:79:f5:80:33:b7:bd:7f:90:ea:eb:b3:
6c:f2:64:79:2e:3e:d6:d0:bc:14:19:21:e3:d3:b2:98:ec:9f:
7e:42:67:a5:f6:19:31:c2:4f:ad:9a:5b:74:06:26:0e:d0:ac:
66:f7:c5:fe:47:0a:de:49:a3:e3:5c:94:0c:08:c1:66:91:ec:
3d:76:f6:65:65:9b:de:c2:22:55:ef:6a:dd:2a:1b:fb:e2:1d:
06:0e:b0:db:81:78:55:f7:34:0c:97:54:87:5d:ef:c6:e1:94:
cd:c9:aa:a7:13:94:3a:10:21:57:fa:0c:3f:b8:7a:ed:79:e1:
8d:72:bb:5b:06:34:ed:f4:2a:c3:0f:15:0d:51:42:73:0c:a9:
16:75:85:f8:ae:24:6b:98:4d:b5:06:b5:3f:b7:e5:56:98:21:
fa:47:a7:a9:25:e0:67:2d:e6:74:0c:c7:02:a0:48:ed:ca:80:
99:bd:e8:c0:aa:cc:58:fd:ce:e8:d4:0e:6a:7b:39:77:ad:12:
90:03:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:09:23 2025 by rpki-client