Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa
File: St-H5LkcX_BGDNr3AFRCA1M8s7s.roa (raw, json)
Hash identifier: KVRR5lsTvnmp6OkBc0ZHyRGfBSSKuL+MHJHzXf4LoG0=
Subject key identifier: 4A:DF:87:E4:B9:1C:5F:F0:46:0C:DA:F7:00:54:42:03:53:3C:B3:BB
Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial: 0E57
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa
Signing time: Mon 26 Aug 2024 05:20:54 +0000
ROA not before: Mon 26 Aug 2024 05:20:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131633
IP address blocks: 103.135.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Validity
Not Before: Aug 26 05:20:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4ADF87E4B91C5FF0460CDAF700544203533CB3BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:c1:3e:f6:09:77:7a:95:ba:97:5f:02:05:
23:80:6c:54:1a:91:62:cd:00:94:56:45:ac:e1:46:
16:f2:84:c8:1d:70:56:ff:21:9b:37:67:93:35:df:
f0:95:16:d1:b9:26:bf:e0:6e:78:c5:9e:02:ed:07:
36:af:5a:5a:a2:15:cc:9a:25:f7:f6:3f:b9:f0:a7:
bf:c9:8f:ee:60:d5:2c:8c:96:ad:64:59:81:6e:30:
24:f2:c4:79:1e:d7:91:57:e9:18:90:4c:61:7b:00:
73:5a:2e:33:3e:31:39:26:08:68:85:2e:a5:4f:61:
c3:8c:e7:6a:12:49:42:45:a5:8b:d0:fb:d4:fa:e6:
a1:fb:be:54:c8:8f:38:13:09:f1:9f:fd:7b:e4:0e:
12:7d:ce:b1:ca:bf:d3:3f:41:ba:ec:a9:ea:79:99:
76:69:ae:de:99:83:f7:be:a0:40:11:3e:f1:cf:a5:
a9:a7:88:73:4c:6a:a6:5c:bd:8c:9a:50:45:d9:d5:
4d:ff:5a:b1:d9:96:0e:89:fa:fc:e1:14:63:56:d3:
80:84:a4:0c:a5:d0:7f:53:f6:76:47:78:16:4d:95:
45:c0:94:89:f7:93:2a:6a:a5:04:b3:0e:76:d1:78:
07:84:90:e8:03:0d:6e:81:f0:79:a6:50:e8:e5:8f:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DF:87:E4:B9:1C:5F:F0:46:0C:DA:F7:00:54:42:03:53:3C:B3:BB
X509v3 Authority Key Identifier:
keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.20.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ea:0c:b3:e8:b7:95:55:de:6a:33:0d:08:f0:63:11:88:83:
dc:43:9e:ab:10:59:dc:48:ae:f3:4e:f2:f2:2d:42:41:c5:5e:
80:51:75:66:13:a7:df:af:d4:69:79:9f:63:3b:36:18:a0:ab:
6c:2e:39:02:d2:b7:53:f0:b4:66:39:9f:a6:22:41:31:ff:ac:
8a:a9:e3:02:ac:27:87:b6:53:41:a2:42:1e:e7:c4:35:6a:11:
79:8e:17:f0:49:6f:10:e9:1a:0b:70:30:04:08:d2:28:2e:bd:
81:6e:41:50:e8:be:13:79:3d:06:93:81:71:e9:88:d0:cc:e7:
b1:df:c6:4a:9a:8a:f8:90:58:8a:98:15:26:d3:82:17:77:d0:
ea:74:bf:01:e6:5d:b5:a9:7e:ce:4b:6b:24:03:19:e2:58:fa:
71:75:0c:57:a1:16:29:ee:b5:4d:91:10:9b:f4:3a:57:a4:9a:
7a:86:b0:a8:c3:a4:aa:0f:12:56:82:0c:9d:94:70:eb:71:53:
e5:d0:a7:96:8c:3e:bf:b9:b0:26:16:4c:59:23:7d:e3:18:ca:
0b:cd:f1:32:07:e7:77:1d:35:6f:ad:ed:ab:5d:f6:8c:2c:0a:
78:bf:f3:e1:b7:7d:ad:3f:d0:04:2e:58:c7:e3:14:3f:e2:84:
6f:72:82:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:49 2025 by rpki-client