Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa
File: J0X1kLXkck-wx0BVTdos5Vvd3u8.roa (raw, json)
Hash identifier: cQjrH6PXj9DnjZcyAAqYjWA37sXR4WSnhN7ZW2AlE94=
Subject key identifier: 27:45:F5:90:B5:E4:72:4F:B0:C7:40:55:4D:DA:2C:E5:5B:DD:DE:EF
Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D
Certificate serial: 0134
Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa
Signing time: Mon 26 Aug 2024 05:27:44 +0000
ROA not before: Mon 26 Aug 2024 05:27:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 103.220.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D
Validity
Not Before: Aug 26 05:27:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2745F590B5E4724FB0C740554DDA2CE55BDDDEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:af:79:3e:9c:6e:28:32:76:41:ab:f7:c1:
3d:78:0e:d3:60:6b:ce:78:7f:f1:af:32:6e:f2:ae:
18:42:2e:ec:dd:ce:79:1b:85:4b:8a:6a:e4:8c:fd:
5f:fb:b2:10:ba:c4:d0:0c:d5:f5:5e:09:d9:cf:eb:
f4:d0:34:ac:83:a7:15:72:8f:aa:1a:4e:61:5c:6f:
d2:21:b3:9c:93:0f:d0:e9:fd:ff:f5:5a:7f:cc:7a:
8e:1c:e6:52:84:eb:e1:86:75:1d:51:ea:57:c2:61:
61:d0:78:94:93:5a:61:4c:a1:4f:49:da:01:58:97:
37:7d:58:ac:21:f0:79:95:46:3d:c3:58:78:e7:26:
c2:45:b3:82:d9:54:76:9e:eb:65:bc:43:a4:1f:f9:
9c:20:a8:8e:16:ec:9f:6c:3e:82:9e:c8:de:b2:3c:
3f:7c:eb:77:b6:89:61:c6:d3:f0:ca:ad:70:19:69:
bd:08:87:c5:75:65:a2:84:9d:a8:fc:4e:01:1e:b8:
a1:a8:35:d7:5e:bb:97:e2:62:ca:15:ca:c3:44:c6:
52:45:24:28:5e:3f:bc:6f:c1:87:93:f5:50:8d:a8:
29:ca:57:71:61:09:6c:c8:03:6b:48:4d:cd:35:b4:
97:5f:c7:fb:b3:fa:9f:b0:e5:22:18:3f:f7:26:c8:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:45:F5:90:B5:E4:72:4F:B0:C7:40:55:4D:DA:2C:E5:5B:DD:DE:EF
X509v3 Authority Key Identifier:
keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/J0X1kLXkck-wx0BVTdos5Vvd3u8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.218.0/23
Signature Algorithm: sha256WithRSAEncryption
12:66:2f:c5:e7:61:1e:da:38:10:d9:58:d5:c9:24:2d:5d:43:
a5:cd:a9:14:e0:1d:c8:77:70:a7:c1:88:bf:fd:e7:5a:5b:ef:
c9:54:7c:7c:78:ce:b5:d8:12:f5:1a:36:87:aa:40:4d:77:83:
f1:83:09:da:59:d7:1b:0a:d8:bd:80:ef:8d:a1:91:a9:19:75:
4a:cd:e2:e3:26:b7:c6:d5:39:87:5b:fc:39:f9:7a:95:d7:97:
d5:4e:75:ba:9c:0c:36:83:3e:0f:dd:b4:b1:8a:ee:c2:b5:2f:
18:73:c5:9e:08:a9:91:da:bb:d7:af:72:ee:e5:a9:4c:5c:69:
9f:b7:77:76:e5:7d:be:af:4b:f5:cb:65:4e:83:15:61:be:49:
f5:29:ea:d6:61:21:e5:ed:54:fb:dc:9c:04:02:b8:1b:1d:f3:
be:ed:04:81:e4:cc:66:7d:4a:88:a2:fb:10:93:4e:26:2b:c7:
9f:9d:e9:70:83:e0:9c:cc:86:62:7f:8f:9e:2f:3e:a2:64:e6:
8d:3e:12:16:d3:8f:84:b4:65:1a:07:96:1f:76:ef:c4:15:f5:
da:de:99:da:53:1a:5a:86:fa:0b:6d:89:fe:53:1d:21:82:2a:
6d:fc:df:32:34:a7:0c:81:44:f7:0b:02:45:5b:d1:81:cd:e0:
50:c6:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:45:19 2025 by rpki-client