Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/Ax16T0lyfkw8irf3v-1Bq9i7daw.roa
File: Ax16T0lyfkw8irf3v-1Bq9i7daw.roa (raw, json)
Hash identifier: UiKSoSTaCz0ZTK8i8m6kaTVffsc0oO1hr6SkmxYZ3Bk=
Subject key identifier: 03:1D:7A:4F:49:72:7E:4C:3C:8A:B7:F7:BF:ED:41:AB:D8:BB:75:AC
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CB1
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/Ax16T0lyfkw8irf3v-1Bq9i7daw.roa
Signing time: Wed 04 Dec 2024 18:56:28 +0000
ROA not before: Wed 04 Dec 2024 18:56:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 18:56:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=031D7A4F49727E4C3C8AB7F7BFED41ABD8BB75AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:a5:21:b9:71:cf:bc:51:bf:ba:49:e9:4b:
a4:fa:d7:ab:8f:68:54:10:bf:2d:d1:b5:ab:4b:cc:
08:05:fb:c0:65:b2:95:44:2e:49:41:bd:db:df:72:
a7:7c:3e:a8:b0:b7:ff:ca:dd:0a:34:11:b0:f5:d3:
1e:04:4a:64:e5:be:c6:ce:77:3e:89:f3:48:a6:82:
fc:63:91:0f:20:e8:c0:93:f9:44:39:20:51:32:6c:
8b:c9:23:15:06:8c:a3:93:6e:e1:e5:ec:28:94:e3:
85:95:71:41:ae:09:e7:c6:70:3c:ea:4a:75:41:6c:
18:9d:74:62:a9:a5:b4:0c:54:0f:21:c3:9c:cf:99:
b9:b3:54:61:09:6a:cc:5d:72:c5:3f:48:87:6c:84:
10:f9:ba:a5:1f:6c:84:1e:2a:e2:6f:e7:34:d8:eb:
b0:01:48:3f:34:4d:13:f0:df:a1:f3:5f:c8:a7:79:
a6:6e:ea:55:68:71:29:0a:e3:00:22:a5:22:64:3d:
d2:42:46:7e:c6:d0:63:fc:26:2f:52:2a:e6:87:3d:
0d:e5:de:37:c2:d8:ca:16:d3:74:0f:0c:cf:54:5d:
96:7d:c4:4f:11:9f:40:50:ce:4a:05:84:42:cb:1b:
99:09:1a:3d:42:6d:e3:28:3c:5d:82:b2:f5:2f:e0:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:7A:4F:49:72:7E:4C:3C:8A:B7:F7:BF:ED:41:AB:D8:BB:75:AC
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/Ax16T0lyfkw8irf3v-1Bq9i7daw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:f1:67:2e:a1:a8:37:43:5e:96:b8:c2:cb:3f:9b:e6:3f:a1:
19:5a:df:6f:33:6c:4d:6e:92:6b:fa:af:dc:a0:4c:6e:33:46:
2d:b1:c0:ef:e6:a8:a5:9d:37:d0:1d:99:1e:77:29:bc:16:5a:
09:35:b9:66:06:bb:9e:4d:b7:ba:2c:f5:07:b3:7b:37:a9:70:
be:fe:70:0b:76:1d:81:c4:3b:ba:b1:b1:d9:a5:dc:0e:7e:06:
ac:9f:1e:20:28:c8:66:c7:70:3a:e4:a1:e9:8c:18:ff:7c:10:
7d:63:9a:e8:3b:05:ca:a5:47:96:9e:9f:dd:05:db:33:30:9b:
cf:c2:60:7c:d9:a9:22:16:f4:56:72:83:07:de:39:26:6a:80:
ca:de:82:98:f6:cf:ce:56:9c:b8:08:1d:7b:8b:73:79:1e:f0:
72:ad:51:cc:32:7e:87:69:38:b5:4b:72:38:35:13:29:96:5d:
60:c2:3d:32:59:c4:d0:3e:10:74:8d:a0:bd:ca:92:50:5f:8d:
8d:1b:55:6c:a3:ce:c6:6c:5c:80:33:21:cf:9c:0f:d7:ec:21:
33:3e:cf:e9:56:ef:9b:72:a4:ea:6e:de:71:0c:dc:a8:a3:53:
77:36:53:ea:31:b7:47:d3:83:46:94:a0:49:f2:f5:10:95:4f:
f1:08:6c:02
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 4 22:47:26 2024 by rpki-client on console.sobornost.net