Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa
File: 6BysY-hMUMnYW0VvSadd9JVzv1E.roa (raw, json)
Hash identifier: 7ESteB9RQuO/rKOyf8d+p/+WahI31XdAqAPBae+rEik=
Subject key identifier: E8:1C:AC:63:E8:4C:50:C9:D8:5B:45:6F:49:A7:5D:F4:95:73:BF:51
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 124B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa
Signing time: Mon 10 Feb 2025 14:14:41 +0000
ROA not before: Mon 10 Feb 2025 14:14:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E81CAC63E84C50C9D85B456F49A75DF49573BF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:1e:f4:61:17:84:4a:6f:b6:2a:6c:a8:8d:
bd:c6:d1:92:0c:b5:ce:2c:df:f3:af:72:af:a2:84:
2e:1f:b9:56:25:03:b9:2a:c4:0e:7f:b8:3e:8e:c6:
47:44:a9:55:13:30:c8:31:2b:10:c9:c8:9b:de:fd:
da:ce:d4:9d:76:a5:63:60:b7:59:07:b7:b4:b3:50:
66:9a:c5:03:7f:9d:59:4d:c4:f5:ba:f5:73:a4:b6:
4e:32:19:22:88:82:07:ca:bc:3d:52:6b:f4:db:3b:
81:f4:6a:63:47:da:58:0d:ca:45:bd:84:4c:fc:3d:
08:5e:82:9f:a3:89:bc:e6:9b:34:5e:86:0b:4c:2d:
44:4a:cb:fa:df:ba:48:42:0f:76:2a:1e:9d:5a:1b:
48:26:e9:02:3b:bd:ae:f5:a2:e6:22:f9:01:24:79:
8e:d5:79:e4:24:4e:8c:0f:31:4c:58:a4:89:57:68:
d6:16:db:fb:5f:d8:67:6e:88:59:1a:95:e2:af:b2:
b1:44:91:bb:36:8b:be:03:26:a0:8d:ed:c0:cd:00:
e5:ad:fe:34:19:69:93:18:b8:a5:af:cb:6c:55:52:
7d:09:0f:ae:1d:f5:4f:fc:59:78:ea:e4:c5:6c:65:
b3:f6:19:fc:37:20:6e:dc:5b:b0:50:96:bc:d9:9c:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:AC:63:E8:4C:50:C9:D8:5B:45:6F:49:A7:5D:F4:95:73:BF:51
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6BysY-hMUMnYW0VvSadd9JVzv1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.144.0/20
Signature Algorithm: sha256WithRSAEncryption
95:64:58:d1:ca:3f:a8:9b:9e:66:af:70:21:2f:eb:2e:bd:d4:
9e:aa:e6:f8:b6:28:c2:50:08:9c:e0:d6:5b:50:76:4f:0f:7c:
73:62:cb:9b:b0:8f:f6:19:08:57:f9:b1:8c:b9:80:5c:4e:1d:
0b:e8:4d:85:61:0e:a0:8f:1e:1e:e0:1d:b0:fd:78:62:71:1f:
b2:ea:11:0a:dc:e2:9c:74:0b:31:74:3f:31:36:c4:23:4e:91:
a0:bb:cc:cb:2f:c0:b8:67:99:f2:28:d9:4c:30:26:ae:6f:7f:
ea:52:66:09:a6:ea:a8:f0:67:8e:42:49:d5:0f:13:41:3f:c3:
c1:4a:31:0e:bc:cf:f2:4c:a9:fc:4b:73:11:66:2d:c7:57:1b:
ec:45:af:10:58:a8:8f:0b:45:e8:d0:f3:86:e1:52:cb:92:11:
93:68:84:57:bc:78:8e:c2:c1:a5:20:2c:4e:7f:ab:b5:82:27:
ec:41:43:66:94:7f:5b:d1:4c:89:5d:c1:0b:4c:6a:29:47:0d:
31:c2:93:9a:97:25:66:43:16:5f:d5:68:00:c6:f3:0f:0b:99:
f5:00:17:9d:2a:b3:56:24:67:7f:61:e7:d4:a6:20:d3:09:e9:
52:95:70:d1:90:ce:1a:d8:6b:62:a0:2c:86:08:3b:14:0d:93:
87:5a:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:21 2025 by rpki-client