Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa
File: B1N0USczceabvQZjgsrCGYL6HJI.roa (raw, json)
Hash identifier: ggNxd1kwKJMGXza+q24nRTlFLQQl57Nbp7nOacbSCXc=
Subject key identifier: 07:53:74:51:27:33:71:E6:9B:BD:06:63:82:CA:C2:19:82:FA:1C:92
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 129F
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa
Signing time: Mon 10 Feb 2025 14:15:03 +0000
ROA not before: Mon 10 Feb 2025 14:15:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131607
IP address blocks: 150.117.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4767 (0x129f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=07537451273371E69BBD066382CAC21982FA1C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ae:db:b4:cc:e2:e3:8e:80:d4:12:89:ca:93:
0d:81:6a:07:f1:ca:dd:e8:56:b8:1d:67:08:6a:1f:
8c:1e:ad:b2:77:ed:43:40:b3:2e:64:05:a2:cf:7e:
ce:02:e5:7c:0e:c1:70:00:03:b1:4e:d9:d2:78:b3:
bc:ce:21:d0:7f:06:58:05:d8:14:58:ef:4a:4e:00:
07:75:34:21:de:47:0c:60:56:0f:ed:2e:ba:65:27:
5b:d9:37:3e:b9:53:5f:cf:58:f8:ba:30:d5:69:af:
fe:8a:b8:6d:48:be:d3:11:9e:b0:0d:c3:2b:97:7a:
f2:a9:82:eb:33:ec:e7:17:5d:35:85:df:23:05:7d:
1f:69:b2:80:f6:05:40:4c:fd:8a:a6:af:b3:59:65:
ae:e9:35:84:75:fc:bd:fd:6c:1d:b9:f2:2e:e8:61:
2d:5f:48:43:67:31:03:fd:8b:5a:7e:60:30:d5:95:
f9:5b:4f:95:ac:e4:c9:c8:1a:1b:18:96:bd:33:f4:
71:92:47:36:fa:3d:46:8b:6e:1b:8d:05:ee:d1:ff:
58:32:9b:53:29:13:ae:3b:cb:a1:81:3c:3a:8e:b0:
80:05:ab:35:87:78:a7:44:16:da:c0:ee:85:bd:45:
73:12:75:61:56:8a:d8:f4:ab:66:55:d7:13:56:22:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:74:51:27:33:71:E6:9B:BD:06:63:82:CA:C2:19:82:FA:1C:92
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/B1N0USczceabvQZjgsrCGYL6HJI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.224.0/21
Signature Algorithm: sha256WithRSAEncryption
92:64:00:d7:f2:49:af:1d:23:6f:87:4d:91:10:02:90:44:74:
88:fe:ad:22:3c:65:dd:95:a8:b5:81:5d:2c:fa:f4:c7:30:f0:
91:73:8b:93:aa:49:a3:08:c5:b8:a3:81:d2:99:93:cf:04:e2:
76:93:b7:e6:af:99:d4:65:0a:8f:43:6a:14:b8:14:9e:6e:bb:
86:65:48:84:e4:1c:fa:d0:82:44:50:51:ae:38:86:bb:c9:3e:
c8:30:a4:0a:95:06:35:3c:ce:86:a4:4c:9d:b8:9a:51:d7:26:
bc:d5:8d:c5:da:2d:26:c9:8c:89:23:7b:d0:84:02:55:20:2c:
5c:16:ff:d5:2d:92:56:96:0f:17:ce:56:ec:b8:85:74:cb:60:
8a:06:11:19:1d:d6:2f:0d:a0:12:2e:3c:a6:f0:f2:75:46:46:
dc:9e:95:1a:62:af:be:97:5a:aa:ab:a1:8c:18:49:a7:dc:23:
a9:e3:81:1c:db:af:aa:89:a9:b2:30:a5:85:a9:ce:8b:ea:a6:
34:33:a4:74:2e:a7:55:0e:e0:ef:51:26:2d:27:41:fe:e4:c5:
13:28:d3:fd:ed:d3:32:2e:1f:79:63:4b:17:a2:5f:0b:81:5f:
38:0e:73:ea:02:24:48:42:c5:10:bb:30:97:71:f6:30:c6:07:
87:28:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:27 2025 by rpki-client