Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TvT8THdOkbnoD056jk5RsXYfpyY.roa
File: TvT8THdOkbnoD056jk5RsXYfpyY.roa (raw, json)
Hash identifier: 389Zg/9zEyCMmk+JUCnaS99jAP3Ags4V4j22FeJr7SM=
Subject key identifier: 4E:F4:FC:4C:77:4E:91:B9:E8:0F:4E:7A:8E:4E:51:B1:76:1F:A7:26
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1287
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TvT8THdOkbnoD056jk5RsXYfpyY.roa
Signing time: Mon 10 Feb 2025 14:14:57 +0000
ROA not before: Mon 10 Feb 2025 14:14:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9831
IP address blocks: 203.163.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4743 (0x1287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4EF4FC4C774E91B9E80F4E7A8E4E51B1761FA726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:2c:4c:f6:43:e0:8d:e3:b2:c0:7f:32:b4:
7e:16:b7:09:95:b4:84:d9:ba:57:a9:8e:5f:ad:43:
15:3e:e7:b1:34:db:91:aa:90:fb:c6:da:ad:f5:ec:
71:d1:af:11:9a:6f:36:89:fc:f0:e3:d0:5f:49:b7:
48:63:07:0d:36:4e:83:27:de:0e:8c:db:64:b0:69:
86:4b:e1:e9:e6:a7:cd:ab:04:f1:39:29:1a:60:30:
83:02:3c:66:15:60:36:c7:79:aa:8f:db:4b:a6:39:
4a:4d:72:f0:0f:d1:14:c0:88:5e:58:91:7e:15:79:
8d:a4:36:8b:52:35:26:e7:c8:23:c1:d7:16:1a:ab:
ec:a2:2b:50:79:e9:90:90:5f:c1:2c:bf:fb:8d:70:
6b:50:2b:50:a0:43:f7:35:d6:52:3e:7f:52:da:e0:
2f:7e:7a:87:82:2b:27:a3:5d:42:18:47:ac:31:28:
b9:c9:27:82:8e:fb:08:63:88:38:06:b3:c2:92:de:
1b:04:32:b5:5d:ff:44:fb:ce:a2:77:c7:1b:bd:cd:
0f:26:13:9e:1b:c3:fe:bb:92:71:4a:26:83:5f:d4:
83:a2:93:37:19:f2:76:82:ca:14:31:67:24:b3:bc:
09:32:db:f7:5e:53:43:a4:f5:57:91:57:19:47:b2:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:FC:4C:77:4E:91:B9:E8:0F:4E:7A:8E:4E:51:B1:76:1F:A7:26
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TvT8THdOkbnoD056jk5RsXYfpyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ea:4d:19:26:8c:72:12:83:bf:52:a5:84:45:e2:f5:57:02:
ab:3e:26:01:58:a2:6d:0c:df:8f:cf:36:34:21:02:c9:fc:c2:
c3:c1:ca:1a:59:88:a7:35:be:a1:d2:e3:d0:0d:6b:c6:a4:c1:
9e:25:e2:f0:32:46:56:36:5d:c4:de:03:5f:96:3d:f0:d7:e5:
dd:4b:e8:05:7a:88:76:22:76:90:9a:8d:3f:9e:cb:c0:93:2f:
d5:97:b3:4e:c0:14:ca:b3:3a:e2:20:02:8d:4d:0d:a1:94:ec:
3e:07:ac:8b:2f:89:9c:c2:85:f6:4c:c5:93:d3:ba:9c:f8:3e:
b0:d4:4a:c5:10:59:0e:3a:57:fb:c4:a9:bb:ad:c3:d9:80:de:
a6:65:a8:7e:44:cf:0b:54:64:e8:a8:8c:f2:dd:c6:8d:28:1e:
d2:6f:73:8f:8c:d8:29:37:ef:6f:3c:69:01:0a:3e:ce:aa:13:
0a:2a:d5:71:e7:05:8c:96:25:1b:96:3a:d8:3a:43:10:c4:53:
1a:98:46:af:68:32:5b:3c:96:77:d5:ee:ab:30:a6:67:a7:1f:
b2:4d:22:4c:6f:1b:b4:5b:e5:e6:f8:37:83:71:43:b0:f1:9e:
bc:1a:ae:4b:80:00:ff:db:dc:30:be:0c:d3:c8:bc:b6:30:bb:
61:b7:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:21 2025 by rpki-client