Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa
File: d9jwpWlCbaxziYoPUsM3GZjk89Y.roa (raw, json)
Hash identifier: Em/8SrY4ysvVArA/aPwAMKuVFklHoAo2zBvAiaS0Sw0=
Subject key identifier: 77:D8:F0:A5:69:42:6D:AC:73:89:8A:0F:52:C3:37:19:98:E4:F3:D6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 125A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa
Signing time: Mon 10 Feb 2025 14:14:45 +0000
ROA not before: Mon 10 Feb 2025 14:14:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4698 (0x125a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=77D8F0A569426DAC73898A0F52C3371998E4F3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:a8:b6:07:d0:ce:66:1c:a8:64:1e:c3:f6:
c7:95:ba:51:ea:3f:c6:b7:ba:1f:e6:c2:f3:b4:2a:
c5:c2:60:d5:eb:80:6b:84:db:70:08:d2:98:06:07:
9e:f0:ca:ae:bc:28:a4:b4:76:49:61:b1:12:42:8c:
da:1c:21:17:3a:b9:4d:4e:ad:ee:ab:23:70:73:16:
68:1a:0b:67:a1:28:d2:f6:e9:11:71:92:4d:c9:e4:
2f:fa:cc:51:32:1a:b3:bb:f5:69:05:47:4d:c3:0d:
79:1d:07:5b:be:fb:91:f8:55:eb:fd:dd:4a:51:f4:
cc:0e:83:1b:1e:38:77:0c:62:9e:af:23:fe:78:36:
38:a0:67:93:b6:be:19:c7:cd:57:43:36:ac:e5:22:
60:e2:52:9d:27:40:0d:6c:2e:f2:fe:66:29:30:33:
30:66:52:91:d4:1f:8b:61:fa:59:6f:0e:21:e1:f9:
4c:ab:7e:72:31:3c:d1:58:95:80:8a:8a:5f:e7:e4:
bd:c6:fc:8e:f5:2c:4a:fc:81:2b:35:ca:f3:2d:75:
08:1e:23:25:f0:c8:93:78:02:3c:e4:40:ed:ce:33:
9f:06:c9:28:11:b3:23:08:f6:e6:f8:71:ff:f9:4e:
00:6c:8b:e7:53:7e:21:53:c5:89:28:4e:e8:30:93:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:F0:A5:69:42:6D:AC:73:89:8A:0F:52:C3:37:19:98:E4:F3:D6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/d9jwpWlCbaxziYoPUsM3GZjk89Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:52:67:50:23:7b:e5:30:21:24:86:58:ee:c8:69:f0:d6:45:
99:94:a5:dc:a3:4d:90:4a:6e:55:18:0f:93:b2:08:a3:2e:e5:
93:ff:f1:d2:65:59:53:5f:2e:68:47:3b:6a:93:26:d1:dd:32:
ca:1b:07:82:60:e7:b9:05:33:f7:00:75:62:d3:f0:81:f4:11:
ae:84:46:bf:66:1d:5a:ce:65:71:7b:00:74:1c:a7:be:4f:ed:
ca:67:1e:33:ac:c7:07:ff:fe:97:c5:d2:e2:f7:a6:8c:63:50:
45:f0:69:68:e7:0e:7c:cb:ba:5c:34:73:22:32:e6:80:58:b0:
dc:c2:ce:ff:2a:9c:fb:9c:e6:2a:d5:1d:74:41:fe:0b:0c:95:
68:de:12:aa:46:68:ad:b6:b9:11:8a:d5:09:62:85:8a:77:ac:
a4:55:97:e5:1a:41:4e:2a:73:13:50:74:61:75:3b:f6:11:0a:
61:ec:64:f1:d3:1d:ad:26:f7:48:07:61:4a:54:cd:48:06:69:
59:40:56:e3:02:93:87:27:28:3f:35:ed:71:87:00:e0:8d:b8:
ec:af:e6:8b:f7:bd:47:df:52:d5:38:de:67:25:ed:89:53:34:
ed:e6:06:a5:b2:25:34:93:75:e9:b9:cc:bd:ba:59:d7:17:ae:
09:91:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:07:51 2025 by rpki-client