Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa
File: h8yPtCI8nzDchoWtgAkTY7k_k6U.roa (raw, json)
Hash identifier: P/X8hdQFYg+lnlDA6sFFTESI+wxJnRQWigWJA1P9IHY=
Subject key identifier: 87:CC:8F:B4:22:3C:9F:30:DC:86:85:AD:80:09:13:63:B9:3F:93:A5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1251
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa
Signing time: Mon 10 Feb 2025 14:14:42 +0000
ROA not before: Mon 10 Feb 2025 14:14:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4689 (0x1251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=87CC8FB4223C9F30DC8685AD80091363B93F93A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:08:69:07:c8:ab:82:08:14:00:7a:ea:2c:
b2:08:fa:17:4d:98:b9:93:1e:d9:c3:2d:bf:67:5b:
ee:b2:0b:77:1f:1a:11:db:73:8a:0f:bd:ce:e7:67:
fe:be:8f:0d:73:96:d8:d9:4d:2d:ec:f4:23:f1:23:
11:2b:37:8c:94:d0:ed:fd:f0:fa:3c:7f:ff:3a:87:
d4:ef:15:f2:98:e0:ae:2c:b2:cd:76:f1:a9:ac:7c:
74:e4:77:0a:4a:6a:4e:4a:0a:02:d0:c7:13:75:70:
c1:ac:12:aa:f0:2e:52:e6:b8:89:47:54:66:0d:3e:
68:e3:36:f2:03:01:26:71:a6:ba:4d:f7:91:fd:23:
4a:7f:c1:a7:1b:9c:84:67:a9:72:33:78:7f:35:b8:
34:cf:15:7d:30:39:ed:31:1a:d5:54:0a:33:ad:db:
2d:83:e2:fc:31:49:22:09:31:d8:6d:c5:e6:13:71:
af:27:56:39:2c:b4:2c:09:77:52:93:c9:38:76:99:
10:fc:cc:fe:cd:fa:49:20:90:4a:09:87:7f:7c:83:
ab:76:c4:2b:c8:80:01:49:82:c9:b1:86:e3:ce:11:
22:2a:ac:bb:8e:86:bc:9c:2e:dc:53:27:08:b0:2e:
69:eb:bd:48:d4:45:7f:a3:f4:5a:a9:0f:97:65:d7:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:8F:B4:22:3C:9F:30:DC:86:85:AD:80:09:13:63:B9:3F:93:A5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h8yPtCI8nzDchoWtgAkTY7k_k6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/21
Signature Algorithm: sha256WithRSAEncryption
34:10:c3:5f:a0:ee:36:92:69:8c:91:c5:e6:e9:c2:97:7c:82:
84:60:c9:4d:80:50:45:ae:6a:f3:f8:14:d4:54:2d:4a:43:f9:
05:52:d5:1a:28:96:ed:86:f5:cb:d8:24:15:21:ff:5a:e3:ff:
35:71:24:bb:3d:2b:8f:22:e0:31:7d:01:15:36:92:68:72:2f:
fc:cc:a8:6b:03:2c:6b:5f:4e:80:84:18:36:c8:00:a2:13:78:
1f:03:ed:0d:2c:68:8a:4f:e3:2d:99:36:f1:32:bb:d6:85:79:
45:da:f0:b5:c8:96:d5:52:9d:02:aa:d2:38:d2:4c:6f:2d:46:
c2:37:81:ef:6a:d0:a1:05:91:63:e0:63:20:8d:ee:38:b7:eb:
3a:09:db:4a:3f:05:25:57:68:ad:17:15:50:ad:e7:ef:b8:91:
eb:41:2a:62:48:a4:29:d9:72:74:04:c8:9a:cb:ae:1a:f8:28:
a0:a3:a2:36:44:c5:58:77:aa:67:89:b9:03:36:63:59:a1:e7:
d1:75:a3:2d:99:e5:46:6c:b1:87:87:5e:b1:06:6b:c7:74:b1:
04:1f:36:4f:cb:b1:4d:16:3b:43:06:c9:e7:00:db:00:17:31:
e6:ff:a3:48:22:37:d1:8c:c1:a5:a2:ab:cb:98:e5:0f:47:dd:
5e:7e:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:03:37 2025 by rpki-client