Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa
File: j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa (raw, json)
Hash identifier: ixE1UbWi7NYTs9PakzKDaXzy7r6aFCZVL8DWVDZh05Y=
Subject key identifier: 8F:EB:C6:89:14:73:FC:2A:CF:94:B9:94:D9:7B:A8:38:58:E3:14:37
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12BE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa
Signing time: Mon 10 Feb 2025 14:15:11 +0000
ROA not before: Mon 10 Feb 2025 14:15:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4798 (0x12be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8FEBC6891473FC2ACF94B994D97BA83858E31437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:5b:47:de:65:b1:7a:aa:d2:fb:11:34:3e:
68:81:18:cd:af:19:96:26:91:09:8d:15:10:96:fa:
90:db:7a:f3:77:78:b3:5b:f1:43:49:02:59:86:8b:
0a:eb:d9:14:ac:96:9d:24:b2:04:9f:31:d7:e3:32:
1b:96:d4:5c:cd:50:f1:1c:8a:fd:41:43:99:20:a1:
14:77:f7:af:f8:d2:0b:26:8e:45:f8:cf:9d:14:21:
02:08:6d:ad:3f:c3:88:f8:a1:b2:2f:16:54:e8:ca:
62:92:c8:fa:cc:53:1e:f5:6a:16:40:ae:c1:22:a8:
73:7b:c8:c4:18:a8:d9:03:44:e1:f2:a8:6f:08:68:
aa:5b:1d:e8:f7:5f:37:4d:8f:2b:a6:32:5d:e3:84:
31:72:f4:1a:2f:c5:47:5a:02:79:ca:7a:f5:b0:d4:
21:11:20:c3:1c:da:cc:f6:c9:6a:28:6d:f6:6f:56:
f9:a1:a5:1a:e2:af:7c:a7:46:7f:5c:00:5c:c9:fc:
be:b0:76:32:66:cc:23:be:25:83:a6:6b:53:cb:52:
67:98:ce:19:18:b4:5f:27:5e:63:2d:2e:a7:e4:26:
ee:4b:5e:9a:1e:7a:69:2f:2a:15:4f:8f:fb:68:8c:
f2:97:6d:ce:6b:27:1d:7c:39:9d:3d:ee:68:47:70:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:C6:89:14:73:FC:2A:CF:94:B9:94:D9:7B:A8:38:58:E3:14:37
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/j-vGiRRz_CrPlLmU2XuoOFjjFDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
70:14:88:d4:49:49:e5:7b:9b:17:32:a6:83:11:b2:25:cd:45:
10:e7:69:0e:96:d8:7f:a0:cf:be:ad:42:71:df:b8:32:5e:c1:
7c:98:51:47:f1:46:9e:c0:7f:02:5f:18:b0:33:c7:ee:87:ea:
7d:62:ba:7c:49:de:3a:3c:37:3c:f8:cf:8c:19:81:79:11:e9:
83:1e:8c:db:30:8a:8a:3e:00:72:a8:e4:2a:75:b4:d2:88:3f:
e3:f1:74:65:75:4f:33:fe:ab:f9:56:b4:72:41:72:b1:66:e0:
36:e3:c1:65:e6:3b:4f:1b:9f:e5:49:9c:64:53:33:92:b2:78:
f7:27:9c:a1:cf:52:5b:50:9e:35:70:25:fc:86:d7:50:de:ac:
62:ca:58:da:d2:ed:8c:09:19:80:fc:c3:2b:58:cb:36:f5:17:
2d:2f:56:24:ff:14:5a:07:6d:b9:82:6b:0c:63:4d:91:e6:db:
99:67:f3:7c:42:dc:ae:44:12:ad:1b:f9:92:b0:f9:49:4e:22:
f5:fd:54:fe:11:1c:37:6b:1c:1c:cb:ff:99:6d:aa:aa:04:0e:
82:95:57:d2:35:d5:d2:1e:f2:3c:1f:ad:02:6d:12:43:d6:d5:
05:e8:18:07:b4:bd:b0:fb:59:9f:14:4c:44:a1:55:f8:a0:3c:
5e:b6:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:03 2025 by rpki-client