Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/7URTDIREk-CLhEHfQMyehodrgTI.roa
File: 7URTDIREk-CLhEHfQMyehodrgTI.roa (raw, json)
Hash identifier: FMjhJzm7euUSgCyiBUiPFtL2bebrG8GosuuNcUlptCA=
Subject key identifier: ED:44:53:0C:84:44:93:E0:8B:84:41:DF:40:CC:9E:86:87:6B:81:32
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0CF6
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/7URTDIREk-CLhEHfQMyehodrgTI.roa
Signing time: Mon 10 Feb 2025 14:10:19 +0000
ROA not before: Mon 10 Feb 2025 14:10:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131611
IP address blocks: 121.50.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Feb 10 14:10:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ED44530C844493E08B8441DF40CC9E86876B8132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:b8:67:15:96:21:b7:37:71:35:e4:bc:fc:
76:88:bb:09:ed:eb:92:1f:98:7f:6c:5a:75:e4:ac:
4e:e2:90:13:5e:c0:d4:e5:b9:cf:ea:16:10:6c:0b:
4f:ac:93:48:04:34:b9:93:42:bf:a1:4d:22:4e:c2:
59:8d:54:6c:5a:ba:b0:1b:73:9d:a4:41:e7:78:b4:
d0:de:b7:43:7d:5a:4c:d6:75:53:d2:b6:a0:87:5b:
d8:6e:8f:c5:37:ed:dc:1d:10:07:ef:e5:7d:fe:d9:
65:4d:ca:8d:b3:ed:6f:86:bc:92:2f:19:1b:65:1b:
35:0a:65:a9:d7:a1:0f:a4:70:78:ea:aa:53:c8:8f:
4e:56:6e:42:28:c8:17:98:f6:fb:24:53:bd:16:63:
a5:5d:ef:1a:a1:40:17:a1:3d:03:d8:fd:7e:a5:13:
c5:87:dc:e3:2b:b6:0a:11:b8:b3:44:5d:ab:a5:9d:
36:cf:74:11:27:50:03:80:81:a7:65:61:aa:36:d6:
04:7f:1f:27:ff:86:40:f4:32:ff:b0:3b:88:6e:2c:
2c:ea:bf:2e:c0:73:84:a9:41:e6:18:63:4d:d7:4a:
49:69:7d:16:8a:ca:46:0b:3d:8f:aa:f3:43:e7:78:
f6:b3:dc:81:28:32:34:91:7f:f5:e0:bc:4b:48:ee:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:53:0C:84:44:93:E0:8B:84:41:DF:40:CC:9E:86:87:6B:81:32
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/7URTDIREk-CLhEHfQMyehodrgTI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ce:2f:ba:32:13:07:3d:8e:c6:4a:93:6e:db:2e:94:a0:e3:
53:95:21:ac:32:54:24:c0:70:1c:2d:6f:ef:62:6d:20:c2:52:
13:f0:b3:06:58:f5:12:f5:17:06:de:da:f2:fa:4f:0d:1e:e6:
85:68:35:d5:7e:41:46:f6:d1:32:dc:45:1b:7e:e3:08:b0:0a:
19:15:a7:c7:98:62:47:57:5f:87:01:ec:08:23:96:71:21:45:
6a:d0:47:d5:50:b8:86:7b:e3:c8:11:9e:9c:7b:fe:d6:24:c7:
f4:41:17:99:c9:a0:36:e9:e4:61:ae:50:05:17:e8:bc:76:da:
84:5c:8d:f2:00:33:20:78:c4:87:5f:82:4e:e1:f7:41:d3:92:
ee:7c:f0:6c:17:cf:52:9c:28:e6:05:10:fe:bf:04:63:2a:64:
72:be:d1:77:11:e4:b8:f5:51:43:1d:4c:73:0d:3f:d7:6d:79:
dc:9b:94:01:4e:4b:8a:8f:3a:c8:56:28:2f:5b:08:c5:cd:29:
8c:2f:7f:58:6c:a9:60:eb:ce:89:a5:86:b8:2a:fb:27:71:4a:
5b:75:7d:0a:6c:b3:98:21:9c:d1:a3:ed:d9:e6:9d:77:ba:c6:
21:98:e3:66:cb:bf:bf:bd:a4:5c:6b:a8:5a:93:54:c2:3c:32:
55:bd:dc:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:31 2025 by rpki-client