Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa
File: Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa (raw, json)
Hash identifier: ly0FzqUP/2SojsxYs9ZksvgqdVuY6HNQsl80dB+ML6E=
Subject key identifier: 32:9B:9C:D4:1E:AC:5F:31:61:F8:3F:DC:47:89:D5:9F:3D:32:38:05
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0CF9
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa
Signing time: Mon 26 Aug 2024 05:12:54 +0000
ROA not before: Mon 26 Aug 2024 05:12:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 61.56.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Aug 26 05:12:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=329B9CD41EAC5F3161F83FDC4789D59F3D323805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:14:73:b1:95:b4:7b:92:f8:f7:ae:07:80:
77:9a:04:2e:1b:63:9c:85:17:a5:ed:01:8c:34:55:
1b:07:f5:98:8d:36:e8:31:e2:23:55:9a:47:c9:cf:
90:ec:99:f0:e5:41:17:97:70:57:3a:ae:b9:6c:24:
de:b4:93:8a:8b:00:34:f4:db:8d:c2:5f:a6:aa:e2:
e6:82:30:eb:e8:90:5a:e6:33:71:05:db:d3:31:43:
a9:07:63:be:2f:ae:33:3a:50:5c:27:1b:f3:f2:20:
07:5f:84:b9:8f:52:71:34:01:ce:4c:88:4c:16:8a:
cc:7c:c8:97:91:3b:b2:d1:fb:bc:6d:3a:00:bb:e1:
00:b7:d4:10:d4:be:71:9c:27:bc:85:2f:bb:6f:34:
f8:b7:b8:78:fa:25:27:12:0e:e4:81:71:44:5c:21:
7b:05:dd:9f:0f:c8:d2:de:a8:e0:4e:d5:6d:30:cf:
90:8e:74:96:d4:ce:26:1f:bf:bc:9e:b8:e8:a8:9e:
8d:c6:00:eb:f2:59:a0:b1:36:3d:87:8a:1f:b0:e4:
d0:e9:b1:45:44:a4:77:4a:e5:df:30:2f:12:4b:07:
22:e3:ca:74:16:7b:6b:ed:a9:6e:a7:ce:d1:8f:a4:
79:8e:ea:4a:e6:b6:bb:c8:9c:41:82:14:a5:5a:dc:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:9C:D4:1E:AC:5F:31:61:F8:3F:DC:47:89:D5:9F:3D:32:38:05
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:e0:90:ea:68:c1:7f:8a:66:5e:05:05:9d:90:e2:a1:5f:ed:
bb:c3:62:a8:c8:97:f5:2a:da:50:ee:3c:af:f0:ba:32:0b:49:
db:66:29:06:bf:24:69:6c:12:78:80:1a:df:f9:fe:4c:84:c1:
5a:90:48:40:7b:e9:5e:5e:00:bf:0e:a8:94:91:ac:ce:ba:18:
65:ec:f3:25:1a:2f:15:cb:67:60:cf:bf:23:6e:58:06:86:7e:
a5:bd:51:fb:b0:7d:7f:84:ac:e3:a0:2e:68:43:07:a5:c6:6f:
a1:1f:99:de:92:90:03:ae:cd:e1:5c:7b:78:4e:1c:ee:8b:c3:
c3:94:56:8d:26:32:54:ec:e8:d3:1b:53:22:b7:2f:6b:4e:aa:
47:1e:06:3d:42:22:02:f8:e3:63:33:ae:6a:bb:f9:06:e4:3a:
fb:3e:5b:b6:f4:10:22:96:af:68:fe:53:62:2c:a6:dc:98:99:
c1:63:28:5a:c4:6c:a6:df:a9:12:f9:0f:08:bf:04:64:88:ff:
49:eb:d2:5a:49:e7:3a:15:c9:ad:41:15:ad:95:bf:c5:1a:00:
86:02:9c:e2:c1:be:75:d0:3a:f9:58:f4:73:c1:14:90:52:fb:
cc:df:65:4d:dc:87:71:06:69:79:4b:af:f0:a2:b6:c9:c6:08:
b6:a5:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:59:15 2025 by rpki-client