Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa
File: -Fg31ys7nPy7ZAcaQT2PD7JldWc.roa (raw, json)
Hash identifier: EBgfns+Kq047M2dcB7MUeQmHrZcE9Zji0zoz9YA9uiY=
Subject key identifier: F8:58:37:D7:2B:3B:9C:FC:BB:64:07:1A:41:3D:8F:0F:B2:65:75:67
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1269
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa
Signing time: Mon 10 Feb 2025 14:28:23 +0000
ROA not before: Mon 10 Feb 2025 14:28:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4713 (0x1269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F85837D72B3B9CFCBB64071A413D8F0FB2657567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:f1:e7:d1:39:6e:cc:be:72:67:d7:fb:eb:
94:68:21:d8:8f:f1:fa:e7:1b:ba:2d:4f:a0:b0:05:
23:58:c1:fa:29:bd:4e:7b:a1:cc:3a:ec:83:3a:70:
e8:09:8c:60:45:02:72:1e:a8:6c:c1:28:61:0d:db:
be:73:12:4b:0a:62:88:37:31:0d:fb:a5:95:a8:28:
a8:63:34:6e:0a:ca:52:68:3d:6c:1f:4a:2f:e9:77:
94:a1:d8:9a:f0:83:91:20:11:56:32:fb:43:f7:34:
36:fc:58:bc:2e:4c:08:1b:53:d8:93:18:e8:93:ba:
3d:34:10:f3:94:ab:b6:04:1c:94:20:5f:24:31:1d:
2b:2b:81:3b:db:09:00:b1:10:44:52:22:d9:37:92:
a3:5c:e5:22:88:1a:44:54:da:3e:b2:7a:26:48:d0:
91:c7:e0:8d:86:e9:aa:68:c5:91:55:74:14:c6:6a:
59:1f:70:f4:5b:48:9e:78:44:7e:24:c7:cb:74:71:
b0:8b:1e:dc:ab:35:b1:a7:0e:56:a2:01:4d:a0:c0:
36:6e:4e:e1:46:9c:7c:8b:2e:a1:97:75:e1:de:e7:
82:5a:da:43:b9:83:dc:58:7f:50:a2:cd:54:cd:d0:
56:62:98:1e:b4:8b:aa:f4:0d:a6:24:a9:5a:a9:e9:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:37:D7:2B:3B:9C:FC:BB:64:07:1A:41:3D:8F:0F:B2:65:75:67
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-Fg31ys7nPy7ZAcaQT2PD7JldWc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:ba:5f:9d:db:56:b7:af:0f:84:7e:55:09:12:eb:40:95:e1:
c7:0b:a1:54:be:56:a9:88:14:17:fc:7e:1a:a5:e4:7d:9c:6e:
b4:c1:54:87:c4:a9:6a:33:45:78:f4:97:b4:e8:0d:87:9b:92:
90:ed:5d:0d:b7:08:38:e3:bb:f2:c5:a5:84:ac:39:0f:38:55:
ff:88:f1:6d:f3:48:9d:cd:2f:ed:06:aa:2f:9d:ad:bd:96:97:
bf:34:f7:55:8f:32:ea:7a:26:33:a9:65:4d:11:91:de:77:7d:
92:bd:6b:69:44:ef:a3:37:e6:e3:20:80:53:fc:b5:8c:af:1b:
7f:ac:9c:ea:31:8c:60:6b:c3:e4:95:d7:3c:a4:a2:71:09:0e:
87:df:81:76:2a:69:61:c4:60:01:9f:ec:29:d4:9c:fa:be:00:
bc:e8:f6:02:7f:88:87:cb:92:42:a4:b1:99:e3:af:ec:39:86:
6f:27:c2:43:2c:6c:f8:27:08:ec:19:fd:80:79:8d:f4:83:e9:
af:cd:be:45:7f:72:3a:7d:11:49:26:6c:e8:c2:09:fa:ad:6b:
07:f5:3a:a0:d4:bf:ae:96:38:fe:42:47:a4:79:3a:50:bf:ee:
a5:97:93:2a:71:98:91:da:06:b7:fd:ed:6c:d6:5b:25:bf:e2:
35:75:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:43:53 2025 by rpki-client