Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa
File: 38s4Z9IdGk5KlqSe53K5g13f8Sk.roa (raw, json)
Hash identifier: v1gX/GopJnsIM/cxVkj563Nr03L/2tvJ0FvSHU/xA70=
Subject key identifier: DF:CB:38:67:D2:1D:1A:4E:4A:96:A4:9E:E7:72:B9:83:5D:DF:F1:29
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FE4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa
Signing time: Mon 26 Aug 2024 05:15:51 +0000
ROA not before: Mon 26 Aug 2024 05:15:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24154
IP address blocks: 210.200.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4068 (0xfe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DFCB3867D21D1A4E4A96A49EE772B9835DDFF129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:da:ad:39:1f:6a:7e:1c:60:ca:21:67:ed:
ca:78:25:08:d2:9b:ee:44:1d:1f:12:ac:b2:dd:1e:
f5:d9:a9:ec:5c:ce:e3:b6:de:9d:ee:ca:47:c9:1d:
ae:c3:82:19:b7:a9:72:8a:72:c0:0f:e4:a4:b0:e3:
75:63:9d:0e:40:30:8f:65:c4:d8:aa:d4:37:f1:09:
ee:95:de:f6:13:b9:d2:4e:7b:7e:9c:c5:9e:bb:48:
96:f4:64:49:35:12:f4:f0:66:02:b0:77:1b:15:bb:
24:39:dc:ce:0b:b5:9f:e4:7f:b9:2a:2c:71:87:0b:
e4:cd:cc:0a:a2:a1:20:86:a4:75:36:f4:5c:87:31:
2f:44:18:be:4b:75:14:a7:4e:3b:7f:a0:56:5a:fc:
f9:95:62:be:33:53:a3:bc:5d:fc:86:3a:f3:85:46:
12:08:c8:56:d0:73:b6:01:72:3d:fa:55:8e:4e:47:
77:6b:0c:cc:d6:87:2f:a2:3f:d9:97:51:19:b1:ec:
74:52:b1:e8:98:9e:11:2c:6e:1f:dc:ac:70:e4:b4:
4c:ae:02:df:f1:b1:29:e6:09:b8:9a:dd:79:03:f7:
76:ec:62:26:cf:32:f0:f8:8a:d2:14:99:09:0a:8a:
6c:7e:84:03:c2:ed:74:9e:f6:9f:48:e2:b8:e9:6c:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CB:38:67:D2:1D:1A:4E:4A:96:A4:9E:E7:72:B9:83:5D:DF:F1:29
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:7f:33:f6:64:60:73:ca:ad:f2:01:a8:87:ca:bd:0d:d0:09:
86:ce:79:6e:d5:a5:08:5c:9f:cd:2f:10:0a:6a:37:9a:54:7b:
91:92:31:2e:42:07:57:8a:ac:98:3b:34:61:0b:7e:7a:1d:f8:
8e:69:bf:8f:1a:ed:d5:ff:6a:9a:03:70:c8:9e:cb:b9:84:ef:
b2:b5:8e:35:40:3a:27:80:ad:d6:67:2f:30:2c:85:36:02:62:
d5:21:83:16:b0:21:5e:e2:0b:5c:85:7f:3b:00:d3:a1:5d:4e:
b9:36:0c:ff:9f:f0:d1:af:fd:dc:0a:95:2f:19:8b:a0:ce:60:
c4:28:c5:c1:c1:1d:11:80:d3:5a:20:ac:24:31:45:66:64:01:
71:1a:cd:59:1c:19:ed:dc:f7:0e:00:c1:c4:9b:97:c2:02:56:
07:d6:81:dd:73:a0:f3:60:f5:5c:03:4d:3a:fa:98:b0:a2:19:
f7:fd:1c:4d:e4:da:6b:4d:50:d2:9d:01:da:2c:28:cb:e2:8f:
bb:b5:33:50:dd:2d:9b:f3:4c:f1:a2:bc:1c:45:2b:da:f4:fd:
1b:1d:e2:fb:fa:02:9e:01:c0:4b:a9:0f:4b:9e:9e:0b:b6:fc:
8b:1f:f7:42:61:c4:ec:0c:c7:a4:4b:95:7c:02:ee:2c:32:7a:
dd:3e:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:17 2025 by rpki-client