Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa
File: 4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa (raw, json)
Hash identifier: omKMW2PZVMs92Vn8l4oA7Ui8TUBETc2DT2t9OdFmyL0=
Subject key identifier: E1:03:C2:7B:E3:9F:4D:09:F3:38:C3:32:3F:61:3D:41:EE:07:F8:08
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11DC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa
Signing time: Mon 10 Feb 2025 14:27:48 +0000
ROA not before: Mon 10 Feb 2025 14:27:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 222.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4572 (0x11dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E103C27BE39F4D09F338C3323F613D41EE07F808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:87:2e:19:5d:7c:03:25:b0:b1:17:b1:08:e4:
58:76:03:6d:20:4f:08:34:de:d1:ac:67:29:b8:34:
1e:7c:c0:59:7e:ef:97:7a:b3:47:4d:82:29:bf:3e:
1d:9f:a4:41:b8:97:ea:76:a1:f4:d4:0b:ec:3b:2a:
61:af:17:7b:c5:44:3a:4d:f1:b9:26:c2:e0:b4:13:
85:aa:1c:c8:13:3b:0d:3f:ff:a0:e5:47:f9:55:ea:
5c:48:b7:23:f7:db:1e:9a:0d:07:49:5a:ff:25:3b:
6d:3e:80:13:de:29:84:1f:d1:95:50:be:b8:94:7f:
cc:7a:40:a8:dc:31:52:f4:b4:89:cf:5b:ae:56:cd:
31:11:4c:c0:26:d3:74:12:1d:01:32:7c:e2:b9:9c:
03:34:76:93:91:41:40:23:9b:ad:dd:d2:42:c6:43:
e9:f8:ba:70:96:0c:53:f1:bb:ba:8b:ee:14:b4:6e:
e8:f3:71:94:07:97:22:1c:94:1f:e4:2e:53:5d:1d:
78:ea:5f:9b:02:43:6d:17:bb:93:a6:78:8b:04:d9:
75:b9:8a:2d:2a:e9:f7:e4:ba:de:1f:d1:c2:4d:bf:
93:ac:38:25:29:23:4f:d8:51:c9:8a:37:1f:10:2f:
9a:00:9a:22:82:dc:73:73:a4:15:74:bc:55:f9:97:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:C2:7B:E3:9F:4D:09:F3:38:C3:32:3F:61:3D:41:EE:07:F8:08
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4QPCe-OfTQnzOMMyP2E9Qe4H-Ag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:2e:b6:1e:ed:9f:b3:8e:87:f0:91:92:67:0c:43:0a:8a:f8:
cf:0f:ab:54:53:2f:ad:be:e2:b7:39:0a:a7:21:76:78:d1:d1:
d3:46:40:4d:74:46:9b:66:af:ea:51:b8:c4:78:a9:b0:7a:95:
f7:21:e0:3b:c7:fa:7d:bf:64:92:20:26:df:9a:f5:21:f2:0a:
65:6c:1d:d9:1e:a7:71:8d:a8:cc:fa:58:74:2d:40:61:c4:90:
5b:ff:30:7c:80:c5:12:e9:11:da:8b:68:46:22:91:65:46:45:
4f:6a:2a:a5:52:c9:78:07:56:71:0d:7f:21:14:5a:c0:c7:1e:
aa:5b:b9:5f:f5:81:f5:47:6d:bc:6a:d0:dd:6b:fb:f6:cb:29:
2c:9a:a2:9b:ba:87:1b:8b:76:57:7a:34:69:07:bb:b8:0f:6b:
b5:2f:46:88:08:fc:f9:95:69:07:66:8d:b7:96:7c:07:3b:f3:
2a:5e:1a:c2:ad:c1:c8:71:66:36:54:f4:7c:43:50:ce:3f:79:
08:37:23:a9:73:6a:85:87:88:0c:a3:96:f5:22:38:97:eb:88:
fd:85:b8:87:2d:de:c3:68:26:6f:85:f4:9e:bc:ad:d2:e0:ef:
fc:9d:57:30:5e:ae:34:63:9e:e3:85:b2:15:6c:ab:1f:69:80:
36:21:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:26 2025 by rpki-client