Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa
File: 7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa (raw, json)
Hash identifier: 9GrclOAGEY5pzADjL/JS/0tgJkgqRcSfTZPefKo0Jx0=
Subject key identifier: EC:B8:ED:1B:03:1B:49:0F:33:09:0F:F1:5E:1D:5B:44:E1:8C:8B:1F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10AA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa
Signing time: Mon 26 Aug 2024 05:16:39 +0000
ROA not before: Mon 26 Aug 2024 05:16:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 202.178.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4266 (0x10aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ECB8ED1B031B490F33090FF15E1D5B44E18C8B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:7f:2d:ec:07:e7:a5:a2:36:21:c3:df:17:
d0:7b:f4:16:6e:09:13:b9:56:9b:be:e1:07:32:6d:
6f:e0:f6:29:99:d8:23:38:86:f9:d0:99:af:38:03:
74:59:26:3c:c6:1a:f9:09:b3:5e:a9:23:a1:62:50:
df:b6:cc:be:3b:a4:66:db:0e:fa:c7:7f:f3:fb:ca:
d4:5d:3b:56:c9:0a:9a:fe:33:ef:ac:c3:95:ff:8e:
16:ea:2b:f4:cf:69:b8:c5:42:12:91:d6:47:05:d2:
23:97:b1:8a:b7:3a:f2:38:0e:e8:05:a7:fb:08:90:
dd:c3:2a:98:d5:2b:d7:f3:b6:3c:02:63:f8:b0:93:
d8:5b:8c:fb:22:e8:be:19:5e:26:ba:3e:93:90:9e:
71:d0:5c:73:26:6a:cc:d0:04:24:40:b1:6a:78:fd:
10:72:96:40:b1:b3:ce:e3:7d:62:89:c8:3b:fd:d7:
fd:9a:d9:cb:09:d1:d1:98:be:c1:b7:b3:31:00:39:
46:cf:5c:2c:c3:aa:1a:00:e6:ad:7b:19:b0:3a:e8:
c7:88:94:1a:78:b6:84:78:4d:2f:22:65:af:d7:0c:
71:cd:94:83:01:c6:35:c0:c0:bf:29:05:19:03:b7:
74:2c:bf:b6:1b:e6:7b:6a:b9:02:73:f8:c9:a5:d7:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:ED:1B:03:1B:49:0F:33:09:0F:F1:5E:1D:5B:44:E1:8C:8B:1F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
50:fd:a7:ba:e9:26:8f:64:52:18:6c:d1:51:ab:0e:b8:34:7d:
74:0f:9a:c6:c6:9c:2a:d2:f3:b8:a5:b0:36:2e:e9:c0:10:81:
e8:ef:c1:0c:77:8b:37:0d:c8:93:24:14:11:2c:27:b1:0b:bf:
bf:34:81:4d:15:62:b9:28:d8:a8:1a:60:17:53:50:79:52:ba:
b9:ab:85:b1:6a:1b:fc:98:47:94:74:a8:6b:f5:ea:4b:df:43:
1f:48:b8:8b:0d:d2:dc:c4:20:fe:bf:a4:6f:86:4f:0a:ac:7c:
96:78:17:50:ce:c7:92:22:bb:b1:71:d4:b4:a1:1d:e5:30:cd:
69:66:c0:6d:a2:f7:37:0a:d6:4c:9f:38:ba:a2:5c:fd:3e:c9:
fc:ec:ac:9a:12:df:ad:6e:b2:34:76:7f:cc:29:5d:5d:76:70:
3e:0e:ee:1d:b1:74:e4:47:ce:e2:ad:9e:8b:1a:54:da:f8:78:
36:04:ca:89:cb:ac:37:2d:c9:8b:68:c9:db:00:50:b9:ab:2f:
9c:4e:8d:cf:fa:ea:00:f4:13:4e:8d:34:09:16:26:7b:79:89:
52:24:a0:76:92:33:83:b5:46:79:00:7a:54:a3:6b:49:59:6f:
0e:db:ae:fc:c1:da:2d:2a:ee:8a:a0:20:d6:8d:1e:a2:4c:fd:
fe:36:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:09 2025 by rpki-client