Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa
File: 8avpzY6Rg90LKbqv270y9RWZC4A.roa (raw, json)
Hash identifier: G8P8hffdIEfLe18r8gL5BKwQAfG+WzXiYRlcAVGQMpA=
Subject key identifier: F1:AB:E9:CD:8E:91:83:DD:0B:29:BA:AF:DB:BD:32:F5:15:99:0B:80
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10D9
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa
Signing time: Mon 26 Aug 2024 05:16:50 +0000
ROA not before: Mon 26 Aug 2024 05:16:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 223.22.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F1ABE9CD8E9183DD0B29BAAFDBBD32F515990B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:3b:16:d5:bf:dc:a8:62:19:ff:96:5e:1d:
bf:fe:4b:78:30:a1:eb:99:8e:da:27:1d:dc:b9:a3:
f0:53:97:92:b0:17:4e:1f:f3:92:ec:33:fd:f4:c6:
34:e2:38:87:31:52:67:23:39:0b:01:b1:3c:d9:a8:
42:90:30:d2:ff:3d:28:0d:c2:26:60:2e:88:3e:60:
70:f6:64:7c:8e:25:58:f5:eb:8e:d8:50:eb:00:09:
0a:ae:f1:3a:41:02:5b:52:cb:ba:c4:d1:b3:47:da:
e0:e5:bf:b1:6b:9c:19:b4:37:ed:4b:82:45:41:42:
c2:7c:4b:4d:60:72:c9:31:bb:69:23:37:8b:7e:17:
b6:40:ad:66:d7:5e:fd:a3:19:97:64:d0:20:4d:1b:
64:54:88:98:2b:b8:0a:72:36:da:ac:28:f5:77:3b:
d9:ec:84:41:8c:24:de:01:12:ca:b4:e5:96:88:d7:
75:0c:00:c6:c0:9a:1b:f3:17:63:7a:8e:96:fd:bd:
91:8c:6f:12:24:01:29:40:0a:30:b4:03:ea:01:4d:
22:c9:ff:3c:91:10:3d:8f:75:01:04:c5:81:c7:b8:
86:3f:ef:90:22:d0:97:34:34:b6:81:1a:e5:7b:d2:
91:01:80:10:85:eb:a2:ec:99:bc:e1:28:22:01:6b:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AB:E9:CD:8E:91:83:DD:0B:29:BA:AF:DB:BD:32:F5:15:99:0B:80
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:ed:6c:0a:15:a4:a8:15:ad:2f:ce:21:c9:91:c5:aa:b2:
89:9f:cd:d0:3f:65:1d:a0:6c:f8:0d:bc:b9:61:d6:e4:1d:24:
0a:b3:da:72:c5:5e:0a:21:46:66:26:06:65:5b:14:b6:ca:9c:
c4:80:d8:0a:63:77:65:8b:86:3f:8a:83:99:85:d3:51:4c:59:
48:46:58:84:65:b2:97:69:52:7d:40:22:6a:5e:6d:c5:ad:90:
0c:76:b9:5d:d2:b1:44:42:c5:3f:9d:42:ab:29:a9:75:b2:12:
5b:83:cc:7f:1c:58:23:a3:61:24:8d:b8:38:0f:1a:43:75:82:
b6:dd:e9:41:9c:ec:00:a3:11:4c:68:e1:40:19:1a:2f:f6:c7:
36:6a:6e:c2:ba:d2:fb:0b:d2:c0:a9:b4:40:cf:9b:c2:72:39:
e0:e5:bd:3b:41:9b:e6:bb:49:5e:d6:b6:9d:09:74:70:26:7d:
84:a9:89:91:77:62:57:21:04:6d:b1:37:eb:a6:22:3b:03:73:
69:6b:ad:a1:31:69:2a:48:34:22:e8:f0:5a:90:50:34:20:8b:
92:ea:10:40:b8:9e:a4:8f:f1:63:8d:66:93:3b:76:22:94:54:
4c:ea:83:9b:da:aa:2e:2e:e0:b1:c4:b3:ff:4b:0b:9b:8d:b4:
27:08:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:54 2025 by rpki-client