Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa
File: AWOdl5MzRWNpk1R4cLk_35-gxkY.roa (raw, json)
Hash identifier: Taztqqnk4pvTiTq/1ju8h/Ryq5YhDEvumSKu4u+Y0ss=
Subject key identifier: 01:63:9D:97:93:33:45:63:69:93:54:78:70:B9:3F:DF:9F:A0:C6:46
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 122E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa
Signing time: Mon 10 Feb 2025 14:28:08 +0000
ROA not before: Mon 10 Feb 2025 14:28:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24154
IP address blocks: 60.244.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4654 (0x122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01639D97933345636993547870B93FDF9FA0C646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:46:e1:d7:e1:f8:9a:57:bc:9d:c1:1b:7a:
f9:da:3d:f8:65:c7:18:49:3d:2f:7f:83:b0:fd:3d:
45:12:0d:83:b9:3c:67:3b:6e:51:48:ae:be:a2:95:
d0:73:a2:50:43:b6:74:ed:32:45:95:ff:26:28:d0:
0b:f8:98:16:63:df:01:50:f6:89:f3:2c:a2:7f:7a:
99:3b:c5:2d:83:e3:67:14:07:79:bd:4b:12:99:c0:
45:04:00:cb:0f:5c:fd:8c:56:ac:41:41:44:55:93:
a1:c8:71:83:5a:af:8a:d8:11:e9:01:42:e8:60:ff:
a8:c0:5e:a8:6f:db:0a:5d:78:f2:c4:ce:2a:70:35:
6f:94:40:e0:58:d7:52:c9:a2:4d:70:8f:88:27:0e:
5c:f4:3a:9a:14:f4:5e:96:c6:e7:90:d1:b5:1a:72:
f1:48:5e:30:10:34:d2:55:b0:30:74:76:1f:29:1f:
bf:20:29:9f:d1:9a:4c:54:ff:d7:74:8b:f4:b7:f6:
9d:fc:9c:87:51:28:ba:6b:23:94:a1:88:54:c8:d7:
6e:0f:c0:dd:5a:9f:e8:e0:bc:48:f2:15:9c:1b:01:
11:88:92:71:fb:ad:ea:a8:ff:0f:32:21:56:46:b7:
03:bd:10:bf:42:c1:4d:1f:bd:33:43:9c:d4:4a:b9:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:9D:97:93:33:45:63:69:93:54:78:70:B9:3F:DF:9F:A0:C6:46
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AWOdl5MzRWNpk1R4cLk_35-gxkY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0a:ca:4c:7e:9c:e8:84:3c:63:45:73:b6:e8:99:b4:10:e3:
b6:77:08:a7:16:27:cc:b3:a8:3b:93:7f:bd:99:89:26:19:37:
9d:62:4a:62:a1:38:d4:3a:1f:8d:63:e7:3c:e4:41:11:2f:a6:
ca:a6:f5:0e:d1:7b:f5:c2:25:da:ea:dc:ad:12:5e:d2:f2:80:
ad:d8:37:7c:2e:1f:4f:a4:a9:ae:e7:c6:a8:63:80:c0:f5:68:
f9:e7:bc:be:70:6a:57:98:a2:a8:d0:16:87:9a:a2:1b:fe:47:
88:07:14:cc:d7:96:4c:ae:b1:6d:d5:23:07:41:7f:62:e9:1f:
bb:0b:f4:a9:39:0d:18:1f:15:0a:5b:6b:f1:33:ef:7f:d7:52:
fa:19:d1:11:29:84:72:eb:0a:49:7c:5b:68:77:d2:70:55:ee:
09:21:66:5c:96:55:14:a6:38:0e:39:37:7a:65:ce:35:1f:aa:
7b:b3:9e:f3:fc:9a:48:f8:0c:44:9e:8b:40:00:a7:9f:b8:b6:
3c:a5:90:42:76:c7:2a:e1:a5:91:44:5e:ab:4c:21:07:b0:91:
cf:ac:fc:95:1f:7a:cb:9c:4f:bd:82:51:52:fe:05:18:10:27:
4a:01:d5:9b:93:b4:ff:4f:91:85:fd:88:de:74:d5:2f:96:bf:
8d:df:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:24 2025 by rpki-client