Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa
File: DAOVd3ybq972VFIXd3mBUeRJwt4.roa (raw, json)
Hash identifier: NsM/z6eB65qcj5twqsZDUidrDKVmj6cIk5hLT6C++oc=
Subject key identifier: 0C:03:95:77:7C:9B:AB:DE:F6:54:52:17:77:79:81:51:E4:49:C2:DE
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1092
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa
Signing time: Mon 26 Aug 2024 05:16:34 +0000
ROA not before: Mon 26 Aug 2024 05:16:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 218.34.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4242 (0x1092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0C0395777C9BABDEF654521777798151E449C2DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:2a:71:ec:01:39:a3:c3:25:a8:f4:93:6d:
81:1d:22:6b:52:55:26:52:b5:ea:fa:d8:69:19:db:
c1:60:6e:6b:eb:ca:dd:aa:94:27:01:8e:0d:75:c7:
54:ba:b0:4a:39:86:45:9a:15:ad:19:60:02:00:3b:
86:91:3a:57:0f:b9:d5:0b:d6:47:04:25:32:ad:21:
24:fa:13:e1:19:54:32:9c:27:19:d8:ef:6b:f0:28:
cd:2a:2d:c9:d8:cf:cb:92:d1:92:0c:8d:f3:03:73:
d0:3d:e7:8a:0c:1d:5d:62:aa:36:c1:fc:b7:d8:6c:
12:11:f5:ec:41:0a:aa:ad:97:d9:a5:95:b9:2c:95:
b7:ad:31:52:5d:90:a5:91:ab:56:9e:10:26:17:be:
5d:fc:ac:3b:b8:5f:c6:55:6b:44:38:d9:66:12:3b:
13:ed:1e:a7:ec:07:2d:82:af:12:67:ee:26:68:29:
a7:c7:18:8f:49:ce:f1:8b:20:06:c7:42:91:0b:a7:
b8:91:1f:eb:de:f6:78:ae:ef:fd:71:e2:17:21:31:
86:b9:69:4d:e9:d1:fb:5a:b5:0a:b7:3f:0d:be:da:
9a:1b:f2:2b:c2:fe:70:dc:a7:96:08:2c:ca:a8:c1:
44:83:04:8b:52:c4:e0:c9:11:55:fd:71:8f:0f:29:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:95:77:7C:9B:AB:DE:F6:54:52:17:77:79:81:51:E4:49:C2:DE
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:47:e3:31:4f:3d:7d:4b:1f:39:da:09:54:b2:08:64:16:b3:
e2:7b:7b:25:bf:bc:98:7a:15:28:14:df:f9:54:cb:4a:15:6f:
0b:8d:af:b2:50:0c:15:54:65:22:f5:1e:23:e9:de:7d:2e:33:
f8:79:77:21:d2:7c:ac:60:4f:f0:4d:bd:69:a8:ae:2d:16:b6:
72:c6:6d:35:89:0d:38:2e:e2:13:58:e4:bd:07:9d:64:e1:d3:
06:08:34:c5:24:08:f0:b9:98:a7:b7:92:7a:6f:7c:d9:85:ba:
19:02:06:a0:48:d7:1d:80:dc:05:6e:3b:89:c7:f5:0c:e8:00:
02:26:2d:56:3f:64:20:bb:3d:eb:15:3e:c3:05:a5:e3:bc:7c:
d2:34:7d:30:d5:f4:6e:f2:95:4d:70:b9:ad:89:9e:c4:d8:ce:
ad:0f:4f:a7:1d:08:18:78:1a:c6:2c:6a:c1:4c:0a:6e:4c:a6:
99:61:9d:6a:68:da:6f:2b:dd:73:8f:d7:c5:e2:89:e5:5e:43:
59:c8:ae:5d:2a:a8:51:d4:bd:56:2c:da:92:13:a2:4f:c5:03:
fb:92:e2:1d:82:81:02:fa:ca:30:2b:ec:ad:7b:bf:15:2b:81:
00:00:9e:5f:90:5d:be:fa:32:26:b9:c9:c4:39:a6:4b:a6:aa:
4c:40:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:54 2025 by rpki-client