Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa
File: GzLnS2_zzq-55UgqLUSFPH7Uj38.roa (raw, json)
Hash identifier: 9e17os52vSmR/n//mV3cdPeuPcDxMXyY+W6gecZ31jY=
Subject key identifier: 1B:32:E7:4B:6F:F3:CE:AF:B9:E5:48:2A:2D:44:85:3C:7E:D4:8F:7F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1215
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa
Signing time: Mon 10 Feb 2025 14:28:03 +0000
ROA not before: Mon 10 Feb 2025 14:28:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 203.79.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4629 (0x1215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1B32E74B6FF3CEAFB9E5482A2D44853C7ED48F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:2f:32:4b:39:62:00:df:90:e4:12:26:2e:
81:52:89:f3:05:f2:c6:5e:8c:f6:b2:a5:6c:47:0a:
f0:b4:24:57:4a:a5:c1:5e:fd:92:30:d9:6c:2c:b2:
a4:34:1b:c6:54:3f:e1:b0:b9:f9:21:49:8a:33:cd:
5e:76:18:f9:32:c9:2e:7d:ff:cb:e5:16:b5:d2:89:
63:45:7c:fe:24:3d:d6:8b:52:32:9d:64:bb:b0:a8:
2b:dc:3f:6c:df:75:97:7a:cd:ba:31:d8:8c:d8:db:
99:c1:43:53:7b:5d:ca:d7:e4:d9:6e:cc:f8:08:b4:
a2:76:c9:93:cd:05:da:78:37:94:38:c6:52:72:99:
83:22:53:e1:29:63:a1:ad:8a:64:39:65:b1:dc:a2:
86:0d:ed:7f:53:48:e8:18:dc:0f:d1:4c:4d:b8:38:
30:f2:dd:14:29:45:cf:92:80:6e:36:51:88:16:ff:
04:cc:2e:eb:25:5d:12:f8:7e:9f:6a:00:e1:03:a2:
24:1d:3c:7b:8a:1e:cd:e9:4c:7a:ef:96:a1:c4:43:
77:d0:c9:58:41:b2:87:8a:1d:27:b1:e4:a1:5a:4d:
b4:af:5e:fe:74:aa:ed:dd:fc:c5:97:04:e2:8e:44:
c9:dd:4e:4b:1a:33:36:8a:4b:3a:a7:54:f7:6e:d2:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:E7:4B:6F:F3:CE:AF:B9:E5:48:2A:2D:44:85:3C:7E:D4:8F:7F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GzLnS2_zzq-55UgqLUSFPH7Uj38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/17
Signature Algorithm: sha256WithRSAEncryption
51:6a:31:a0:e0:10:93:1c:eb:3e:1f:2e:1a:b4:9f:85:5a:fc:
df:34:b7:a8:0a:af:40:2a:95:8f:ac:21:8d:67:f9:f3:82:5b:
69:de:ff:03:8d:c8:a6:62:4b:26:d3:df:68:1f:6c:1b:ad:68:
31:53:a8:da:f7:23:84:2c:7a:5c:79:a1:1e:8b:9d:fa:30:67:
ee:22:54:e0:ae:e7:8a:21:f3:97:16:79:b6:09:2a:a9:5c:86:
d9:1d:ad:30:3a:7f:c3:93:8d:7c:ba:f4:98:f0:ba:be:ad:dc:
24:24:b1:f7:ed:36:a7:2d:8b:1c:1c:94:5a:94:ce:a3:2d:fc:
a7:78:ce:1d:1e:7e:9c:1c:68:a2:3f:9a:66:23:09:7d:4f:4b:
2b:88:50:e3:7d:52:8b:75:70:eb:9e:84:fd:68:40:c6:f2:bc:
20:75:6c:3f:79:84:ad:b0:bc:91:14:7a:7a:3a:91:a6:bb:77:
99:db:d4:c2:e8:69:89:31:d0:7a:ee:7f:d7:f5:58:72:b6:59:
e4:62:07:40:3c:5e:81:11:aa:13:f0:a1:6f:8c:94:44:b6:8d:
3e:18:bc:8d:9c:c6:83:3d:13:46:c6:9b:d7:2c:55:ec:08:92:
31:53:68:9a:be:58:be:54:e9:34:9e:21:87:dd:f0:27:06:1c:
45:79:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:58 2025 by rpki-client