Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa
File: HsplbUQa5VwGd8jQvMLQez0daeU.roa (raw, json)
Hash identifier: LFHoMTxkjpIOrl+0BVdnAwuoevRpkO58pldW/SxO24U=
Subject key identifier: 1E:CA:65:6D:44:1A:E5:5C:06:77:C8:D0:BC:C2:D0:7B:3D:1D:69:E5
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 10CA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa
Signing time: Mon 26 Aug 2024 05:16:47 +0000
ROA not before: Mon 26 Aug 2024 05:16:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.201.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4298 (0x10ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:47 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1ECA656D441AE55C0677C8D0BCC2D07B3D1D69E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:60:9c:af:1d:7f:08:cc:0d:7b:90:f1:95:
c7:8f:55:8d:26:59:5e:3b:0a:fa:10:15:cd:d8:89:
fb:50:83:a4:40:c1:e4:7f:77:be:3d:dc:9c:08:53:
2f:7c:9a:97:8b:cf:c4:65:e3:b2:ed:e9:b5:67:ed:
ba:ac:b1:88:b5:3a:bb:30:d7:a9:86:66:d5:09:bb:
2b:ce:9c:81:eb:13:9e:bc:b1:ac:d1:da:14:59:2a:
ee:82:0a:ed:14:cd:72:b2:d3:1a:c7:d4:d4:74:33:
78:8f:f9:32:b0:89:7f:1b:79:a1:64:21:d5:86:48:
3d:91:d4:6a:07:7f:2b:50:e1:99:90:e8:f0:35:c9:
b8:c5:4b:31:a8:ba:41:b4:e9:0e:33:d5:9b:6b:ca:
37:69:9a:6e:8e:d5:da:f9:fc:66:65:32:f1:80:66:
7a:16:25:fa:83:73:72:f2:03:3f:05:48:8c:58:f7:
fb:c0:e1:40:43:62:47:8d:78:32:11:c9:7a:63:77:
45:53:19:c9:bc:83:7d:9e:04:63:69:82:1b:87:db:
e9:77:40:f4:ff:3a:bc:72:ef:30:a6:40:e7:48:2c:
6e:4c:70:41:c6:cb:b6:8a:3a:f0:20:57:37:cd:2e:
63:4e:e3:b5:b9:58:8c:74:27:a2:f1:6a:c5:32:cc:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:65:6D:44:1A:E5:5C:06:77:C8:D0:BC:C2:D0:7B:3D:1D:69:E5
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.0.0/18
Signature Algorithm: sha256WithRSAEncryption
62:5f:46:89:65:aa:ae:59:3a:44:91:7d:40:9a:b3:27:e7:51:
19:9e:a6:98:39:cf:b1:d9:1d:64:f3:30:60:3d:2d:56:39:bc:
a9:b8:c1:c8:d5:b9:82:e1:97:ac:c2:20:ec:45:73:75:48:e4:
91:b0:a0:cb:ab:9e:2d:06:2b:fb:12:eb:64:5f:72:4c:90:66:
be:4c:78:f4:0b:27:4c:96:b0:9f:6f:31:99:ef:d8:c5:ae:71:
39:b5:5e:d6:91:32:e5:4e:a8:e5:dc:01:13:7e:dc:20:cf:b7:
ef:65:df:00:20:94:16:03:f7:c3:c8:7a:f1:cf:e2:7c:a5:f7:
61:17:d8:61:a5:3a:84:92:21:42:c3:4f:46:a8:97:60:92:6c:
90:5c:75:3f:06:60:64:64:22:53:f6:2a:85:b5:bd:76:4c:1c:
05:2e:2e:38:87:61:56:fe:f2:0e:34:dd:a6:81:b2:c9:3e:c8:
04:6a:f5:85:fe:e6:6c:29:73:13:a0:65:2c:18:69:0f:65:00:
db:28:fb:e3:d4:73:40:26:b1:00:85:a5:a7:87:6c:32:af:d2:
45:0c:4e:ba:44:e8:a4:f2:fb:21:7f:53:6c:5b:1a:04:7f:a7:
18:8a:e7:fc:6f:dc:66:56:31:c6:6a:c7:5d:a5:f0:70:4a:4c:
77:90:a7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:24 2025 by rpki-client