Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JhaNYaw1Yf1dEfQHmWrZok2ay5Y.roa
File: JhaNYaw1Yf1dEfQHmWrZok2ay5Y.roa (raw, json)
Hash identifier: pLnAncHKAwYrPV444p0EXo7yeZsYR9ckZOCbGFoovJg=
Subject key identifier: 26:16:8D:61:AC:35:61:FD:5D:11:F4:07:99:6A:D9:A2:4D:9A:CB:96
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1262
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JhaNYaw1Yf1dEfQHmWrZok2ay5Y.roa
Signing time: Mon 10 Feb 2025 14:28:21 +0000
ROA not before: Mon 10 Feb 2025 14:28:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4706 (0x1262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26168D61AC3561FD5D11F407996AD9A24D9ACB96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:cd:fa:f5:55:35:25:b0:14:ff:84:21:a4:
b8:90:67:96:39:b4:fa:10:a2:ec:03:34:8b:71:3e:
e5:c9:7d:35:01:00:2c:0d:96:58:71:d2:d3:c2:04:
85:bb:4f:01:cb:40:f1:60:65:c1:f6:6e:20:ef:fd:
1a:16:31:1e:b4:b7:10:ca:6a:1e:bf:60:04:71:7b:
1e:ce:87:86:fc:bb:10:09:97:b7:bc:77:0c:bc:4d:
a9:e7:c4:4a:1d:82:eb:7b:c4:aa:e3:ad:c0:cb:77:
de:e0:9d:3c:91:e8:a8:9d:9d:99:d2:7c:41:7d:a1:
50:9d:fa:75:f4:f4:4f:26:28:9a:12:3a:a1:c0:d1:
47:07:e6:44:8f:c1:19:37:27:3a:46:17:21:27:2a:
47:aa:85:f8:59:db:5a:17:b4:1a:37:e0:5e:6e:68:
d9:ca:41:fd:97:f5:fd:c2:90:3a:1a:e6:e7:23:cc:
1b:54:ed:41:8b:85:b1:67:d5:1d:17:75:d9:3a:26:
ff:ab:5f:30:4a:8a:a8:36:23:b0:3c:f5:89:c6:94:
aa:f9:5f:73:85:73:4a:be:01:c2:96:eb:7b:d4:47:
47:b6:45:4b:76:08:bd:89:9c:bb:e3:f0:26:1d:ca:
d0:f1:31:f9:64:43:09:e8:3d:2c:5f:93:22:da:9c:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:16:8D:61:AC:35:61:FD:5D:11:F4:07:99:6A:D9:A2:4D:9A:CB:96
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JhaNYaw1Yf1dEfQHmWrZok2ay5Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:16:45:97:08:bc:c9:48:c7:f2:a2:7e:85:93:f9:d1:cf:7a:
7e:2e:ec:c9:68:62:74:cf:c3:6a:98:8f:52:19:fb:3c:0a:c9:
e0:a1:24:7d:8b:a5:f5:ac:73:52:24:dd:3d:b0:95:7a:d6:c9:
ef:60:b2:55:56:ba:f6:ea:b5:50:fb:bc:88:39:26:72:8a:91:
fa:1b:cf:54:67:5d:b3:60:93:c1:11:20:ab:68:fb:9f:75:51:
d5:fb:a7:a5:e3:bd:72:14:ca:e0:df:65:b3:da:57:38:c8:94:
2c:96:2e:72:65:61:9c:f0:d6:59:54:6b:7e:0c:c9:a8:45:eb:
e2:27:3c:22:e9:df:d0:22:13:35:e1:2a:0c:bc:8e:28:59:b4:
21:ab:b2:0f:a8:23:1b:34:0e:9a:19:36:82:9a:0e:d4:d5:a3:
20:49:08:7f:df:b8:c3:1d:cc:ee:c5:b3:79:84:3d:3e:b7:dc:
f6:69:f3:43:a3:61:68:63:ac:4f:a9:80:9d:f7:cb:3b:71:ac:
b9:64:67:57:1a:13:7f:a6:80:4d:32:d2:cc:ba:40:ad:e5:6c:
6c:84:42:7f:c4:6e:9b:08:75:c5:63:ea:25:25:9e:0d:cd:dc:
fc:3d:5f:7c:0e:fc:58:64:52:ac:f4:d2:43:75:cf:1d:b9:0a:
10:8d:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:41 2025 by rpki-client