Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa
File: KnNKMvT7aDFYsDhV29_wCq8wcaA.roa (raw, json)
Hash identifier: +3UPvXyltcZiy/Sj14vXpsFz918JFKcb2pIvyYHwVEM=
Subject key identifier: 2A:73:4A:32:F4:FB:68:31:58:B0:38:55:DB:DF:F0:0A:AF:30:71:A0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FCB
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa
Signing time: Mon 26 Aug 2024 05:15:46 +0000
ROA not before: Mon 26 Aug 2024 05:15:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4043 (0xfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2A734A32F4FB683158B03855DBDFF00AAF3071A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:4b:53:72:ea:f2:32:d3:b6:ae:c5:85:e3:
d6:9b:ea:a4:95:46:e1:1b:6d:64:f3:0a:5f:68:ec:
2d:56:7d:4c:d1:eb:82:ae:4a:2b:73:5e:c6:bb:a0:
c2:fb:6e:90:a2:20:a3:95:87:2e:dc:56:f6:cd:39:
ed:1e:8e:d6:fd:7c:87:5f:7d:d5:d0:1a:3e:73:39:
22:7b:57:b4:a6:3d:97:0b:f8:98:da:f7:33:4d:72:
06:a1:18:8d:ae:8d:4e:b0:0a:9a:f2:f2:52:7c:c0:
36:e6:da:64:00:a0:cb:74:23:89:06:f8:f3:ec:9e:
45:83:66:55:8b:d7:00:f8:66:af:ce:9b:b5:c9:ab:
34:3f:40:98:b0:e1:4e:d4:a8:f7:8d:94:45:ac:29:
4b:38:79:a2:7d:ca:2c:95:80:e1:1b:33:e9:de:c3:
0b:55:cd:d4:c1:29:ea:06:0b:c7:c7:a7:a1:91:b1:
d9:0f:90:5f:d2:86:b7:54:5d:a1:be:24:d7:fa:e2:
7f:b7:b7:bd:80:ff:0b:3d:6e:28:5d:fa:e8:57:8b:
0e:de:e2:81:09:19:48:65:f7:e8:e7:71:78:8c:8e:
6f:5d:c8:6b:41:4e:a9:06:6b:39:58:5e:aa:50:6d:
dc:31:76:0a:2d:ff:f3:3b:01:99:6d:c0:c5:a4:2e:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:4A:32:F4:FB:68:31:58:B0:38:55:DB:DF:F0:0A:AF:30:71:A0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KnNKMvT7aDFYsDhV29_wCq8wcaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
77:12:6d:6d:41:15:6e:f2:2a:b1:dd:80:4c:60:3f:64:f6:40:
e3:55:65:7b:77:9d:fd:af:04:29:e9:d8:e0:c2:e9:c3:4c:e8:
3c:05:8c:c7:a5:34:fc:f1:5b:b5:6f:a5:0f:75:1e:aa:f6:5e:
4c:3a:69:51:f3:a5:6f:44:17:0a:58:f2:da:ea:a8:06:76:6f:
9b:d9:a6:fa:9c:38:45:43:a9:6f:d0:0c:0e:25:c2:6a:a3:8f:
ff:39:fc:20:0d:4a:c4:40:5d:be:8c:68:a8:7e:8f:20:a8:c0:
b6:1e:fd:9d:71:8f:96:64:a4:ba:de:4d:9b:41:ef:c1:32:ff:
d5:d1:11:bd:b2:0a:b5:c4:4d:9d:51:cd:0d:34:d1:24:8d:0b:
a0:f3:5e:2e:8e:62:00:0f:d0:d7:1a:4c:8b:f7:fd:09:c8:42:
73:e9:4d:bd:c8:5e:ca:b5:ed:19:a3:93:c0:34:0f:e7:47:e4:
8d:8f:79:f7:a1:47:17:2f:e1:a9:8c:21:80:a7:64:fb:89:f4:
3f:65:2e:ae:bb:b9:37:3a:5f:2a:2f:c5:44:d5:00:ed:44:70:
30:53:bf:1a:fc:ed:a6:34:b3:b2:91:1c:1e:ba:83:ba:85:a7:
d3:10:a4:be:84:f6:34:40:1a:43:89:c0:b9:9d:fe:1a:28:f3:
e2:df:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:58 2025 by rpki-client