Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa
File: LA6sc1oRcozl3URH779RNpgaSZg.roa (raw, json)
Hash identifier: n3hhwJKGxHfDJD59kqcJ61h7oW4CPzvfuzSrzHLR8i4=
Subject key identifier: 2C:0E:AC:73:5A:11:72:8C:E5:DD:44:47:EF:BF:51:36:98:1A:49:98
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 122C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa
Signing time: Mon 10 Feb 2025 14:28:08 +0000
ROA not before: Mon 10 Feb 2025 14:28:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18412
IP address blocks: 2401:e180:8960::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4652 (0x122c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2C0EAC735A11728CE5DD4447EFBF5136981A4998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:b7:4d:47:26:0e:44:c7:25:50:58:77:24:
dc:b2:28:ec:db:4c:88:0b:aa:ef:03:39:a6:34:2b:
30:bd:87:de:bd:f4:dc:96:ac:ce:b8:e6:75:d0:cb:
38:18:12:02:56:6c:f0:48:20:43:f0:1f:6d:d8:6f:
86:59:63:e7:b7:05:27:c8:22:2d:38:2b:34:03:9d:
74:53:c6:19:90:bf:34:28:ab:83:bd:67:29:fe:4b:
d1:5c:51:6e:59:ab:93:53:b5:b6:cb:fa:be:d7:4e:
67:1b:b9:a2:61:fe:e8:a1:3c:d8:fd:1e:ca:df:08:
8f:d1:f6:73:3d:9a:5f:98:12:4c:66:33:52:bf:2d:
17:52:ea:a1:9a:cf:79:46:52:06:14:b6:cd:1e:e8:
49:20:0d:be:26:69:de:c6:69:25:62:17:8e:fb:65:
92:38:84:f5:7c:b2:81:bd:a5:e9:e3:b2:ad:de:dc:
fc:89:6c:d7:28:66:70:73:db:ff:9e:17:8b:c8:3e:
6d:1b:12:73:dd:de:94:3f:db:ba:72:d9:24:08:34:
60:e6:88:e8:c5:4d:f7:31:2c:f7:c7:c5:06:d1:e7:
64:91:4a:fc:81:8f:06:47:df:ee:c0:53:fd:22:a9:
1c:53:22:f0:40:45:ef:11:c2:18:bb:81:6c:c1:ba:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:AC:73:5A:11:72:8C:E5:DD:44:47:EF:BF:51:36:98:1A:49:98
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LA6sc1oRcozl3URH779RNpgaSZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e180:8960::/44
Signature Algorithm: sha256WithRSAEncryption
89:a0:7e:2a:2b:96:4b:ae:cd:13:42:19:a3:6b:59:2d:43:69:
d9:c0:98:84:2e:c5:57:44:01:9a:93:d3:71:a8:e8:29:99:f2:
c2:1e:84:ca:e9:e7:7d:89:02:b8:18:bd:d7:d0:ce:85:a5:cf:
e8:4b:26:4e:e1:51:c7:74:ad:0d:c3:70:a1:49:60:60:11:bf:
f9:9b:02:b0:91:aa:70:30:32:8d:e8:58:a4:21:e1:2a:7d:f1:
56:8d:f7:6a:f6:1f:2e:ef:52:1c:b9:fd:b9:56:88:37:66:da:
f1:77:cc:26:cd:c9:15:97:c0:f9:45:ec:95:6d:e8:9d:2d:43:
9f:4e:e7:38:22:18:a2:c4:a5:95:bd:b3:f4:4b:00:e3:4a:9b:
7d:ad:0c:da:b7:b9:77:bf:48:59:31:af:04:60:89:ea:a0:e7:
0f:a2:18:8c:c7:aa:bf:5c:c4:a2:13:51:df:1a:fe:d3:43:dc:
73:54:63:0f:ae:71:a5:0f:fe:80:54:43:f5:34:4e:da:43:e0:
b2:cb:57:3e:0a:8c:b6:23:af:73:84:6b:22:7f:fa:6f:d3:85:
57:f6:ff:30:d7:0c:e7:59:3f:1e:2c:e4:0d:a5:25:6f:c4:a1:
d0:5d:79:62:ac:89:6a:28:86:ab:be:03:12:d7:c8:77:48:06:
31:fb:d8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:33 2025 by rpki-client