Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/O0uwem9_T_OfTQelUIfOWtyuFYg.roa
File: O0uwem9_T_OfTQelUIfOWtyuFYg.roa (raw, json)
Hash identifier: qaihNOB9h7bKJSIvUD4finAm6OyvRt+qNXF1nk2kqJQ=
Subject key identifier: 3B:4B:B0:7A:6F:7F:4F:F3:9F:4D:07:A5:50:87:CE:5A:DC:AE:15:88
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1267
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/O0uwem9_T_OfTQelUIfOWtyuFYg.roa
Signing time: Mon 10 Feb 2025 14:28:23 +0000
ROA not before: Mon 10 Feb 2025 14:28:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24154
IP address blocks: 210.200.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4711 (0x1267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3B4BB07A6F7F4FF39F4D07A55087CE5ADCAE1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:5f:30:56:05:71:7e:9e:4b:84:9a:a4:f6:
e9:94:9a:3a:c1:47:e3:3a:e3:31:33:eb:5c:e0:ff:
b3:c2:71:84:f1:0d:b9:26:d7:d0:06:3f:0d:d5:8f:
70:a3:9d:6f:c6:f1:79:c2:fd:fb:d1:34:55:63:d8:
cf:8b:18:25:92:9b:0a:0a:f3:31:45:24:71:16:66:
b7:2e:2d:93:6d:6f:90:73:4c:b6:e2:88:ab:90:06:
01:6f:aa:4c:a0:f6:79:8e:50:e7:d1:8d:18:d8:00:
6a:94:17:6b:4f:8a:d8:16:ba:b0:7f:79:21:d9:5b:
f0:b3:13:c8:2c:1d:a9:55:fa:54:64:d9:2b:de:d2:
0d:b3:62:19:b5:40:4d:6d:a8:66:56:c3:5a:d6:3b:
21:27:a6:83:7c:20:62:f2:0b:96:b6:5e:e1:2c:d2:
15:5d:72:eb:f1:1d:9d:29:67:eb:58:e5:20:d7:62:
ca:4e:41:1d:24:cf:aa:ab:c6:3f:d1:30:2e:3c:49:
ff:e4:bc:15:2d:f4:b4:1d:cc:b3:74:53:4d:0c:1c:
ff:82:02:58:f0:e0:0d:b8:80:d6:f9:90:dd:23:34:
55:73:df:f2:29:54:05:75:b7:a9:8f:99:7e:81:b2:
28:05:43:2e:c4:2b:ef:c8:2d:f1:0d:01:5a:df:01:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:B0:7A:6F:7F:4F:F3:9F:4D:07:A5:50:87:CE:5A:DC:AE:15:88
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/O0uwem9_T_OfTQelUIfOWtyuFYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.85.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a2:94:37:c5:99:30:2f:84:65:28:94:c1:f3:e6:34:f0:ff:
af:ce:80:44:e5:c5:2b:97:79:ab:02:59:59:11:98:28:0e:02:
66:24:57:de:e2:46:c1:c1:a8:ac:8a:05:ec:7d:1e:a1:ea:ad:
a5:73:1a:6d:41:34:eb:3f:d6:7b:23:27:5a:54:f9:e2:67:3e:
21:8d:b2:f0:22:fa:d2:fa:6e:ed:0a:c6:6d:5a:97:f9:90:f2:
33:3b:2f:b5:bc:2d:6e:69:18:6a:bb:59:0d:a6:de:a8:91:78:
05:02:1a:8f:df:33:71:be:24:0e:6e:c8:69:e3:05:ee:9f:eb:
b8:21:64:36:2f:54:94:e3:4e:7a:1b:9f:d4:ef:a3:e6:8b:36:
46:05:24:b1:28:16:0d:44:c6:80:62:90:9e:b7:6f:1a:e2:9a:
8a:28:b5:a1:d1:cb:98:9b:6b:fe:c7:5a:53:65:7a:c3:56:e9:
6e:dc:99:e8:9f:4e:31:99:9b:33:3f:e3:0c:71:ad:f8:94:23:
90:65:14:4f:00:da:7c:71:6a:6d:f0:50:90:ef:17:41:5e:2a:
5d:eb:94:2e:ae:78:cb:aa:a9:87:ea:98:39:e2:0b:32:5f:98:
a7:26:70:1f:e4:dc:39:dd:d4:b1:56:34:99:9f:a9:84:d0:68:
82:2a:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:40 2025 by rpki-client