Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa
File: OQgLs0LIyOKnCybMFSkzW09agXY.roa (raw, json)
Hash identifier: 7pi14PHfgGITzzwDvjjiEPVp69PFC+RslEJGNzXfV50=
Subject key identifier: 39:08:0B:B3:42:C8:C8:E2:A7:0B:26:CC:15:29:33:5B:4F:5A:81:76
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1051
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa
Signing time: Mon 26 Aug 2024 05:16:18 +0000
ROA not before: Mon 26 Aug 2024 05:16:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 218.34.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4177 (0x1051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:18 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39080BB342C8C8E2A70B26CC1529335B4F5A8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:61:66:d7:d9:e1:7f:7e:f9:f3:60:c6:82:
c8:f0:5f:19:25:5a:42:f2:f0:59:8d:68:db:3a:49:
d2:b5:9f:d2:16:d8:c9:1b:5a:4c:82:ab:50:47:7f:
bd:97:21:f3:c6:2d:62:b9:a7:ea:34:9b:65:eb:f7:
0f:a4:9f:e7:6f:c8:21:69:19:92:b5:1e:7b:dc:0a:
c8:a9:68:5d:49:96:b5:35:64:6b:df:3a:63:3b:bf:
eb:50:31:02:31:e0:d2:34:b0:09:2f:c3:f7:cd:c6:
9c:6a:72:54:f9:2e:24:6b:e9:1c:a9:c6:5f:5d:84:
90:02:7c:05:1a:6d:14:22:28:e8:e3:08:fb:44:4c:
a0:62:72:23:6c:7e:c5:ac:b8:35:e2:fd:8f:72:15:
ef:dd:48:bc:04:38:2e:1b:22:82:12:be:c7:ca:35:
8c:6c:a7:8a:b4:14:c0:a6:04:23:3e:cd:70:52:2e:
b7:4f:33:d8:ff:93:80:eb:15:23:a4:7e:d1:84:3f:
11:d9:28:85:c9:6f:59:61:54:b1:c3:db:17:d6:41:
96:b8:0b:95:8c:fe:c0:0d:be:c5:51:8d:09:4b:12:
c3:bd:05:33:11:4a:32:8d:cf:be:aa:31:6a:fb:82:
8b:c8:cb:a3:e7:3b:d5:55:c6:6e:36:40:52:67:b1:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:0B:B3:42:C8:C8:E2:A7:0B:26:CC:15:29:33:5B:4F:5A:81:76
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.96.0/21
Signature Algorithm: sha256WithRSAEncryption
81:14:bf:b2:69:0e:55:f9:15:a4:86:b7:07:47:60:7a:7e:fd:
a2:36:c1:d7:aa:2b:aa:17:49:9d:4b:70:1c:2b:4e:9e:8b:fd:
fb:e2:a1:1d:ae:1f:0c:29:b8:dc:75:33:c2:94:98:dc:85:f4:
17:1f:d1:35:0a:6c:5a:ab:ca:39:e7:2d:ce:cd:5d:51:77:72:
cb:06:15:7d:3a:9f:55:45:43:fc:34:9c:f8:2a:2d:db:6b:ac:
7f:65:9a:f4:7e:f7:de:77:18:5e:a9:09:45:31:43:75:dd:e2:
0a:b5:f6:43:73:71:50:a3:17:f7:6d:97:dc:ca:97:bb:33:13:
dd:4f:74:12:38:35:15:6c:c7:6e:ee:44:f8:5a:9b:f0:53:46:
a7:3d:2e:af:3e:e5:dc:d1:ab:dd:d5:59:a0:fd:b3:7f:d7:1f:
db:c1:d0:2d:1c:b4:b0:43:04:0e:24:c2:78:04:31:91:13:2e:
a5:7e:b4:12:38:7d:93:36:77:cd:43:78:ff:29:fd:8e:17:24:
b1:45:88:9f:b0:ed:0e:bf:47:d7:b6:d8:b3:7a:4e:7d:cb:ca:
3d:59:88:b2:25:3d:ae:46:ea:9f:ba:64:ee:ee:3a:08:0c:95:
5e:81:ac:87:2f:a2:b9:aa:19:20:2b:fd:3e:74:5a:c2:37:36:
70:0e:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:21 2025 by rpki-client