Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa
File: RevM6Jw-8WF1dzkLac56OnVbmaY.roa (raw, json)
Hash identifier: EewbAobPSU0UTXIt+OpgNThycwkk8Ekc5YBlXpEFRuM=
Subject key identifier: 45:EB:CC:E8:9C:3E:F1:61:75:77:39:0B:69:CE:7A:3A:75:5B:99:A6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1213
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa
Signing time: Mon 10 Feb 2025 14:28:02 +0000
ROA not before: Mon 10 Feb 2025 14:28:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 210.63.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4627 (0x1213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=45EBCCE89C3EF1617577390B69CE7A3A755B99A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:03:2f:b3:e2:b8:15:bf:80:0c:37:8d:33:
d1:33:4d:14:70:ae:18:95:b0:98:41:a3:f8:87:27:
b5:04:b6:44:5f:71:49:85:9e:32:4d:37:a0:ed:64:
27:be:da:4f:26:be:48:25:cb:68:9b:72:8b:87:7e:
7d:88:27:f1:68:3e:2f:f6:68:93:28:b0:28:1e:43:
88:a9:5b:c9:4a:aa:4a:26:06:72:4e:00:d2:0f:83:
da:e0:38:5b:53:4f:a0:cb:f6:5b:f2:e1:6d:25:07:
50:b3:36:fd:63:6b:f6:af:af:78:34:ea:28:40:95:
56:9b:f6:bc:f7:88:a9:11:9e:ae:c6:71:52:f4:42:
ad:b5:d9:17:b0:dd:a2:32:7a:5c:7d:90:8b:79:1f:
05:06:fa:6c:98:2e:c6:89:50:d0:c2:63:41:cd:31:
47:1e:66:f7:f6:cb:ed:68:e4:6b:08:8f:9a:94:3b:
34:4c:5c:f9:b7:92:a8:71:6e:ba:d2:5b:e8:aa:44:
92:90:0e:65:54:02:e8:1c:6c:d9:aa:67:4b:d9:c1:
70:d2:1f:ee:00:3d:88:de:4b:c0:b4:08:d8:20:e9:
00:76:26:0f:45:35:c9:37:29:2f:70:6c:7c:d1:17:
99:2b:99:20:8a:d0:5f:24:48:a9:40:31:5b:ef:c4:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:CC:E8:9C:3E:F1:61:75:77:39:0B:69:CE:7A:3A:75:5B:99:A6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RevM6Jw-8WF1dzkLac56OnVbmaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:f4:19:cc:e2:27:05:60:12:fe:f4:aa:60:8d:6f:d8:dd:78:
04:0a:8e:44:87:d4:ba:e3:92:7f:f3:1d:e7:b6:0d:a7:8b:08:
a1:8b:e5:da:17:8f:aa:b8:a8:3e:96:d6:b3:16:04:94:52:42:
24:a9:94:a8:6e:3f:bd:bc:31:17:2e:1e:c6:ca:6e:77:59:4d:
58:f7:68:8e:af:e6:c3:53:5c:bc:d3:c5:95:aa:27:22:28:6d:
e3:99:ff:bf:96:a0:8e:f0:28:12:95:f6:ab:fb:3f:f1:93:34:
d3:7c:ab:a9:6f:ba:f6:9a:6c:38:24:39:e3:75:69:6c:91:0a:
10:b4:76:ab:bc:c5:cc:50:2e:be:79:30:f5:a1:ca:ed:38:bc:
92:fd:9a:7f:96:ab:a8:46:a2:9e:5d:a6:bb:1e:4e:e1:86:20:
fe:4d:0a:7c:88:d6:35:d8:ea:70:15:d7:db:de:d8:3a:24:bd:
a5:c7:3b:d5:85:25:75:80:5a:8b:74:da:3f:27:5a:ab:f1:03:
a6:8a:6c:ad:e3:d7:6a:b3:69:2e:fa:2d:8e:4c:e7:68:61:e7:
39:83:79:14:90:76:ab:2a:c1:94:c4:da:ea:e4:15:fb:10:22:
d2:49:9b:90:ac:24:a8:e6:c7:dd:08:ad:a1:f5:53:c0:7e:52:
4b:0b:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:46 2025 by rpki-client