Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/V2rX2gNlu_Wj-Lt9INYdjjmVNbY.roa
File: V2rX2gNlu_Wj-Lt9INYdjjmVNbY.roa (raw, json)
Hash identifier: pM77qQU8h1mfhq8LyL/zxN+bzPJvO1KOazf/etK3wsU=
Subject key identifier: 57:6A:D7:DA:03:65:BB:F5:A3:F8:BB:7D:20:D6:1D:8E:39:95:35:B6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1176
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V2rX2gNlu_Wj-Lt9INYdjjmVNbY.roa
Signing time: Mon 10 Feb 2025 14:27:23 +0000
ROA not before: Mon 10 Feb 2025 14:27:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 223.22.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4470 (0x1176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=576AD7DA0365BBF5A3F8BB7D20D61D8E399535B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:e5:4b:18:43:c8:2b:de:d8:f6:ac:0f:00:
c2:01:c5:ef:05:a4:cf:4e:91:6a:49:b8:7e:b3:ff:
3a:df:4c:38:af:c8:34:98:3d:f0:53:d7:e8:d8:b7:
2c:aa:1a:22:09:57:50:2b:4a:2e:dd:13:65:fa:d6:
8e:12:dd:e8:73:92:b4:3e:5d:f3:cc:7d:58:de:76:
45:30:91:47:58:d5:59:df:13:19:68:f1:84:2f:b2:
b5:d8:0f:91:d7:e5:ae:62:5b:db:e1:68:e8:fa:2c:
a5:81:2a:3c:de:f7:2e:28:f2:9f:65:d3:45:64:22:
e4:c5:f8:14:bf:28:5e:e3:3f:e6:23:49:23:ba:4d:
58:34:55:02:5a:cb:0a:68:64:b1:46:a0:cc:0b:7f:
6c:26:4f:de:8c:d7:90:9c:de:19:fc:05:ce:35:99:
72:ea:72:d4:22:ce:cc:dc:fa:ec:ef:c7:6b:61:8c:
a9:27:54:7a:a1:4d:4c:93:2a:25:95:fb:6b:66:5c:
57:72:fe:15:59:f9:30:6d:6e:da:d0:01:09:bf:1e:
13:94:dd:35:a4:d3:07:76:b5:b4:7c:8f:e0:e9:01:
5c:19:00:a8:56:14:e3:fb:29:3e:ef:8d:c6:ab:4e:
bf:ba:e7:3a:56:0b:fb:70:4b:23:4f:ae:3c:6a:ea:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:D7:DA:03:65:BB:F5:A3:F8:BB:7D:20:D6:1D:8E:39:95:35:B6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V2rX2gNlu_Wj-Lt9INYdjjmVNbY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d3:a7:62:8d:1a:a4:93:78:27:eb:57:38:8a:b2:eb:ae:51:
d6:79:96:95:77:83:dd:72:3f:b1:5d:b2:9b:b2:95:68:83:4d:
ed:e6:36:77:9a:a5:7c:86:e8:99:0b:f1:11:b8:ef:29:98:f5:
03:5d:46:1c:4d:65:06:2d:ce:b3:f1:27:68:7b:f9:ec:e3:32:
a2:f1:c6:fb:11:93:66:43:ae:a0:17:78:20:2b:5e:59:f1:62:
03:c1:77:2c:5c:e2:f5:a7:b2:1a:5e:7c:b6:3a:f1:c9:c9:b2:
19:4c:37:9b:fa:8f:e7:2e:0a:f1:27:6e:04:34:7e:4f:04:0b:
08:ca:d4:93:d9:82:12:f8:57:d3:13:9b:88:ab:a0:da:c8:a0:
3b:bb:96:4d:c8:3b:a4:c6:be:db:a3:7a:3a:af:09:42:96:3b:
29:3b:79:59:af:e2:ef:09:53:4d:b0:b6:db:bf:29:16:17:77:
6e:3a:b1:b8:cb:ba:4a:7d:08:e4:e9:fc:e4:f2:a6:ec:40:69:
d3:63:0d:a6:63:3c:99:80:ae:c2:fb:1b:12:b4:82:fc:76:4f:
a8:3a:2e:6d:fa:d7:a7:f9:84:2a:0e:c2:79:fe:af:77:f1:8e:
fa:e0:6b:de:ac:bd:a0:9f:48:af:86:71:96:9f:84:f9:04:cf:
22:b5:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:42 2025 by rpki-client