Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa
File: V7nan-CVdKGwuRQwERIqQOON1bU.roa (raw, json)
Hash identifier: OuMK+M+uO53FIT2UdGBX6OmnLf69H3EefjjNPFbAZlk=
Subject key identifier: 57:B9:DA:9F:E0:95:74:A1:B0:B9:14:30:11:12:2A:40:E3:8D:D5:B5
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1038
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa
Signing time: Mon 26 Aug 2024 05:16:11 +0000
ROA not before: Mon 26 Aug 2024 05:16:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.201.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4152 (0x1038)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=57B9DA9FE09574A1B0B9143011122A40E38DD5B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:e4:ae:3e:98:bb:47:f3:cb:34:11:f1:11:
da:e8:ae:d4:d1:8a:79:b1:e5:9b:46:cf:6b:d8:4d:
7e:2e:7c:26:80:2c:64:9c:0c:53:75:d2:f4:ec:6a:
38:1f:1f:6a:e0:ae:9b:22:86:87:49:24:80:02:e2:
60:70:9f:40:0b:3b:7b:46:93:9a:80:5c:ac:7c:9f:
ea:2c:49:fb:84:2d:cd:b5:af:0b:e3:00:8b:08:b4:
dd:ee:ce:1c:12:f6:36:8e:ac:ed:d6:99:64:b5:b8:
c2:0e:11:70:05:c0:35:15:ee:95:dd:73:01:45:c9:
1b:1f:e7:8f:90:c3:6b:c5:42:56:a4:69:0b:a2:1f:
05:72:66:60:82:3a:76:e9:b9:b4:18:b4:cd:ca:82:
ec:ac:42:cc:05:94:b9:ff:d5:75:44:ce:00:6b:ba:
9c:32:c8:41:d5:34:5e:e7:92:64:9c:01:06:c0:7f:
14:b9:81:01:37:70:de:5b:95:10:31:39:f0:11:a0:
34:2d:95:d5:43:c2:28:e3:9d:cb:81:5b:1e:2e:3e:
f0:6b:9a:f7:77:d8:2b:6e:50:95:13:f8:27:ad:2c:
2b:a2:37:fe:0f:d8:e7:42:d1:8d:6d:15:5e:02:54:
ef:95:5d:08:f5:dc:05:de:96:51:25:50:8e:a2:c0:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:DA:9F:E0:95:74:A1:B0:B9:14:30:11:12:2A:40:E3:8D:D5:B5
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:2f:7b:74:7b:70:e3:eb:cb:60:13:41:3e:68:6c:84:a1:09:
e7:a8:c6:cd:b4:6c:6d:9d:ae:1d:7f:89:9f:63:39:88:04:48:
32:48:7b:1e:7d:e6:4a:95:2c:3e:99:23:89:44:ef:24:57:23:
1a:2f:f0:22:d3:62:2f:a6:bf:78:bc:8a:b1:7d:61:ae:99:f3:
e7:b3:48:56:18:f6:20:ee:ad:fb:59:bb:95:59:16:91:7e:42:
1d:a3:5d:bc:dc:cb:53:47:49:59:8b:02:c9:69:59:94:17:92:
c3:26:59:77:42:1d:af:e2:e4:fa:7a:23:8c:2c:e1:a4:55:54:
83:47:16:7e:26:d7:90:45:04:cf:85:9c:7c:ed:8a:5c:68:4d:
e9:97:ba:bb:d6:dc:a8:94:7a:5c:10:a2:cf:48:e8:75:60:3d:
3b:a3:0b:89:51:18:64:26:23:2d:04:0f:7b:31:3c:fb:d4:46:
d1:9a:ce:67:68:12:c1:67:bb:15:83:e3:b2:ce:54:0a:98:8a:
0d:e7:f6:89:af:b4:6d:30:94:c7:c8:f3:e5:e8:2b:f1:0a:53:
38:e1:8b:59:94:23:f2:2e:b9:be:f6:54:38:8e:df:18:51:1a:
e9:d9:8d:d2:5a:1f:f7:0d:18:76:02:05:64:3e:f6:8c:5c:ce:
59:3a:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:20 2025 by rpki-client