Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/VquFwluA6OgspruCflDPSxW5Vpo.roa
File: VquFwluA6OgspruCflDPSxW5Vpo.roa (raw, json)
Hash identifier: FWxVITGIseJHli0x17CQVi7/iqGGu1cRL4sFrpbRtKI=
Subject key identifier: 56:AB:85:C2:5B:80:E8:E8:2C:A6:BB:82:7E:50:CF:4B:15:B9:56:9A
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1279
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VquFwluA6OgspruCflDPSxW5Vpo.roa
Signing time: Mon 10 Feb 2025 14:28:26 +0000
ROA not before: Mon 10 Feb 2025 14:28:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.202.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4729 (0x1279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=56AB85C25B80E8E82CA6BB827E50CF4B15B9569A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:85:94:e0:cf:68:2c:7e:47:bd:ea:7b:dd:
54:f7:11:b0:29:76:78:46:3e:11:28:13:92:d5:c6:
c5:9f:44:f4:06:38:30:d3:a9:55:b1:a2:cb:e6:4c:
1e:fd:5b:91:72:9b:83:e6:d6:4c:cc:76:9c:e7:4c:
2c:43:2f:1f:3b:50:6b:e6:ac:f5:f2:b7:33:19:bf:
1d:01:85:ad:3a:10:3d:e9:6c:00:a3:74:21:76:f4:
ca:a2:3a:aa:bf:9a:6c:31:ed:f3:6b:b7:76:84:b5:
08:79:dc:93:83:2c:ad:87:f3:0f:5f:f4:2c:c6:f6:
43:35:2d:ee:1a:67:67:0a:b9:de:50:f6:92:e9:6d:
75:b9:07:0e:0d:5e:93:1b:37:bd:e4:bb:d5:04:42:
db:0f:53:56:03:d5:16:13:ea:91:bc:b2:75:1f:c3:
7d:68:ed:74:0c:d4:17:c8:21:b3:f1:6a:c8:79:45:
cd:38:2b:76:30:5e:0a:74:ad:f1:23:a5:c3:d9:66:
60:4a:ec:99:2a:58:15:e6:e4:d2:f1:55:74:05:9f:
c3:30:53:97:67:10:f6:6a:f3:7f:b1:ec:18:64:50:
47:84:5f:34:fb:84:ad:04:cc:e3:e9:5a:c9:7b:a0:
11:4b:e1:f6:0a:a2:31:84:c3:c3:1f:22:18:cc:2d:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:85:C2:5B:80:E8:E8:2C:A6:BB:82:7E:50:CF:4B:15:B9:56:9A
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/VquFwluA6OgspruCflDPSxW5Vpo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
02:0f:91:b1:52:4a:5f:98:86:ce:91:60:f0:a5:b8:9a:0b:2e:
af:c7:97:00:2a:13:8c:38:52:c3:bb:e2:5a:74:4a:b9:eb:53:
22:39:a7:a9:e5:fb:ec:cc:6a:4b:fc:e0:0b:81:aa:f0:17:e9:
ab:6c:7e:15:02:17:53:1a:07:dd:c6:6a:ef:15:f7:96:1c:50:
b4:6c:f8:29:d4:8a:41:2d:18:af:f1:b0:0a:c1:58:06:ee:6e:
98:b1:67:bc:6a:5a:de:db:5c:3b:04:d2:15:a0:a3:7b:61:88:
b7:a9:aa:b3:41:8b:e2:9f:c0:74:29:41:6a:69:99:0b:ea:66:
d6:bd:9e:8f:15:6d:b0:8f:cd:16:da:20:ae:24:de:ef:e9:e8:
97:44:d4:b3:6e:bf:3f:34:01:c5:51:03:da:f9:8b:96:bf:90:
2d:89:b0:bd:38:40:c3:54:06:79:13:1b:c8:31:39:b3:1a:54:
f2:4d:70:6f:75:65:17:ea:a8:2d:1f:2c:4b:d2:85:a2:ca:c7:
47:fc:1b:2d:48:f6:ee:23:6f:fe:0b:a7:0f:f7:51:ab:30:81:
7b:fc:14:09:8d:f7:d1:25:60:6b:6b:0b:91:83:70:e4:36:e4:
41:4f:07:e8:2b:24:fa:be:0e:8e:f2:20:1f:fc:12:1e:98:1d:
66:6c:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:44:36 2025 by rpki-client