Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/X_MyI0o1vzTijhcs3IoyoiHddIY.roa
File: X_MyI0o1vzTijhcs3IoyoiHddIY.roa (raw, json)
Hash identifier: 5B9adPkZOFSwXnx1Lg+6v2gi2sfvRPmrcMR+lla3aPc=
Subject key identifier: 5F:F3:32:23:4A:35:BF:34:E2:8E:17:2C:DC:8A:32:A2:21:DD:74:86
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1268
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/X_MyI0o1vzTijhcs3IoyoiHddIY.roa
Signing time: Mon 10 Feb 2025 14:28:23 +0000
ROA not before: Mon 10 Feb 2025 14:28:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 2404:0:7000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4712 (0x1268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5FF332234A35BF34E28E172CDC8A32A221DD7486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:84:11:56:db:89:50:eb:40:3a:af:b2:17:
28:b1:d7:5f:29:55:c8:ed:d7:fb:33:69:0d:0d:d5:
fd:86:8d:53:71:71:c8:f6:64:c4:af:b5:c9:3a:e8:
b9:35:3d:ef:79:a3:f8:81:cd:76:0f:5f:08:c1:7f:
9f:ac:05:36:54:c6:e8:d2:a8:b5:2d:92:91:f7:61:
e2:d9:85:20:df:51:99:bd:e5:76:e4:11:e2:cd:93:
bb:53:cf:0e:b3:95:e4:00:2d:0f:84:0f:fe:02:9e:
23:3a:1d:5e:e1:90:7c:fe:04:a2:23:b3:08:be:6d:
60:5a:57:55:f2:a2:ef:89:92:60:eb:43:81:ac:b4:
10:a2:22:33:22:15:fa:f6:8c:b4:d9:49:3a:12:b6:
84:49:bd:09:67:43:6a:57:c1:e2:6d:f2:e3:63:93:
e6:7b:b1:ea:a2:ec:d7:a4:77:2f:15:b6:bc:f2:6d:
0e:58:e0:50:9a:8f:4c:e1:56:55:52:85:ca:dc:40:
95:81:92:e4:b4:d9:04:2c:30:3b:5c:c1:e2:b3:78:
e3:b2:aa:8f:13:88:4c:08:80:fe:57:da:93:00:0a:
cb:63:b0:67:9f:e7:34:75:ff:dc:7c:49:a3:37:6e:
f1:9f:8f:f8:bd:2b:22:64:9c:fa:9d:b5:86:a7:eb:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:32:23:4A:35:BF:34:E2:8E:17:2C:DC:8A:32:A2:21:DD:74:86
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/X_MyI0o1vzTijhcs3IoyoiHddIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
88:be:d2:bf:5b:52:34:3e:e6:88:20:ae:fe:19:92:2e:12:ed:
20:0a:59:37:b0:25:fb:b4:d9:52:d8:52:ee:2d:10:b0:ad:8b:
19:d2:bc:c4:00:7f:4b:99:0b:29:42:d5:06:27:7d:d0:bb:97:
e8:d9:26:23:d9:33:e0:11:90:86:c3:a9:b3:3f:ac:31:56:1a:
2f:3e:76:98:2a:7d:9e:79:d1:d4:b3:92:3e:6c:80:ad:e4:e3:
03:ae:6a:74:00:6c:69:2e:77:fc:c2:9a:a8:d5:f5:a0:fc:c3:
82:67:c3:82:51:74:f6:04:6a:45:6a:c3:49:d9:13:bc:0b:ce:
de:7c:b4:c6:e6:94:0e:6f:f5:9e:17:a6:63:16:d7:7c:4a:3c:
9d:64:bb:9c:85:2b:ff:99:14:84:d6:02:37:34:7c:5f:75:41:
73:1b:b4:78:59:a1:fe:19:ae:06:48:34:66:a6:90:3f:af:16:
3b:c0:22:77:4e:6d:91:25:9b:fd:5e:6b:65:83:2d:54:dc:2c:
5b:80:ec:48:d2:e0:c9:89:4c:63:4b:d4:10:b8:49:cf:28:52:
9d:cb:77:a7:3a:b5:03:59:cb:a7:30:38:2c:22:40:5f:00:60:
05:4c:b7:6d:a5:02:d8:e9:3a:fd:32:af:ee:e9:f3:93:f0:99:
95:78:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:27 2025 by rpki-client