Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa
File: _afOaSU7xNqlHS_bSQ-za9xLPBo.roa (raw, json)
Hash identifier: VZHH78NGtXqxyRM6V36oaR4OGrDTsE+RPwA06deMFcg=
Subject key identifier: FD:A7:CE:69:25:3B:C4:DA:A5:1D:2F:DB:49:0F:B3:6B:DC:4B:3C:1A
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11C5
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa
Signing time: Mon 10 Feb 2025 14:27:43 +0000
ROA not before: Mon 10 Feb 2025 14:27:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4549 (0x11c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FDA7CE69253BC4DAA51D2FDB490FB36BDC4B3C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:bb:91:9b:26:2c:4c:41:05:39:80:11:8e:
1a:26:87:ec:7f:d3:98:a4:bc:0f:1f:70:cc:92:21:
1e:e7:b2:28:a5:9e:14:4a:43:9b:76:29:32:19:ac:
ce:da:96:6f:fc:b8:a7:09:bc:56:27:44:1e:81:f6:
c4:0c:9d:34:7f:44:af:3d:27:b7:ec:c6:7b:97:b0:
25:79:01:b0:76:5a:f5:99:cd:c8:e7:b1:85:d9:cd:
59:5d:ca:84:30:c3:4e:20:bd:44:7d:9c:df:7b:ea:
17:cb:00:06:e8:8d:88:e7:92:56:51:13:4d:9c:cb:
61:b6:24:07:fb:93:93:f6:51:63:91:e6:f5:c6:9b:
f2:d7:ce:7e:00:d4:c4:4a:cc:b2:e1:b4:7e:8a:f3:
98:4b:f4:c9:e6:f2:c6:e0:61:0a:9e:7c:0b:9f:25:
33:7c:52:78:a4:46:be:e7:e7:73:b1:87:00:c5:8c:
ca:dd:06:62:56:7d:76:12:63:80:d0:a5:15:45:23:
d6:97:0e:03:43:f7:51:6b:9d:5a:aa:02:45:bd:36:
e9:8e:30:53:96:28:f4:3a:27:d2:65:cb:da:e6:dc:
86:73:ba:ed:d4:d0:81:da:a9:51:4f:0e:9d:76:4f:
2d:a5:18:f2:76:2b:de:72:8f:ef:1b:f3:f8:54:38:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A7:CE:69:25:3B:C4:DA:A5:1D:2F:DB:49:0F:B3:6B:DC:4B:3C:1A
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_afOaSU7xNqlHS_bSQ-za9xLPBo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:17:9f:63:6e:d0:c1:4f:34:8a:24:9a:6b:d0:bc:36:8a:51:
a7:fb:8d:7f:77:a9:d8:e5:1a:4d:1e:9a:45:9c:00:28:f4:0c:
d6:ac:d5:c0:f4:b4:38:60:64:86:75:01:1e:1e:4d:10:8f:62:
f9:1a:70:f9:d8:6f:f8:df:b9:58:6b:27:82:bf:8f:59:6c:24:
1b:da:4f:6c:5b:d1:78:2c:d3:84:a8:4c:47:2a:56:d0:fe:2e:
66:7a:29:59:15:06:8a:28:2f:d2:45:6c:32:a8:cd:76:d3:ae:
c6:a8:db:a2:32:44:56:82:c3:c1:76:6c:c1:f2:85:12:7e:c7:
80:9c:41:e2:8d:95:6d:1d:e1:8f:a0:80:01:1f:81:14:ba:98:
24:53:09:8d:9b:5d:da:99:10:49:95:93:22:b2:19:3b:4f:9f:
fd:1e:ac:5d:45:70:16:ab:92:90:71:51:0c:f0:e5:1e:4d:e2:
82:76:3b:a5:31:4a:78:85:08:5e:3d:92:13:5b:ec:9b:ce:8d:
cc:a6:a7:fe:c0:71:82:58:f3:58:49:b8:fd:2a:75:b1:53:e0:
a5:2d:31:88:fa:5f:d5:c8:7c:29:06:c8:12:cd:15:d6:44:4b:
a2:99:17:a2:93:26:0f:20:1a:3e:6b:ee:3b:24:40:18:65:07:
39:64:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:57 2025 by rpki-client