Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa
File: fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa (raw, json)
Hash identifier: MMUJKlNDAqHrvyZt4Mc3xMJcM0aVxcZFhB/9AFWxbB4=
Subject key identifier: 7E:73:D6:B6:FE:DF:1F:34:53:B9:82:F9:B0:F2:C1:67:59:D4:63:81
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11E5
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa
Signing time: Mon 10 Feb 2025 14:27:51 +0000
ROA not before: Mon 10 Feb 2025 14:27:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9674
IP address blocks: 110.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7E73D6B6FEDF1F3453B982F9B0F2C16759D46381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9a:bb:8f:e8:db:12:8e:41:dc:91:4c:6c:09:
bb:16:37:b0:db:fb:99:6b:6b:e3:ae:2a:02:ab:1c:
cf:88:b7:15:2b:8a:e4:06:1a:fd:3d:43:66:7c:48:
3e:af:ba:30:e1:74:02:ce:52:76:7b:71:68:90:53:
25:61:fb:d3:31:46:81:e4:79:40:77:b9:01:a9:db:
41:d4:0b:b1:9d:8d:e5:04:c9:3f:a9:65:79:4b:9f:
c2:53:7f:65:e2:27:c1:25:f3:22:a9:4e:f6:80:f5:
de:47:9b:6c:fa:22:29:ff:c7:47:b4:68:de:4a:a7:
3f:b9:fd:9b:f4:94:f6:08:41:7a:bd:15:88:8a:4e:
57:97:c7:93:02:a7:cf:a6:d1:b8:1d:01:bf:d8:8c:
56:89:1b:14:9a:f8:be:6b:34:5e:a9:14:27:f1:af:
21:e7:8b:b4:c6:bc:e6:e9:1f:9b:fb:49:9b:cb:b6:
4a:46:07:36:f0:d5:c4:44:ad:46:a8:7c:c9:99:81:
be:3a:44:5c:8b:5c:81:99:43:6d:c5:b4:3f:fc:2b:
ee:eb:62:de:05:1b:5d:1b:f2:6b:84:9b:bb:09:58:
ec:cb:76:89:8a:9c:60:87:a1:19:32:29:f8:f3:52:
98:29:60:44:84:65:51:74:0f:38:a2:26:03:72:fe:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:D6:B6:FE:DF:1F:34:53:B9:82:F9:B0:F2:C1:67:59:D4:63:81
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fnPWtv7fHzRTuYL5sPLBZ1nUY4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3f:56:b8:0a:f1:18:ec:17:7c:b2:48:1d:17:da:bf:7c:cc:71:
bf:8a:17:d3:7a:71:f6:e5:65:be:db:af:0c:68:97:3e:de:cc:
a5:84:bb:8f:bd:d0:39:d1:23:0d:d5:d8:4a:9a:cc:3c:70:60:
b0:d2:f7:2c:04:e3:32:8f:2c:c6:8b:49:d5:02:bb:f4:90:78:
0c:1a:cd:33:c7:7d:74:a8:d1:9b:48:93:0d:32:c1:14:e4:5e:
35:fc:f6:34:be:ef:9e:17:f8:b2:37:c8:c4:02:9b:65:0b:cd:
e8:a7:21:0e:04:3d:5e:e3:e3:70:e3:1d:5d:f7:0f:01:31:8a:
51:df:12:a2:8d:64:c5:a5:19:10:a1:28:de:98:2b:61:60:b8:
e3:eb:8a:b5:57:06:08:b6:96:f8:38:ec:1d:70:87:c2:c4:ea:
51:2e:39:3f:94:ef:57:da:25:9d:3c:20:3a:6a:d5:46:04:cc:
01:5c:4c:4d:69:a0:21:91:0f:99:ac:af:7e:f8:63:fb:18:df:
98:93:cc:c1:1d:ba:54:3c:68:b7:02:4f:93:2f:01:b8:88:8e:
9b:aa:52:d4:58:c8:75:dc:bf:3e:08:13:aa:b0:47:74:d3:24:
af:40:5e:49:ca:10:de:be:4e:b9:b3:31:cf:d3:03:8e:88:98:
4c:17:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:40 2025 by rpki-client