Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fy2RAkEKvkW2x7DEsh6B7vVvJ8s.roa
File: fy2RAkEKvkW2x7DEsh6B7vVvJ8s.roa (raw, json)
Hash identifier: NEMvmhHjPmIRHW7Hb0PfnVD2IstiTXoJN/NGcpAPwkI=
Subject key identifier: 7F:2D:91:02:41:0A:BE:45:B6:C7:B0:C4:B2:1E:81:EE:F5:6F:27:CB
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1170
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fy2RAkEKvkW2x7DEsh6B7vVvJ8s.roa
Signing time: Mon 10 Feb 2025 14:27:21 +0000
ROA not before: Mon 10 Feb 2025 14:27:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131597
IP address blocks: 218.35.32.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4464 (0x1170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7F2D9102410ABE45B6C7B0C4B21E81EEF56F27CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:46:64:13:75:d8:9b:91:48:bd:73:ac:a4:
db:fc:51:44:6a:5e:b2:e3:ab:7b:c9:28:61:ac:f2:
48:c0:d9:64:04:15:b1:1f:13:29:dd:8c:6c:c6:d8:
52:c9:6f:3b:ae:d1:61:c3:24:eb:c1:0f:af:cd:0b:
38:3d:a9:71:9c:3f:37:b5:ba:1c:35:20:94:f4:11:
5d:a8:99:30:b2:be:31:d3:ec:2c:01:3a:a4:be:5a:
6d:80:0a:c0:ef:fb:b3:a9:e8:fb:9d:7b:f8:a8:ea:
75:06:13:e3:cd:c1:7c:48:05:1c:f2:c2:80:ca:08:
09:e4:55:7e:27:93:4e:ca:a8:03:bd:54:1d:ef:f2:
da:8f:01:1b:2d:f4:cb:8e:ee:41:f1:0a:1d:f1:31:
06:62:e5:1e:01:d9:1d:7a:39:5f:40:12:8b:16:5c:
bb:0d:02:96:55:d5:6b:33:8e:4e:4c:ff:2f:f7:74:
55:74:7e:b6:a3:06:38:7d:8c:85:ca:cd:a2:e0:7f:
7d:59:b8:a1:10:c3:77:d1:ac:e4:25:0d:37:e7:b5:
da:59:eb:60:bd:3f:79:18:05:e5:08:95:d3:c0:c7:
d5:84:c6:35:7a:6f:d9:0e:c9:47:7a:21:4b:2e:d0:
67:86:41:86:c4:49:33:c4:1f:69:05:1d:0e:b0:55:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:91:02:41:0A:BE:45:B6:C7:B0:C4:B2:1E:81:EE:F5:6F:27:CB
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fy2RAkEKvkW2x7DEsh6B7vVvJ8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:c6:eb:9a:db:fc:be:e0:54:6e:8e:08:aa:48:72:0a:bc:c8:
93:b9:cd:cb:a3:7a:ce:1c:f8:87:d4:b0:06:f7:91:89:51:d0:
41:98:82:03:fd:79:01:e5:7a:31:c5:5b:bd:df:46:81:1a:bd:
9f:32:f6:c4:d2:f4:3a:09:b9:8f:0b:5d:7b:e3:91:d4:f9:37:
d9:ae:a9:3c:37:7a:ad:02:34:b0:39:6d:cb:f2:fd:c0:b1:ad:
51:e7:ba:37:11:58:0e:88:8e:16:72:88:fa:8b:c4:fd:75:97:
f9:15:5d:db:10:a4:82:fe:9d:5c:3f:d4:d3:9f:70:be:34:34:
26:f2:02:73:e9:90:7c:4a:f4:42:89:ae:6e:e9:f1:9a:cc:5b:
9c:7f:ca:4e:0d:be:f5:17:bd:1a:93:c2:08:01:32:6b:ea:33:
24:08:c5:3c:ed:f9:02:53:bb:ee:67:44:8c:25:ed:2c:5f:76:
6b:47:d6:3d:cf:3f:aa:24:60:a0:5a:ba:08:3d:a1:1c:ba:8e:
61:ac:85:e2:b5:4d:0d:74:88:74:31:50:a7:c8:cf:a6:d7:83:
a9:66:0b:09:e6:e1:bd:b9:df:94:19:3a:36:e7:ca:3d:05:0b:
71:43:45:b5:e5:f9:a4:96:12:f8:36:a5:be:ba:72:82:7f:42:
fe:6f:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:49 2025 by rpki-client