Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa
File: iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa (raw, json)
Hash identifier: q3AU5HlSO3THP1vgCtG3Cbef9jB5BMzVMXsOEkJdamY=
Subject key identifier: 89:6F:5F:A7:7A:7F:D8:B8:99:BC:CA:4A:7B:42:6E:1B:FA:46:28:DD
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1185
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa
Signing time: Mon 10 Feb 2025 14:27:26 +0000
ROA not before: Mon 10 Feb 2025 14:27:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 218.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4485 (0x1185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=896F5FA77A7FD8B899BCCA4A7B426E1BFA4628DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:04:7a:a4:54:69:ca:6a:37:b2:49:dc:cd:
59:08:f0:ee:52:1f:e7:29:0c:68:05:57:a2:5c:62:
60:4a:d4:4d:df:00:bb:15:22:52:94:a2:d5:02:79:
46:9b:cf:68:27:d4:8b:60:88:21:b6:05:a3:af:54:
df:e9:95:a9:ac:e2:69:a2:c4:57:2a:9d:3b:ee:6a:
7b:01:de:85:64:6c:ab:c0:4b:df:05:4f:3c:0c:c5:
c2:f0:a0:30:3d:14:4d:05:e0:bc:56:5e:18:1e:aa:
db:23:51:50:40:16:97:31:c4:35:c6:af:76:1d:3a:
39:75:f9:77:35:3d:79:59:86:47:39:b7:6d:17:2a:
2d:40:00:50:f1:26:6b:f2:62:6b:d0:31:85:f7:ca:
ed:3d:3a:22:65:3b:0a:0a:51:22:97:39:cd:1f:69:
d8:55:24:f2:27:00:f8:d2:9c:3c:90:c4:99:73:44:
7c:66:2c:b8:c6:86:6c:25:a9:48:13:a2:40:40:85:
ca:07:2b:d6:b5:b0:e8:c1:75:b6:76:49:80:ae:be:
67:d3:58:63:3b:5f:81:7c:2c:81:ec:06:59:c2:68:
23:4c:86:b6:1a:c8:be:f0:6b:09:bd:78:36:58:e6:
40:bc:ff:ed:c8:76:81:f2:17:f8:2d:59:9a:98:bd:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:5F:A7:7A:7F:D8:B8:99:BC:CA:4A:7B:42:6E:1B:FA:46:28:DD
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iW9fp3p_2LiZvMpKe0JuG_pGKN0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:1e:66:a2:95:fc:87:4a:8c:a1:ae:52:a9:ac:8f:c2:10:3d:
f8:15:e8:cc:a9:bc:ea:5d:9a:4c:f9:18:bc:a1:fb:98:45:ef:
74:7f:d2:99:ae:e9:1e:e9:61:d7:01:c0:99:bc:8e:ae:56:b0:
48:80:68:bb:46:1f:4f:20:e4:c0:e7:2d:f7:4f:a5:4f:bb:2c:
88:e8:eb:62:af:fa:05:c6:d7:0a:7a:ad:0b:42:07:be:eb:0d:
09:cb:35:5b:97:f7:0a:20:59:2e:f9:3d:21:75:18:44:c1:15:
87:8e:62:48:29:74:4e:07:1c:bd:e4:0c:02:0d:b6:61:a6:b2:
3b:c1:64:78:fe:40:75:28:ae:e8:e2:95:e4:9a:12:04:bd:46:
42:53:a9:2a:09:2a:04:da:76:33:7c:5d:5d:08:45:f0:40:90:
3a:af:9a:f4:ce:6e:c2:d9:d5:34:4b:ac:5a:b2:71:59:42:19:
ea:8f:38:8e:ce:a8:b4:bc:45:4c:52:a7:77:4f:1a:ff:3b:b4:
66:37:fa:a2:3c:ec:df:f5:61:65:0c:0b:76:0f:25:34:af:e5:
d4:68:84:65:15:64:ae:5d:2c:43:3d:ca:d4:d0:33:db:5c:20:
5f:12:28:48:44:58:f7:25:de:89:ba:dd:1a:16:b6:77:e5:fa:
57:d1:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:42:36 2025 by rpki-client