Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/kp6v64owm5Cr6tgo5DqItjwKQm8.roa
File: kp6v64owm5Cr6tgo5DqItjwKQm8.roa (raw, json)
Hash identifier: 71uUSXZQHFl+lPipMhE7oLw3Tlfiy5ucQpmKCnFhQ5A=
Subject key identifier: 92:9E:AF:EB:8A:30:9B:90:AB:EA:D8:28:E4:3A:88:B6:3C:0A:42:6F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 123E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kp6v64owm5Cr6tgo5DqItjwKQm8.roa
Signing time: Mon 10 Feb 2025 14:28:12 +0000
ROA not before: Mon 10 Feb 2025 14:28:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4670 (0x123e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=929EAFEB8A309B90ABEAD828E43A88B63C0A426F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:a1:0f:11:c3:35:f9:9e:58:71:bc:66:e1:
f5:2b:b9:f4:16:64:30:a1:ac:2f:f0:58:02:1e:e3:
8d:c0:b4:62:cf:c3:05:9b:f7:ef:ae:15:83:93:2a:
30:8e:c4:90:29:3e:8e:08:67:bf:2c:ac:4f:5b:29:
34:82:e7:26:b8:af:26:f1:9d:e8:34:45:0c:39:4d:
41:68:6f:2e:b2:71:0c:34:b3:85:8d:3f:10:c4:0f:
3e:02:dc:cb:69:17:11:fc:fb:8e:5f:94:cc:77:14:
5f:12:24:2d:c4:0e:57:af:b8:a2:66:68:be:35:2d:
4b:e7:bf:82:30:6a:3c:42:f4:12:33:81:b8:ac:eb:
75:43:b3:30:bf:f9:1e:dd:82:36:eb:68:a4:4a:a1:
7f:a9:7b:3b:ad:2e:7e:6c:59:6a:5b:ef:d3:8d:0b:
32:2e:91:82:ca:00:d8:1b:63:61:7d:6d:32:a2:51:
58:0b:08:b8:54:01:57:0a:c6:81:63:e1:57:1d:c1:
9e:f0:32:24:7e:fb:f2:81:0f:09:ba:4c:25:2c:ee:
ef:b6:34:d8:c8:5b:df:f5:f3:43:82:4f:ff:2a:dc:
cf:59:d4:c9:bb:ed:6f:d4:9d:96:cc:92:4e:4b:8c:
90:c7:5e:eb:bd:76:d2:81:57:7b:60:3a:da:9b:2e:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:AF:EB:8A:30:9B:90:AB:EA:D8:28:E4:3A:88:B6:3C:0A:42:6F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kp6v64owm5Cr6tgo5DqItjwKQm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:37:5f:8f:c8:04:7a:89:1c:3b:5e:58:d9:10:12:33:db:5c:
76:3a:46:48:91:33:92:aa:3f:67:c8:3c:f6:6b:ce:06:2e:96:
18:76:dc:a7:94:56:fd:a7:7a:1b:93:12:3f:11:04:2d:e4:0e:
1a:90:a4:3d:9b:36:cb:6a:21:c8:f3:a3:15:21:34:d0:00:c4:
a8:80:dc:3b:ce:29:0c:cb:f5:bf:24:f4:33:5b:a8:f2:9b:99:
ca:67:46:fb:d8:ea:b3:55:62:2e:1f:c9:e0:9a:fa:cd:30:17:
8b:0e:fc:87:81:30:bc:57:91:9e:1e:65:b5:62:e2:b9:96:b7:
77:bd:15:d1:88:d7:bc:1c:24:ab:e0:92:21:21:0e:34:90:88:
85:06:1a:2e:a9:18:a6:72:c6:b1:0a:c4:99:89:5d:63:6f:2a:
4f:e0:be:2c:13:b9:27:32:13:9f:28:14:88:92:0d:70:d0:71:
6c:a9:00:38:70:2c:e5:da:32:e2:5b:df:94:24:8b:89:72:43:
93:ec:02:c3:50:af:b0:c1:9a:71:b2:71:50:85:30:42:6b:ed:
f9:25:d3:a3:b0:91:d2:ee:4a:67:0c:e8:85:c5:dd:02:86:99:
cb:fc:62:80:a8:26:b9:fe:11:0e:e6:56:0b:76:77:2b:93:d7:
d4:e7:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:33 2025 by rpki-client