Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa
File: mr3RAto-qNG__kllz5ziv01Ocnk.roa (raw, json)
Hash identifier: MRtgCcBN2IOHCXcpe7fVjIaSYyaK1rvKujguzXfe1Uw=
Subject key identifier: 9A:BD:D1:02:DA:3E:A8:D1:BF:FE:49:65:CF:9C:E2:BF:4D:4E:72:79
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1063
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa
Signing time: Mon 26 Aug 2024 05:16:22 +0000
ROA not before: Mon 26 Aug 2024 05:16:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 210.200.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9ABDD102DA3EA8D1BFFE4965CF9CE2BF4D4E7279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:7d:2e:61:99:74:c5:d8:63:ed:e8:09:9f:
ce:97:32:c3:3b:6e:82:f9:dd:02:e4:7c:36:66:a7:
a2:ab:63:09:35:6e:2b:0a:83:7a:af:b7:c2:6f:a2:
af:38:25:3d:45:d2:f1:8e:30:5e:0c:82:41:9f:e9:
5a:f8:06:ae:31:26:57:6a:71:c7:30:f0:c8:d0:28:
b8:5f:de:d5:c5:d8:af:23:61:c0:f1:68:c5:5b:63:
57:95:cc:47:3c:1e:f5:e6:2e:ff:4c:8e:2b:49:a6:
a4:38:ab:d9:55:ca:04:9b:92:47:0a:5a:9d:3d:ae:
be:34:31:6f:19:64:67:ff:38:13:5e:fb:47:ef:a2:
34:9f:6d:ec:18:b6:2e:b0:7c:18:3b:67:a0:ad:90:
ff:da:ef:5c:96:2b:97:a7:31:20:93:1f:c9:a5:7e:
ca:b5:77:d4:8c:75:0e:bf:47:0f:10:f3:fb:ef:c4:
25:ac:c3:55:1f:f3:d2:7a:18:a5:19:be:99:12:c5:
c5:0e:d7:08:4a:80:43:c7:98:39:1a:18:59:3a:bc:
ac:8a:6a:b0:04:25:41:67:9f:e0:6f:2f:34:a3:06:
41:97:37:7b:d8:48:f0:ca:25:a4:12:8b:2b:ce:7f:
fa:bf:53:97:be:49:d0:4c:85:26:d4:1d:06:f6:b0:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:D1:02:DA:3E:A8:D1:BF:FE:49:65:CF:9C:E2:BF:4D:4E:72:79
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:02:05:59:8a:bb:f6:ff:e5:77:35:f6:d6:6c:f7:a0:ef:6a:
9f:63:a6:57:a1:8b:f5:4a:df:c3:d9:aa:6a:71:34:1c:af:fc:
d5:cc:0e:97:7d:1b:34:b9:83:23:69:1c:d8:1b:1e:23:3c:d0:
69:c9:80:45:57:f3:30:26:da:c6:71:8f:23:cf:90:7d:8f:14:
c6:a1:74:c7:0f:07:fb:8b:ce:2d:70:0e:70:dd:a6:59:1f:c4:
64:61:92:12:d1:53:19:89:55:52:ec:c6:0f:dc:f0:eb:75:8d:
ef:c1:a9:16:aa:da:b7:e0:10:72:aa:f9:dc:6a:81:31:36:e4:
f5:44:8b:5b:d7:56:89:46:ac:28:01:e4:92:93:04:14:58:82:
e3:ed:bb:12:7a:ce:c9:99:34:d1:52:5f:a4:79:10:d6:fe:08:
fc:68:c5:75:80:e9:08:76:ba:f5:f7:8b:df:51:93:44:9c:6d:
81:cd:15:2e:98:6f:4e:8b:9f:73:61:cb:00:05:20:08:be:a8:
7b:1e:0a:7e:fc:6a:b5:3c:20:60:6a:33:f3:8d:0f:d6:cf:c5:
dd:3d:53:f9:01:c7:a6:54:3d:e5:d6:4d:2a:61:81:54:b1:03:
b7:71:c7:c9:d5:92:20:fe:9c:70:5e:e6:4e:ee:39:cd:7b:bd:
62:04:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:51:22 2025 by rpki-client