Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa
File: nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa (raw, json)
Hash identifier: tpH0d1f79RKdUyk3I3tNXWB5QonXpVQeXlaLoZQMIiE=
Subject key identifier: 9E:BA:9E:A0:5C:F1:D4:BB:56:F0:74:06:56:BE:88:1F:8C:58:F8:F3
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 118C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa
Signing time: Mon 10 Feb 2025 14:27:28 +0000
ROA not before: Mon 10 Feb 2025 14:27:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 218.34.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4492 (0x118c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9EBA9EA05CF1D4BB56F0740656BE881F8C58F8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:69:20:d1:47:bf:8c:c6:26:65:00:0e:a5:
91:83:a9:64:3d:56:2c:59:0d:9f:7e:f9:a8:0e:94:
3d:85:f4:5f:71:ad:e4:33:52:77:e8:98:2f:56:a0:
ad:6c:7c:be:2c:fc:ae:1c:94:28:0f:9f:56:b0:9b:
14:51:7f:4e:d5:33:c4:8b:b7:ad:e2:48:1d:88:59:
da:fa:a5:b8:c3:5f:0e:6d:d9:6d:4c:d2:a6:9f:dc:
ef:0a:b1:65:a9:da:ed:1f:de:47:f7:70:52:41:f9:
24:9c:83:4c:bc:13:4f:4f:dd:14:6c:2a:85:b3:d7:
71:88:f8:30:60:f3:4a:bc:5a:26:93:bc:1e:18:bf:
ee:90:2a:e8:5d:c9:c0:af:c7:72:e7:0f:23:2a:4c:
b6:08:4f:71:d9:e1:ed:bb:c5:95:46:09:f8:d4:c7:
8b:6e:72:b3:47:6a:b0:28:36:6e:ea:be:ff:1e:ae:
38:d9:d2:ca:37:b5:6e:74:13:0e:8d:77:f5:37:3c:
d1:8d:c3:bd:d0:a1:07:0e:33:67:0b:22:70:b1:78:
59:06:f0:e7:db:05:3b:9c:d2:74:42:38:54:66:cd:
f8:85:ad:0e:3f:07:54:09:03:41:89:2c:76:3c:41:
8c:44:9c:84:4a:9c:f4:5c:b7:91:7e:04:34:09:d6:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:9E:A0:5C:F1:D4:BB:56:F0:74:06:56:BE:88:1F:8C:58:F8:F3
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nrqeoFzx1LtW8HQGVr6IH4xY-PM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.104.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f7:a0:f8:9c:d6:44:48:8d:d1:59:b6:18:12:c9:00:ff:f9:
d4:23:9f:91:fb:63:a9:65:92:6f:bb:f9:a8:60:7d:76:95:95:
b0:de:7e:df:90:99:b8:19:f6:89:12:e1:41:66:42:f5:bf:b4:
f2:f8:89:ab:c6:0d:18:a1:a3:ac:43:63:09:c4:73:45:f0:4e:
a2:6b:1f:ca:0b:f1:e0:b0:35:7c:c5:ab:de:46:43:70:6b:58:
80:4f:5f:11:e8:50:bf:ee:ae:a4:37:81:67:ee:38:35:23:e9:
a5:83:46:eb:8f:f5:26:ba:d3:e2:7a:16:08:28:e0:6a:67:96:
7e:17:f5:aa:c4:53:a3:07:4d:07:38:fe:f1:32:b9:9d:46:40:
e9:09:88:5a:c6:b8:a1:cb:39:b8:51:d0:52:e0:8a:01:59:f0:
28:f2:92:d8:5b:a7:fd:0d:35:12:80:6e:9c:72:cf:f4:32:43:
e4:71:e0:13:4f:8a:22:5d:56:cb:dd:e9:3e:f8:97:c2:4b:74:
87:90:1e:61:61:74:93:f9:ce:39:88:8b:92:22:ff:01:5a:f8:
a0:33:d2:9b:85:c8:6d:c6:5b:27:8f:88:d7:3a:77:be:df:8a:
2e:52:3c:0c:3d:be:4e:a1:20:6e:df:ac:af:22:db:d0:9e:05:
f2:2e:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:15 2025 by rpki-client