Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/siVT0Uvw9ulx2GoHAF0Z8ggUEC8.roa
File: siVT0Uvw9ulx2GoHAF0Z8ggUEC8.roa (raw, json)
Hash identifier: vOlzssFbRz2vCX4qb8wjAm082JAGpKagVPXUmQcr5Ig=
Subject key identifier: B2:25:53:D1:4B:F0:F6:E9:71:D8:6A:07:00:5D:19:F2:08:14:10:2F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11C0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/siVT0Uvw9ulx2GoHAF0Z8ggUEC8.roa
Signing time: Mon 10 Feb 2025 14:27:41 +0000
ROA not before: Mon 10 Feb 2025 14:27:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 124.218.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4544 (0x11c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B22553D14BF0F6E971D86A07005D19F20814102F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:7f:a9:42:6f:95:84:d7:11:ab:9f:9b:6e:
3b:0d:45:00:0d:f2:a6:ef:d5:1d:2a:64:46:78:93:
bb:62:93:99:af:87:b2:c7:10:16:50:8e:14:d8:82:
b1:80:eb:cb:1d:8e:06:02:7b:45:4a:24:38:ce:d0:
5f:fb:f7:f4:0e:3f:4a:d2:83:a7:53:ea:f2:88:49:
90:cb:e1:ac:48:eb:de:8d:fb:02:82:e9:1f:81:06:
11:c2:84:8b:ed:fc:9a:98:e8:08:c9:35:1e:59:2d:
9a:42:62:56:00:fe:25:1a:2a:7d:83:88:07:ba:5b:
0e:bc:f3:cf:fc:12:c8:97:34:2a:aa:81:da:bc:8b:
d2:7e:d2:1b:64:2f:1e:db:8a:ab:e5:e0:b9:06:78:
02:1b:ad:04:18:80:03:78:6b:21:95:18:ea:4b:c5:
6d:8d:84:78:a9:9f:0d:96:a2:45:42:90:66:96:9f:
ca:da:3b:d4:18:0d:b5:d5:0d:9b:bd:6c:7d:bb:02:
17:3f:2c:ca:06:aa:21:b5:90:a2:dc:31:92:46:26:
45:7b:e2:82:17:b5:b1:bd:3f:25:47:43:7d:4b:e8:
73:08:78:2f:c1:f6:b8:9f:13:5d:71:b6:a8:02:b7:
ce:06:f4:d8:c0:e7:16:9e:47:71:cf:f8:62:26:31:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:53:D1:4B:F0:F6:E9:71:D8:6A:07:00:5D:19:F2:08:14:10:2F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/siVT0Uvw9ulx2GoHAF0Z8ggUEC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.64.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b8:62:81:b2:c9:98:83:39:07:52:f0:a9:27:75:71:ee:78:
2b:40:2b:28:de:31:47:63:85:b9:90:fe:9b:92:b9:0a:0c:36:
88:9c:09:96:b3:59:2b:19:6f:0a:cb:58:5c:c8:af:5f:58:be:
4f:b8:7a:f3:20:a7:ae:c7:60:7d:f0:e1:e5:06:57:b4:3b:4c:
4b:db:28:30:70:7b:5c:ed:83:88:d0:16:80:3e:3d:43:3c:ff:
9a:28:92:0c:4e:d5:84:3f:7e:6e:80:76:6b:72:00:1c:e4:d1:
fa:84:a3:91:29:87:c7:80:71:6c:56:ba:5c:63:5e:02:a9:d8:
25:ab:e3:ab:f2:4e:ca:27:47:25:bf:61:08:81:eb:32:a5:8c:
9f:94:bb:cc:26:92:af:5b:20:60:0a:b9:41:84:3d:d3:67:d4:
28:ce:39:36:1f:c0:df:0c:a9:0d:3a:6d:91:0f:4f:f1:67:0a:
d5:cc:53:14:6f:66:e3:24:ed:2b:c8:7d:7e:41:41:48:a8:94:
4e:cb:2d:68:65:bf:9a:5e:0e:55:02:06:eb:94:62:b1:1d:5e:
19:f2:fb:60:53:3a:83:d8:22:54:19:7f:0d:95:e0:85:81:58:
93:3d:d4:1d:47:f3:a8:38:e2:d0:7f:fd:1b:0b:f8:ad:7f:f7:
b2:88:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:44:27 2025 by rpki-client