Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa
File: vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa (raw, json)
Hash identifier: Ov4CJNIb3Z1HdJgrD1cKzw5KSs1iFvGTZNXloSqHYGs=
Subject key identifier: BD:82:EA:11:52:14:53:A4:81:DF:02:E0:3C:BD:05:91:E3:35:C3:F6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FF6
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa
Signing time: Mon 26 Aug 2024 05:15:55 +0000
ROA not before: Mon 26 Aug 2024 05:15:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 210.200.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4086 (0xff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:55 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BD82EA11521453A481DF02E03CBD0591E335C3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:b5:fe:75:44:02:45:5f:55:83:d7:34:8e:
ef:44:22:72:73:90:bd:d1:16:4e:0d:2a:c6:1b:aa:
ba:12:6a:e7:92:11:b5:15:d8:2d:69:30:19:8e:1e:
04:79:8c:4a:1e:fa:c2:0c:34:0d:a9:70:e7:81:6a:
74:d9:40:32:e8:3a:05:9e:86:e2:91:81:36:12:09:
d9:69:5d:94:dd:0f:26:c9:f4:ab:af:d7:2f:37:0c:
21:3a:ff:04:c6:16:04:bf:21:5c:dd:68:8e:bc:0e:
28:70:3e:65:6a:e2:85:ae:22:d6:16:2d:21:5e:d8:
d2:58:91:65:0f:41:34:7f:96:54:0e:3c:a6:4d:28:
3a:b9:36:06:e8:17:ef:3a:16:32:f4:27:9f:e0:82:
a5:93:01:55:91:e9:94:cc:dc:e2:2b:dd:23:ed:10:
5c:46:56:fa:ec:bf:1e:5b:9d:3f:ad:91:72:f5:82:
a0:6a:4b:50:ca:15:00:7f:93:51:47:16:4c:c9:1b:
1c:68:5f:36:ef:3c:6f:8f:d5:1d:c7:75:57:b6:84:
20:69:ee:95:cb:7d:63:36:2d:60:e8:c3:8f:fd:f7:
03:2f:6d:b1:24:87:9f:28:f6:3f:d9:83:8c:5e:d1:
4d:68:23:45:5e:85:da:21:3d:a9:4d:eb:61:d7:3b:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:EA:11:52:14:53:A4:81:DF:02:E0:3C:BD:05:91:E3:35:C3:F6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.148.0/22
Signature Algorithm: sha256WithRSAEncryption
11:a4:73:0c:a9:9d:07:2e:73:70:1a:95:70:6c:d5:82:79:01:
30:94:bb:f1:85:ee:2b:96:8d:80:4d:4a:fc:d3:dd:aa:5a:88:
7d:bc:7d:19:9a:c7:38:86:bc:ea:eb:2d:f0:79:87:c9:c1:a1:
b5:e5:7e:7d:38:65:91:7c:77:65:2d:8f:bf:af:62:31:13:dd:
45:ed:11:d6:89:d0:04:79:6b:fb:9d:7a:fe:93:ed:24:d8:a9:
d5:af:0a:a4:cd:61:ca:1e:e8:7d:5d:46:6e:0e:4c:a0:02:c4:
a6:39:0a:b8:17:5c:ac:b1:b4:c1:11:93:94:07:e5:06:8d:fc:
ee:b8:00:8f:b0:65:13:00:11:e7:92:0f:da:97:75:1c:d2:1c:
aa:89:17:5b:aa:36:89:ee:03:28:31:cb:a1:24:24:bf:17:fc:
e5:c4:3a:f8:ee:86:cf:e4:1d:00:b2:40:7e:d9:01:d6:29:9c:
05:91:87:53:46:58:eb:00:f5:db:7f:60:94:91:62:2c:3a:b9:
33:1d:5d:72:a3:0b:22:25:f0:f0:e2:22:ad:c4:87:1d:7c:be:
b9:31:17:56:19:ac:fd:ce:c5:62:49:fe:13:ae:22:9c:99:90:
0e:34:2a:6f:ec:3c:47:5b:8e:96:2a:91:56:4b:6d:ac:2d:78:
2d:ca:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:16 2025 by rpki-client