Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/zN7ZpX9VbZptuBiP1QxCgFdv9P0.roa
File: zN7ZpX9VbZptuBiP1QxCgFdv9P0.roa (raw, json)
Hash identifier: f+v2eLCTgRjbcayXxyfK+3UGaDC151LzGeLRu053uhw=
Subject key identifier: CC:DE:D9:A5:7F:55:6D:9A:6D:B8:18:8F:D5:0C:42:80:57:6F:F4:FD
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11BA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zN7ZpX9VbZptuBiP1QxCgFdv9P0.roa
Signing time: Mon 10 Feb 2025 14:27:39 +0000
ROA not before: Mon 10 Feb 2025 14:27:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.200.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CCDED9A57F556D9A6DB8188FD50C4280576FF4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:bf:60:c7:f4:ba:d3:a4:60:63:bc:76:6a:
10:a6:83:cb:e0:5a:d0:58:f2:a2:6c:22:26:43:ac:
79:22:b8:2d:df:5d:45:8f:2f:99:57:86:e9:7a:f8:
06:78:4b:9e:f8:da:86:b8:10:2d:2f:ca:55:1c:fe:
07:33:c0:68:23:eb:d5:1d:06:19:aa:5c:26:b9:71:
1f:66:3a:dc:01:81:96:7f:69:be:b7:93:96:49:53:
98:ae:9d:d6:c3:88:04:27:0a:84:b8:55:6e:d0:d1:
7e:c1:31:db:6d:ce:8f:8a:e6:20:3e:a5:6b:8f:dc:
d3:9a:ef:4e:38:54:f9:b7:c1:cc:7d:32:3b:40:b5:
13:5a:3b:23:8f:db:9c:bf:85:d9:ba:d7:cc:90:e0:
7c:ac:ab:c9:47:9d:70:45:72:f4:55:a8:a9:2c:43:
73:42:15:90:34:e7:38:58:a9:cc:10:e7:ea:32:2c:
ba:0b:ac:3d:97:c8:80:22:37:be:2b:d0:2a:5e:ef:
05:fb:52:b6:d6:a1:fe:69:e1:ae:2f:f1:26:a0:10:
a7:54:08:5f:2b:f1:15:3e:7b:28:3b:03:0e:0b:bc:
74:c8:33:2b:96:99:f7:c9:ef:54:dd:14:1a:2c:87:
df:57:74:ae:df:e5:5f:aa:5f:7c:fb:14:49:77:72:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:D9:A5:7F:55:6D:9A:6D:B8:18:8F:D5:0C:42:80:57:6F:F4:FD
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zN7ZpX9VbZptuBiP1QxCgFdv9P0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:46:f1:74:dc:b4:de:3e:af:cb:94:24:ad:0f:f6:65:55:0b:
00:95:3b:5c:98:0e:b2:33:f8:68:b6:05:b3:94:8b:36:44:a0:
0e:f3:4c:2d:24:0d:49:8f:45:1e:8c:3f:a1:b6:19:70:fe:30:
8d:ea:f6:b3:fb:cc:45:23:11:8b:a6:5d:d8:92:e1:c6:b8:03:
9a:74:cf:5a:24:87:25:15:77:e6:8d:59:b0:26:22:01:95:b5:
62:a9:3c:55:ce:21:20:b2:b5:53:61:5b:ca:11:7b:56:70:79:
6a:73:1c:40:17:3f:b1:38:91:6a:c7:bf:c4:f6:bf:83:c1:ab:
0a:7c:5f:3a:53:01:ca:4a:37:74:ab:7f:8c:95:56:8b:12:e7:
1c:4b:37:03:da:c3:22:64:cb:00:4a:ac:60:5a:e1:90:dd:b2:
c8:65:f7:c8:8d:00:e9:c3:ea:8d:50:a1:66:fa:43:7f:f7:89:
77:d4:22:c6:be:95:67:f4:6b:2c:03:b6:d1:6d:91:cf:e2:5a:
e4:07:00:db:11:a7:f7:15:86:05:37:b3:65:71:9e:e2:2f:51:
53:e3:de:50:0a:77:b6:18:a8:ce:24:3a:24:ef:dc:8c:c7:81:
e8:9d:93:b0:83:3f:cc:80:05:d7:dd:54:48:40:44:46:95:d9:
e2:2f:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:19:51 2025 by rpki-client