Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/JuBX4YKrtbW_6AIS6yZstrV201Q.roa
File: JuBX4YKrtbW_6AIS6yZstrV201Q.roa (raw, json)
Hash identifier: p8KdGLrRQCAVq7doKZD8K+wxxGpOeehNdAPZkVVXRYA=
Subject key identifier: 26:E0:57:E1:82:AB:B5:B5:BF:E8:02:12:EB:26:6C:B6:B5:76:D3:54
Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Certificate serial: 0770
Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/JuBX4YKrtbW_6AIS6yZstrV201Q.roa
Signing time: Tue 29 Sep 2020 10:00:51 +0000
ROA not before: Tue 29 Sep 2020 10:00:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 203.118.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Validity
Not Before: Sep 29 10:00:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26E057E182ABB5B5BFE80212EB266CB6B576D354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:90:62:94:b6:84:ff:70:65:95:94:4b:ae:
1e:85:39:b7:67:a5:60:b2:0a:5a:6d:6e:8e:e9:f5:
96:f4:31:47:06:34:d9:c8:18:20:f4:74:6a:3c:91:
59:3a:9f:85:2d:af:ac:2e:97:3e:98:e4:7d:8f:03:
bb:bd:c7:dc:5c:0f:a1:d6:57:cd:ee:4a:d4:5b:dc:
f7:e6:c7:51:f5:98:cc:53:f3:27:d3:a3:25:8c:5c:
67:95:7b:7c:a6:bc:b6:80:53:7a:ec:45:17:e6:ac:
4e:45:16:8d:16:fa:fa:88:70:ee:72:00:b6:b6:57:
50:09:93:25:9a:04:2e:53:83:57:9d:a0:16:00:1b:
e4:61:02:8f:ac:17:6f:78:87:6b:a2:ae:0f:42:96:
cb:d2:e6:fb:ee:93:f5:12:4c:97:1a:a5:08:de:38:
79:72:4e:bc:8c:9f:a8:73:9a:4d:cb:69:79:05:90:
06:4c:9c:ae:9f:fa:61:8c:4f:4e:27:3e:f3:03:66:
9d:e5:69:a4:17:e5:cb:3d:b2:19:59:3b:c7:b0:36:
2d:33:3a:3a:4a:50:0e:3b:53:cf:e2:09:3a:f5:e7:
0c:c1:61:bf:a6:75:8e:73:c6:e5:38:d2:84:8a:7b:
1b:2e:bf:1c:b5:8d:49:b8:f5:ac:a7:7a:64:fb:25:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:57:E1:82:AB:B5:B5:BF:E8:02:12:EB:26:6C:B6:B5:76:D3:54
X509v3 Authority Key Identifier:
keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/JuBX4YKrtbW_6AIS6yZstrV201Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.118.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:a3:fc:b1:9f:63:cb:ef:fb:3b:fa:83:7a:84:e2:d7:55:db:
5a:6c:db:42:e1:9e:26:93:00:0e:50:73:04:71:f5:92:d5:8d:
43:58:93:e0:41:21:29:b4:41:68:80:2a:6d:31:db:6f:34:76:
9d:7e:1b:88:fe:8f:3b:e0:5c:5a:9e:3a:79:5e:63:eb:a1:a1:
d2:b3:f6:08:41:05:47:a5:77:a2:d4:64:fb:94:2e:58:1f:d5:
89:54:88:8b:0f:50:95:25:a4:5e:fd:78:f9:d3:90:e0:52:b4:
ab:9e:6b:18:56:2b:aa:d7:1f:ff:58:3b:0a:53:ab:8b:1b:88:
47:d0:74:2f:eb:ca:df:63:8c:12:86:bf:0e:88:70:20:6c:38:
2d:87:01:36:95:6a:d6:9f:eb:a4:e6:38:e5:e6:80:46:17:b1:
f3:30:24:12:6f:a9:3e:00:7e:d9:69:8b:ed:48:59:e7:cf:da:
d7:45:1e:ec:c2:2b:ae:b0:dd:5d:42:a3:3f:3e:92:2e:0c:12:
4a:25:42:ba:50:1b:09:29:37:ad:6e:de:c9:5f:13:83:c3:56:
bc:09:32:99:b3:9a:6a:b8:6b:cf:01:2e:38:e9:f1:00:aa:45:
e8:ce:84:57:bb:77:24:2b:8a:da:d4:ee:1f:d9:c1:01:d5:9b:
f9:7d:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:42:19 2025 by rpki-client