Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa
File: OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa (raw, json)
Hash identifier: uLouZ9zsyvyP9C1ZcSy1UyDj2sVC4StoOnKq3nrMips=
Subject key identifier: 38:E9:D5:C0:A3:17:92:11:2F:57:AB:66:2F:59:AD:EA:17:CF:DC:2A
Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Certificate serial: 0C19
Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa
Signing time: Mon 26 Aug 2024 05:17:22 +0000
ROA not before: Mon 26 Aug 2024 05:17:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 203.118.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3097 (0xc19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Validity
Not Before: Aug 26 05:17:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=38E9D5C0A31792112F57AB662F59ADEA17CFDC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:86:b5:26:16:71:57:ce:71:0e:79:4f:60:
37:76:c4:e0:bf:59:0f:f2:97:15:3f:02:1d:3e:fe:
ad:c0:dc:e1:5e:a0:22:57:2e:07:de:d6:ad:ed:6f:
3f:f1:0e:ea:f7:98:10:60:66:e5:84:c7:6a:d2:26:
ce:ee:91:bf:6c:01:ff:ee:2a:46:72:d1:ec:85:91:
b0:c9:18:15:99:da:ca:33:6b:53:e0:ae:ad:87:e2:
4b:ba:df:61:9a:5a:2a:5c:87:1f:0d:70:19:52:e3:
27:1a:d0:28:0c:5d:08:db:24:3c:9a:9f:01:13:aa:
a9:6d:c6:2a:5b:ac:f6:ac:27:dd:57:4a:16:fe:a5:
aa:46:66:f8:28:aa:34:76:54:7b:c3:11:0b:f3:ce:
7f:fa:ed:cb:e1:c2:f3:ba:d7:fc:12:16:2d:fb:40:
10:08:73:b2:81:97:68:cd:9d:3e:91:b3:f5:b0:50:
a1:6c:30:f0:09:04:05:07:41:b9:02:f6:22:6d:28:
d9:6a:2f:69:58:e2:0a:45:f7:e4:cb:de:e3:74:b4:
9f:d0:12:66:d5:d9:26:c0:c9:6f:7c:79:1e:0e:5d:
fd:e3:f8:d3:33:f3:e6:b5:cc:f7:0f:8c:87:be:da:
38:44:5f:69:96:4a:06:a6:70:7a:c4:a9:09:88:7c:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E9:D5:C0:A3:17:92:11:2F:57:AB:66:2F:59:AD:EA:17:CF:DC:2A
X509v3 Authority Key Identifier:
keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.118.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:65:fb:e8:a5:ca:b6:42:b6:29:54:b4:a3:4b:cc:70:6d:99:
a2:3d:aa:8d:63:37:09:cc:8c:90:70:d7:6e:70:41:e5:55:a0:
74:6f:a8:3d:dd:21:5c:6d:b0:8a:45:68:54:23:10:93:c5:24:
5e:23:26:93:66:2c:4d:af:b1:b4:f2:7a:db:bb:ff:4b:02:a1:
5f:99:88:ff:a0:cd:6b:45:08:4b:0d:d2:46:14:f3:a2:08:a8:
c3:b9:53:dd:f2:c2:48:6f:b6:38:24:49:35:b6:9e:62:8e:e9:
e8:de:af:39:54:7b:3f:7c:52:e5:3c:af:32:20:be:95:3b:13:
54:4d:87:5e:b2:db:42:6a:e5:6c:1a:88:d1:ab:bf:c7:ea:db:
f9:4e:19:32:45:15:90:4a:0f:e5:84:7f:ac:be:f4:df:58:fb:
ec:0f:f5:83:59:05:15:17:df:79:96:49:86:23:7e:48:a8:fd:
b6:b7:a3:44:0d:08:70:5f:7d:d1:d9:86:7a:5b:59:cf:36:7c:
af:bf:0a:3a:76:f6:c7:2c:57:b2:3a:ac:3f:74:bf:82:21:88:
14:ce:fc:7d:04:0a:70:e5:8e:91:33:54:29:12:50:62:df:ab:
f4:0b:80:24:5c:70:11:6d:77:fe:36:24:86:32:4c:2b:da:0d:
04:dc:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:45:52 2025 by rpki-client