Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/eWIPNfA_W97lWGoSgPh0TDIQ0QM.roa
File: eWIPNfA_W97lWGoSgPh0TDIQ0QM.roa (raw, json)
Hash identifier: Re0D+Qm/CK8uNPGIlF8/AgBwB5FpMoGZp417/9M9Iw0=
Subject key identifier: 79:62:0F:35:F0:3F:5B:DE:E5:58:6A:12:80:F8:74:4C:32:10:D1:03
Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Certificate serial: 0C8C
Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/eWIPNfA_W97lWGoSgPh0TDIQ0QM.roa
Signing time: Mon 10 Feb 2025 14:19:23 +0000
ROA not before: Mon 10 Feb 2025 14:19:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9416
IP address blocks: 203.118.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Validity
Not Before: Feb 10 14:19:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=79620F35F03F5BDEE5586A1280F8744C3210D103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:c7:c3:71:ad:47:45:f5:50:bf:e6:88:4c:
33:aa:0a:52:2c:44:48:6a:81:15:22:97:91:df:e2:
87:c5:d0:1b:98:b2:2d:4b:44:27:df:26:53:6c:c0:
42:7f:51:c2:fd:3c:e2:79:0a:74:98:84:09:5a:2a:
c0:bc:69:0d:d6:08:4c:6f:a9:7e:2d:47:55:39:3d:
7f:f4:5d:fb:dd:41:d4:cf:5d:80:d5:f0:ee:47:a3:
b0:7a:df:04:62:f0:f2:f0:aa:99:2d:21:fd:50:c5:
95:31:14:47:6a:b0:43:3c:44:45:a6:56:b4:3e:cc:
52:ad:50:24:b1:46:45:aa:4a:4a:57:ce:40:0b:29:
a0:6c:c0:54:81:4d:7d:ae:b0:d0:73:f6:90:62:66:
a0:48:a8:e1:f7:e0:f0:c8:8e:78:ac:a5:f2:45:92:
a4:74:c0:61:50:2d:37:a7:74:69:43:1f:bd:eb:1a:
e4:0c:62:49:c8:1f:14:c0:a1:80:e4:d5:06:6c:6e:
61:70:2a:c1:48:62:97:50:49:a9:4a:4e:e1:63:e1:
56:ba:36:3c:5b:04:82:dc:7c:cc:1e:1f:d6:d3:1a:
ea:27:b0:6c:43:53:ce:9c:a1:ea:81:8e:f0:46:57:
b8:c7:9d:a9:1b:9e:1b:62:a6:6c:ac:01:57:a1:da:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:0F:35:F0:3F:5B:DE:E5:58:6A:12:80:F8:74:4C:32:10:D1:03
X509v3 Authority Key Identifier:
keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/eWIPNfA_W97lWGoSgPh0TDIQ0QM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.118.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:e4:33:b1:bf:bc:d1:04:7a:8b:92:fa:eb:59:19:77:21:6e:
eb:c3:ce:74:cf:8a:f1:07:f2:19:c2:bf:dd:b5:d3:4a:dd:24:
69:da:c5:7b:c8:31:5d:47:bb:14:9a:87:8a:0f:da:7a:21:f2:
95:70:2b:e1:2d:87:68:28:4a:4c:81:69:dc:bd:7f:af:97:71:
3d:6a:13:88:07:2e:06:1c:f3:3f:22:75:05:67:ae:8b:4a:08:
72:ae:58:39:04:81:6d:09:f9:3b:72:cc:5a:9f:0c:74:fc:52:
34:5e:af:7a:01:85:ee:94:7c:db:4d:72:03:48:d9:89:d6:9b:
6d:a3:3e:53:be:cf:a2:95:47:bd:04:37:1b:d5:eb:24:6e:e4:
59:ab:c5:5f:ed:60:25:6e:af:27:e1:2c:6f:5c:73:e4:1b:60:
6a:a0:7f:dd:07:42:ed:f9:75:65:91:34:b3:5d:cb:7e:00:3f:
1b:54:3d:8f:38:8c:ec:cf:a7:f7:2f:5b:9f:2b:12:4b:04:9b:
26:e6:a0:36:dc:8f:2d:e3:92:15:23:f7:15:28:8f:b9:f2:a8:
68:e2:75:6d:9f:ee:5f:59:a0:bc:af:84:f0:c6:5f:39:92:d9:
24:bd:b8:93:c7:3f:6d:c5:d6:bc:5a:61:46:9a:a2:f7:00:8d:
aa:4d:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:47:45 2025 by rpki-client