Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa
File: lIaJa9ePL5b6QFntAseFzA6yCtE.roa (raw, json)
Hash identifier: XVVKVLHNoVzZrCp6DNo1wr7d24McfMvbFNjyrfz3Vfo=
Subject key identifier: 94:86:89:6B:D7:8F:2F:96:FA:40:59:ED:02:C7:85:CC:0E:B2:0A:D1
Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Certificate serial: 0C1A
Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa
Signing time: Mon 26 Aug 2024 05:17:22 +0000
ROA not before: Mon 26 Aug 2024 05:17:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9416
IP address blocks: 203.118.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A
Validity
Not Before: Aug 26 05:17:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9486896BD78F2F96FA4059ED02C785CC0EB20AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:63:c3:77:55:9e:6b:4d:65:a5:b6:99:02:c9:
af:ea:45:83:85:1f:b9:bc:ed:21:95:d0:71:2e:84:
59:ee:98:20:ec:4a:21:11:2e:e9:b6:b6:8a:c3:05:
07:1f:32:b7:79:4d:ab:7a:59:47:83:70:1d:98:48:
47:5c:f7:7e:65:57:cc:d4:ef:89:a7:a0:8b:7f:f5:
25:a1:bc:12:e8:e9:26:4b:06:56:a0:d2:1a:26:24:
46:88:c6:9f:bb:8c:14:5d:28:02:bf:3e:7e:fd:5a:
3c:9e:4b:0e:a4:10:24:f0:8b:00:7c:68:6f:01:55:
d1:ed:f7:a1:fb:b9:cb:4a:79:70:71:3b:65:30:8f:
a0:17:08:65:84:07:43:0d:06:e0:6d:e1:a7:86:fc:
e4:be:ac:70:4a:03:11:b3:40:ee:a5:68:8d:60:0c:
35:59:d2:6f:98:b3:af:bd:6d:d2:f1:06:e2:2f:74:
71:4d:db:ba:b1:6c:3d:3b:f2:47:be:e5:14:99:0d:
4d:03:ea:d9:27:23:88:b4:c4:3c:d3:a5:87:b9:9d:
96:a6:73:63:43:e2:96:ce:07:eb:f8:e1:3a:af:19:
a0:d8:60:d9:c0:93:b5:49:70:76:5d:ec:1c:2a:07:
c3:11:bd:7a:a6:d4:a5:8e:cb:95:4a:47:88:de:c9:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:89:6B:D7:8F:2F:96:FA:40:59:ED:02:C7:85:CC:0E:B2:0A:D1
X509v3 Authority Key Identifier:
keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/lIaJa9ePL5b6QFntAseFzA6yCtE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.118.224.0/20
Signature Algorithm: sha256WithRSAEncryption
63:ca:aa:95:0a:79:fb:fb:dc:2b:ba:f3:e2:7d:0b:f3:c6:2c:
4e:16:7e:69:9c:40:9b:93:7f:d4:ae:c9:79:93:77:22:1f:7b:
2f:28:47:72:5d:66:8e:a0:91:3c:33:c2:3c:6f:a9:ae:ce:d8:
b3:5a:b3:69:b1:86:7f:da:43:a4:84:ff:da:48:a9:02:a2:43:
5e:55:1b:1f:38:27:05:66:4f:89:30:93:f5:50:4e:9e:5f:78:
17:0b:0d:6f:05:88:9d:3a:a6:52:6f:44:b2:f4:02:36:41:82:
a0:b4:73:94:e3:0d:4f:ab:4f:7b:8e:eb:46:9c:c3:c8:33:54:
46:ad:bd:f4:c1:4a:ec:aa:d6:a5:6e:f2:5e:fc:04:72:80:f3:
69:64:f0:2c:d1:12:b7:d6:9f:7e:f4:c6:43:e9:fa:e9:20:06:
b9:13:60:3c:6d:77:69:f2:0a:c9:a4:c5:8d:30:24:a6:50:44:
ee:0e:b9:7a:9f:90:db:42:ab:8b:91:21:3a:53:cb:a8:aa:04:
6e:75:01:d5:ed:b3:42:67:e1:40:4f:46:8d:29:a0:fb:17:7f:
b6:8e:34:e4:71:d4:45:99:74:fb:e0:c2:e4:e6:09:f4:1a:3a:
aa:e5:ba:4a:8d:93:f6:75:9c:92:b8:a4:1d:9a:c9:94:dc:7e:
b9:09:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:07 2025 by rpki-client