Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa
File: ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa (raw, json)
Hash identifier: si44X6SmEuUTzQeehX8jf9YpHpn97D+69yCXthQn+Fw=
Subject key identifier: 66:81:42:EA:64:75:C1:7D:21:36:2E:7E:75:6B:6A:8F:B3:C5:1A:CD
Certificate issuer: /CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Certificate serial: 41
Authority key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa
Signing time: Mon 10 Feb 2025 14:22:48 +0000
ROA not before: Mon 10 Feb 2025 14:22:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 2.58.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Validity
Not Before: Feb 10 14:22:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=668142EA6475C17D21362E7E756B6A8FB3C51ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:09:e9:04:62:7f:04:1e:b1:b2:f7:cb:fb:
24:09:07:7a:2d:8e:34:00:f6:de:ab:5f:8d:38:21:
bf:70:0e:93:47:54:0f:c0:c5:a5:2b:db:cf:44:08:
df:1f:38:04:05:e4:23:bc:e4:32:e3:d8:59:da:80:
46:7c:4d:99:5e:fd:6e:4f:5a:9b:1c:3c:af:4b:17:
68:ed:2f:b6:33:c1:6a:6a:24:41:02:f2:32:f4:af:
11:d2:d2:67:17:c2:96:0a:9e:81:20:5c:d2:73:20:
9a:93:e0:73:75:5a:6f:d2:f0:25:33:2e:b9:9a:67:
d0:fb:14:7e:50:7c:01:f8:d4:68:63:f4:39:e0:bb:
ab:19:07:6d:69:e8:cb:cd:47:3f:97:04:b7:d9:f7:
d1:34:e4:a4:df:3f:f9:f6:0d:d2:58:31:00:52:2f:
ca:a4:e2:7a:b1:99:dc:17:0b:f1:02:e1:8e:3e:05:
bc:3c:4e:61:00:d7:8a:f4:aa:93:63:f6:81:76:ac:
77:c8:44:7d:7a:03:11:9b:7d:5e:94:54:cb:2a:ea:
12:28:3e:4f:a6:5e:7f:fb:ab:c0:ea:a8:24:d5:e5:
e8:ad:e5:a5:fe:59:39:e8:dc:85:1c:e2:c3:0e:92:
7c:66:5c:c8:b3:a1:d6:3f:d2:6d:b5:3c:7d:db:23:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:42:EA:64:75:C1:7D:21:36:2E:7E:75:6B:6A:8F:B3:C5:1A:CD
X509v3 Authority Key Identifier:
keyid:BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/ZoFC6mR1wX0hNi5-dWtqj7PFGs0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
2.58.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:a5:8a:12:4c:96:7e:4a:e3:bf:5d:e5:ae:e4:e3:fb:6f:4f:
79:d8:08:ad:e2:cb:e5:8c:65:fc:c1:18:89:24:e9:80:b4:40:
d5:9d:0b:31:f4:ee:55:cb:74:4c:8a:04:98:49:c9:1e:a7:fd:
58:6d:0a:e1:c4:bc:53:e7:8b:d2:75:da:42:a7:56:b9:64:09:
48:cf:b6:9d:33:52:a6:34:8f:90:59:9f:b7:2d:a5:3e:66:02:
e0:27:ea:1a:95:2b:6e:1c:84:95:13:aa:43:79:cc:f3:c9:34:
4d:35:ad:50:f4:6a:f6:82:a0:5d:bc:e2:84:0a:ff:45:57:8c:
14:c7:e0:28:80:13:61:5a:d1:a9:02:4f:70:e6:a4:ee:df:6d:
41:10:03:34:e0:4f:f9:b5:fe:16:71:b5:5c:4e:35:ce:f1:ea:
10:2f:42:80:dd:4f:65:4f:d3:cb:2e:c4:2e:b6:79:3e:53:70:
4c:0d:f9:9c:4a:3a:84:7f:ad:a2:95:2b:7f:1f:48:3e:4f:38:
6d:5c:0e:2d:68:85:d1:6b:40:25:07:26:55:43:6d:e8:33:5f:
aa:cd:ac:13:5d:12:10:99:38:46:ea:c9:8f:1b:d1:41:06:cc:
f7:ec:f4:02:2b:7a:80:f8:c4:6d:0c:f7:ec:9b:a6:0b:b5:2c:
37:29:2f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:12:53 2025 by rpki-client