Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa
File: mE5eRQ_EQ565VzWg0lok2q186rM.roa (raw, json)
Hash identifier: LM6NP1zolcxc1zsXWgaS/7tNjVyIFUIS4I/fOEDRxDk=
Subject key identifier: 98:4E:5E:45:0F:C4:43:9E:B9:57:35:A0:D2:5A:24:DA:AD:7C:EA:B3
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0D33
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa
Signing time: Mon 10 Feb 2025 13:51:20 +0000
ROA not before: Mon 10 Feb 2025 13:51:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18042
IP address blocks: 58.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3379 (0xd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Feb 10 13:51:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=984E5E450FC4439EB95735A0D25A24DAAD7CEAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:83:f1:f4:fd:cb:d4:19:f3:82:04:ba:b3:
ea:d1:48:c8:a6:15:e2:1c:8f:06:fe:c3:83:13:e9:
45:f9:62:57:bc:0f:bc:e6:0b:ad:02:3d:e3:da:ec:
fc:87:04:9b:fb:9f:e4:15:76:f0:b6:c9:f8:21:af:
e7:a5:ed:f0:22:25:15:c4:24:77:01:3c:a4:4c:ce:
1a:e0:51:8f:32:4b:ae:7b:66:50:82:eb:60:22:3d:
11:cb:82:f2:7d:c4:72:a1:1f:7a:c3:ea:99:ea:6e:
a1:cd:f3:f3:46:da:b2:be:24:8e:f3:50:52:c5:00:
c7:33:5e:09:07:07:5f:d9:e4:fc:2e:9d:9f:93:ca:
55:cd:66:db:92:a4:ef:76:56:9a:78:21:dc:df:42:
f4:f8:ee:08:4b:5d:8e:9f:ca:98:c8:0e:12:c4:02:
9c:7f:5e:b9:97:d8:cb:07:ce:60:de:9d:1a:74:18:
8f:38:e0:84:45:d8:da:fb:da:ad:1a:08:c2:9c:ab:
77:b1:8e:22:d1:59:3c:a6:e4:eb:4b:fb:b0:48:31:
f7:fa:b3:c7:33:8e:5b:94:91:cb:03:bd:24:5f:3d:
c9:3a:67:52:cf:04:09:98:f4:d0:9c:92:16:6f:ec:
1d:08:95:2b:90:46:3c:7b:98:6d:c6:bf:2c:80:28:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4E:5E:45:0F:C4:43:9E:B9:57:35:A0:D2:5A:24:DA:AD:7C:EA:B3
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/mE5eRQ_EQ565VzWg0lok2q186rM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:71:2a:0d:07:83:11:bc:d1:a9:dc:98:b9:9f:58:dd:f2:37:
93:3c:3c:51:de:65:4e:fd:4f:ad:1d:c3:df:25:ea:6b:e9:75:
f0:27:a9:00:7f:37:91:03:bc:29:ec:00:15:02:75:33:7c:74:
22:81:06:fb:37:9b:16:9c:13:92:6a:6c:f3:89:c6:05:6f:6a:
61:16:3f:22:fd:2f:79:61:8e:3f:21:14:5e:72:16:20:ba:6d:
d3:4d:40:65:d7:d5:b5:1d:8c:28:0e:9e:b3:b7:38:39:35:ea:
04:a4:55:05:0a:f4:50:f4:d7:b8:13:dd:8d:6f:31:b2:aa:ef:
c0:ea:16:4d:d8:c2:5b:fd:48:56:06:3b:4b:31:e5:69:59:42:
46:6b:e7:84:a1:ad:f9:7c:97:02:3f:53:1b:57:56:46:d3:1d:
83:95:af:99:9f:d1:af:5a:c6:ca:ef:48:fc:bf:c2:55:dc:11:
3c:a7:ae:5d:8c:5e:53:80:c3:73:9f:10:6c:34:f3:b0:af:d1:
f7:38:f3:72:9c:3a:83:4e:05:40:89:6f:fb:fe:3a:83:a2:e7:
bd:31:60:a3:4a:95:b3:bd:cd:44:b6:93:5d:95:77:6c:12:0b:
b0:01:3a:b1:37:2b:dc:49:74:14:30:11:93:f5:d5:79:bf:0d:
a4:49:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:12 2025 by rpki-client