Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/5sXa6Z82ItvLcwIuv-wz57rB0rc.roa
File: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (raw, json)
Hash identifier: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=
Subject key identifier: E6:C5:DA:E9:9F:36:22:DB:CB:73:02:2E:BF:EC:33:E7:BA:C1:D2:B7
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0E08
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/5sXa6Z82ItvLcwIuv-wz57rB0rc.roa
Signing time: Mon 10 Feb 2025 13:59:22 +0000
ROA not before: Mon 10 Feb 2025 13:59:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 61.61.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6C5DAE99F3622DBCB73022EBFEC33E7BAC1D2B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:dd:79:8d:c7:bf:e6:09:ac:7b:ee:89:92:
f6:c2:80:60:bd:89:b2:f7:fd:83:80:48:18:fa:8a:
0a:32:9e:ac:94:49:75:cb:f8:8e:77:80:ae:0c:1c:
09:47:a3:fb:b1:ee:7f:b1:70:60:95:d9:bd:c1:5c:
83:bb:88:88:f1:b3:5c:7c:f3:02:06:72:35:00:0d:
15:a3:c3:7c:e0:cf:4a:05:ad:d3:ce:08:39:74:00:
35:8f:50:78:50:ba:0d:49:d2:63:90:db:48:cd:01:
c1:26:06:c4:1e:3a:a0:6e:62:e0:13:8a:09:05:c9:
9a:79:db:b7:71:9d:24:1d:09:ba:34:42:05:e6:a7:
99:43:4e:51:68:73:92:2e:39:de:50:58:23:15:70:
b9:b3:6e:3a:66:a6:df:37:25:23:c6:63:07:fa:06:
2c:c9:c1:3f:7f:57:6c:65:c8:b1:9d:06:71:e9:4d:
83:fc:20:24:17:2f:b6:35:87:9d:8f:f4:49:cf:64:
fd:7d:7d:66:6a:d3:69:7b:7e:ee:79:c7:b0:e9:f0:
18:2c:fd:53:c5:3e:d8:89:2e:a8:b8:2c:02:47:49:
c5:67:b0:2a:df:39:b6:79:59:76:f6:d1:e0:2e:cc:
9b:20:3b:ca:2d:e0:70:ef:b3:d5:82:ec:cd:5f:9b:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:DA:E9:9F:36:22:DB:CB:73:02:2E:BF:EC:33:E7:BA:C1:D2:B7
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/5sXa6Z82ItvLcwIuv-wz57rB0rc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.70.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d9:1d:65:1b:31:35:39:a1:a8:d6:5a:a5:cc:a1:af:24:ee:
bc:05:84:cd:0c:6d:62:a6:0a:b5:5e:82:d6:3f:99:ab:4c:ff:
d6:90:83:b2:b0:90:1a:cb:73:f4:d4:ca:1b:6d:cd:7d:dd:bc:
91:a7:1a:1e:1e:a1:88:91:b5:28:9e:4c:24:b4:00:9f:e0:7d:
7f:99:20:d7:78:ee:9a:f4:65:fe:f9:c0:bf:3c:aa:7b:81:12:
b5:5b:6a:f8:46:c7:ae:45:d5:ae:4d:a6:65:b4:47:db:5e:e7:
f7:c1:7e:89:51:9e:bb:8c:bc:da:42:96:fc:dc:50:91:ed:72:
b4:d2:dd:e9:f2:96:ab:05:eb:ce:c2:b9:a8:a3:f3:0f:81:b4:
1b:c8:31:ea:05:a7:0b:90:b8:1d:5e:b0:ff:c0:50:22:fd:2b:
82:ed:78:7e:90:bd:3e:a3:6e:06:a6:93:46:19:a0:9a:83:a7:
9e:19:29:3e:2d:56:bb:84:e8:8f:8a:03:45:f9:12:47:29:a8:
19:49:9e:52:62:6a:77:c1:22:f4:9d:17:b5:f2:d2:28:72:23:
83:ca:46:57:b2:9c:0c:b2:a5:92:60:f1:e1:f9:9e:44:56:aa:
2f:08:ea:37:b9:d5:8a:0e:bd:bd:3f:f7:11:02:4b:de:c6:35:
e4:75:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:17 2025 by rpki-client