Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/LVzAuWHm9g24rHQHQMlyvqHPDaQ.roa
File: LVzAuWHm9g24rHQHQMlyvqHPDaQ.roa (raw, json)
Hash identifier: 4dpNNhfOAUVvd+wOYoPRmz+87iCxnRD0hRB83T7hISs=
Subject key identifier: 2D:5C:C0:B9:61:E6:F6:0D:B8:AC:74:07:40:C9:72:BE:A1:CF:0D:A4
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0EBA
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/LVzAuWHm9g24rHQHQMlyvqHPDaQ.roa
Signing time: Mon 10 Feb 2025 13:59:49 +0000
ROA not before: Mon 10 Feb 2025 13:59:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 124.150.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3770 (0xeba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 10 13:59:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D5CC0B961E6F60DB8AC740740C972BEA1CF0DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:0d:60:fb:5a:84:70:4d:39:38:46:47:a5:
70:41:5b:67:b2:04:10:d1:dc:2f:74:76:56:a0:30:
b8:25:c9:8c:68:99:25:04:b1:cd:23:39:b4:d2:b2:
bd:80:c7:68:e5:d6:89:45:03:7b:65:73:36:b7:ca:
fc:3d:6f:73:ee:72:4b:34:22:35:3f:e1:9a:57:ff:
08:e0:04:29:bc:15:e4:58:25:e5:a4:57:c4:3c:b2:
c5:aa:82:ef:f8:7a:09:5a:ce:4e:f3:18:8e:a7:ad:
f4:e0:25:b0:de:b7:eb:e6:51:be:92:6e:62:f3:31:
16:50:6c:76:8c:1c:60:c0:a9:4b:94:78:60:ca:7d:
d3:c4:08:0a:a3:95:fb:54:5a:0a:6e:f6:2c:1f:c7:
75:2e:0b:fa:01:e8:bc:44:26:11:4c:d7:d7:11:8b:
85:26:ee:af:09:b2:f1:9a:8c:eb:5f:85:71:90:6e:
47:c1:4f:a7:d4:d1:9f:94:3c:d6:ca:40:5f:61:b1:
1e:53:9e:d7:b8:e9:56:00:ad:4e:80:9e:7c:d0:c5:
ce:f5:17:03:36:03:cb:0a:64:da:4f:40:9f:b4:23:
a8:12:c2:f1:94:c6:34:b5:e0:28:1b:f7:5c:a8:85:
f3:fb:17:d0:91:fe:39:35:47:9a:fb:5f:4f:e6:77:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:C0:B9:61:E6:F6:0D:B8:AC:74:07:40:C9:72:BE:A1:CF:0D:A4
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/LVzAuWHm9g24rHQHQMlyvqHPDaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:e4:6a:b2:0d:32:d2:60:2d:c6:ce:a2:0f:d5:f2:66:7d:
bd:6f:2d:92:53:22:8c:94:18:56:22:6e:78:45:82:c8:84:7f:
b1:6c:58:ce:95:d3:ef:26:ba:6e:93:16:23:a1:7a:6f:e4:fc:
83:34:2f:4c:11:e8:00:24:c3:0c:d2:b4:6c:db:37:86:48:8d:
ae:28:75:75:71:bf:0e:c6:5a:d5:18:00:41:94:e5:76:67:9e:
be:28:a8:fc:f0:05:96:12:58:23:76:a6:32:d5:9e:15:25:5c:
91:c9:a3:3b:53:da:93:a6:bf:9a:85:36:a4:37:98:e4:fe:a7:
86:15:a9:81:41:8e:36:6e:e6:99:30:81:2d:80:49:cf:b3:99:
d7:bb:4c:45:6d:9c:09:81:1d:16:c1:27:a6:7a:3c:7e:e4:60:
e5:f9:c9:fb:73:1f:46:77:69:42:b5:2b:ca:b2:84:2d:be:21:
d1:d7:3c:94:c5:e2:36:2d:6a:af:ca:bc:38:b3:cb:66:7d:bd:
39:df:db:47:8b:58:23:a7:1e:31:a8:57:fd:41:31:f6:ba:1d:
fb:eb:8b:eb:64:4d:dd:c5:53:90:53:ff:a1:93:bb:8a:82:bd:
64:c1:80:cb:ab:7a:70:fd:3a:36:72:6f:f8:bb:1d:df:96:da:
ab:d2:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:27 2025 by rpki-client