Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/azxdZqUn80U2HykeBYd3f0eaX30.roa
File: azxdZqUn80U2HykeBYd3f0eaX30.roa (raw, json)
Hash identifier: vSXqt0zEoE9eqdGnxfpFgey4KuekT7jgQVlQ5hxIbYo=
Subject key identifier: 6B:3C:5D:66:A5:27:F3:45:36:1F:29:1E:05:87:77:7F:47:9A:5F:7D
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0EA3
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/azxdZqUn80U2HykeBYd3f0eaX30.roa
Signing time: Mon 10 Feb 2025 13:59:44 +0000
ROA not before: Mon 10 Feb 2025 13:59:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 223.27.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3747 (0xea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 10 13:59:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6B3C5D66A527F345361F291E0587777F479A5F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:bf:12:76:f6:16:04:bd:7c:64:b6:e1:a3:
96:3c:89:ab:20:e1:ee:4b:83:72:46:98:92:1f:8b:
b0:7c:85:2b:75:87:93:dd:37:40:f3:7f:39:98:16:
c3:d7:42:02:f1:f9:9c:09:05:cb:ce:b9:44:69:6e:
9e:9d:ed:92:4b:61:29:05:b0:df:84:49:ba:95:80:
56:27:49:4a:27:5f:81:5f:71:27:6f:a8:07:32:e4:
f4:99:46:51:ec:79:0f:a6:59:52:9e:29:53:e5:9d:
96:cb:ae:e1:d5:1d:20:f6:b3:65:82:67:64:35:cb:
36:d1:32:39:f9:62:25:d5:ca:83:2b:70:f7:ee:62:
3b:74:18:86:4f:90:2c:13:b2:6d:bb:2e:70:80:30:
26:5b:45:bc:d2:fa:c6:4c:36:b4:e0:e5:94:3f:15:
17:84:a1:08:89:27:50:7a:da:a1:72:1a:b8:b7:6c:
bf:6d:d2:79:2b:26:50:f7:5c:ed:63:a5:cd:17:64:
50:05:6a:5a:4b:40:2e:8c:72:f8:fd:0a:65:3c:c2:
08:2c:c9:f2:77:ca:08:a0:b1:4c:7c:28:e5:33:1c:
6b:3e:76:83:e7:bf:74:d6:b1:d2:5d:27:38:aa:a3:
09:73:ec:9d:7b:87:a2:aa:d1:90:29:22:1e:a4:d1:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3C:5D:66:A5:27:F3:45:36:1F:29:1E:05:87:77:7F:47:9A:5F:7D
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/azxdZqUn80U2HykeBYd3f0eaX30.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:43:25:03:9b:42:d6:3e:6f:02:4e:72:09:14:ee:3d:a9:5b:
f2:f2:1d:7c:be:81:57:b1:01:62:91:c4:0b:0a:36:c7:35:e9:
45:ec:63:97:af:41:b5:a3:c3:2a:e1:4f:fc:d7:a9:88:fb:b7:
87:bb:b8:aa:96:bf:8d:e4:fa:e4:a9:8a:fd:65:3e:89:e8:59:
ee:a9:38:2a:2c:2a:35:f9:2a:b4:49:09:39:28:02:80:3d:95:
1b:0b:f7:c4:b1:71:ab:ce:69:a5:17:6c:56:90:5f:a7:ad:4e:
12:e6:02:cc:70:63:ec:95:b8:c0:5d:d2:86:3b:ba:f4:01:ab:
99:b2:a9:d3:7c:55:e1:86:75:76:f0:1d:a7:1d:6b:be:e3:68:
29:b2:34:40:fd:1a:d4:b1:ab:14:4f:c5:a0:5d:2a:9b:83:c2:
1e:03:a0:9f:a0:75:54:44:20:a8:88:89:0d:ca:18:9f:df:6d:
59:9f:77:a8:4b:a0:48:d0:66:be:44:26:e4:d0:60:9a:e8:c6:
47:5b:c4:f9:aa:64:18:b8:cf:43:55:e1:32:5c:4c:ed:90:a8:
13:d0:63:71:5c:2b:c6:36:fc:89:fb:14:e2:7d:5b:b8:4d:ad:
ac:20:6a:f1:62:16:bc:fc:9e:e8:a7:be:fe:1c:40:58:0e:36:
58:ee:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:28 2025 by rpki-client