Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/eav5zyFf_LQsq5zWYjIKunjVLfg.roa
File: eav5zyFf_LQsq5zWYjIKunjVLfg.roa (raw, json)
Hash identifier: GeKdzKNgyTyd8nl3hkDnGY0tq9EOfT9iEP7g7ov7oo4=
Subject key identifier: 79:AB:F9:CF:21:5F:FC:B4:2C:AB:9C:D6:62:32:0A:BA:78:D5:2D:F8
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0EC3
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/eav5zyFf_LQsq5zWYjIKunjVLfg.roa
Signing time: Mon 10 Feb 2025 13:59:51 +0000
ROA not before: Mon 10 Feb 2025 13:59:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 223.27.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 10 13:59:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=79ABF9CF215FFCB42CAB9CD662320ABA78D52DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:01:9e:df:66:13:f9:b5:6d:bd:7b:37:2d:
16:d8:7d:0a:b4:a7:2b:3a:4f:e3:76:6f:65:ae:bb:
85:d7:ab:76:7d:b8:93:19:0e:22:62:50:9f:21:d7:
04:0c:41:55:ca:c3:1a:37:9c:5b:2b:1a:71:ba:5b:
ab:96:ca:1b:0b:72:86:01:ff:26:95:16:b0:e9:2f:
0f:af:b8:16:23:94:fd:9e:de:e3:9d:98:a9:ea:28:
61:a6:50:c9:e4:bf:3b:ab:ca:5f:a2:74:58:3d:c1:
06:fd:61:97:01:cf:9d:ba:0a:30:b0:ec:8d:1b:9a:
53:18:b0:ec:f5:b5:21:61:bf:d3:0c:ef:bb:8a:c1:
9a:59:b1:51:60:a9:0e:a6:b9:64:85:18:bb:62:10:
16:cd:e4:c3:2c:c4:cc:f9:53:07:d5:35:71:eb:78:
49:b2:77:da:10:08:b7:3a:64:a6:ba:2c:f8:f6:64:
f2:3f:7c:b2:fe:2a:da:af:c0:9b:70:c1:7e:d1:53:
8c:95:61:11:5b:04:6f:59:1d:3e:e4:81:84:98:79:
01:17:11:2b:d7:69:bc:ae:65:7f:21:00:dc:12:d4:
88:0a:9f:7d:23:fe:d0:cf:fa:87:41:60:9b:43:f9:
d9:76:1a:47:bb:1a:fa:d6:97:78:18:ca:7f:3d:7e:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AB:F9:CF:21:5F:FC:B4:2C:AB:9C:D6:62:32:0A:BA:78:D5:2D:F8
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/eav5zyFf_LQsq5zWYjIKunjVLfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.38.0/24
Signature Algorithm: sha256WithRSAEncryption
14:15:06:2d:2c:06:d1:b2:ef:99:c3:8b:9a:b7:10:31:8c:44:
df:e2:ce:f3:3a:4e:e4:1d:62:46:97:40:ec:73:79:8b:35:5f:
37:b3:80:26:5a:74:68:e2:7c:9c:5d:3b:32:5a:64:72:e3:8c:
dc:08:0e:b8:62:0b:a4:42:c0:25:e9:67:c6:ef:56:cf:7d:57:
59:d2:d9:ce:f5:7e:ee:d8:84:dd:31:e3:e8:3a:53:15:ca:cc:
ed:5e:56:2f:6b:63:d7:48:0c:51:4f:98:71:f1:33:74:fc:56:
48:38:ca:37:94:e0:86:9d:4a:21:36:94:57:18:f7:11:40:df:
a3:7b:89:26:76:89:d6:d3:bc:5d:1a:c4:b9:1a:25:7f:6b:9a:
4b:ca:78:dc:a5:14:30:98:d0:42:b2:9d:0f:39:c8:61:56:68:
ba:49:89:19:c6:14:74:9f:1a:b3:b0:fb:f5:53:37:68:d3:38:
c2:bc:b2:55:56:fa:bf:43:e3:e7:e2:c3:ca:c8:23:e6:d1:84:
0d:7b:1a:3a:aa:18:e3:45:5a:4d:c5:dd:a1:50:1d:48:c1:1e:
3e:c0:82:cd:9b:07:33:84:fe:91:9d:e2:02:bc:a4:fd:75:46:
69:98:52:94:81:50:06:9f:36:65:72:58:a6:85:dc:0d:4a:4c:
ce:5a:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:27 2025 by rpki-client