Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa
File: bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa (raw, json)
Hash identifier: w5Ajp33GC22aDVHI8HS9JKhW7ZCkH24zVbUcd7wKJ3A=
Subject key identifier: 6D:4E:A4:92:03:86:2F:C3:22:64:CE:27:37:0D:70:C7:C0:31:FA:03
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0D66
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa
Signing time: Mon 10 Feb 2025 13:51:06 +0000
ROA not before: Mon 10 Feb 2025 13:51:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9676
IP address blocks: 118.99.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Feb 10 13:51:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6D4EA49203862FC32264CE27370D70C7C031FA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:46:63:a3:56:f6:d3:39:4a:b7:6e:97:5d:
75:14:17:8e:57:e1:f3:cd:3d:86:e0:23:d6:30:0e:
9b:42:6a:31:83:97:c1:45:7e:f5:25:5d:36:89:38:
74:94:e0:1e:bf:e7:e3:24:b4:75:c6:53:2c:54:7b:
b2:1a:07:6f:eb:b0:04:59:9b:e4:12:02:90:8d:5c:
db:93:17:29:c0:7e:69:19:c6:3a:f9:e3:37:7c:f7:
a4:02:7c:af:e5:b7:50:ca:2e:1e:ea:81:24:89:fc:
c0:d7:c0:07:a1:74:c8:59:67:c7:d9:e4:ff:c7:e5:
65:e9:f8:fb:aa:75:88:1a:de:d1:f0:73:18:dc:d2:
1e:89:51:d5:78:e9:e1:67:d8:ce:c5:60:f5:62:63:
2b:6c:ea:49:42:93:9b:a0:03:81:f5:4d:e9:81:65:
2c:c0:f8:1d:a6:35:3b:2c:c3:a5:aa:90:eb:94:5c:
cd:df:a8:a6:93:7c:a1:a4:d6:50:b9:f9:cb:8a:28:
ec:c6:f6:78:ac:e5:1c:27:3a:77:fe:f2:6a:ce:c5:
e5:97:47:49:29:38:ec:42:dd:13:e6:01:4e:ba:90:
97:2d:19:df:0f:e2:8e:15:e1:db:54:87:41:9c:44:
dd:6d:11:53:46:96:d8:6d:f3:06:46:77:97:76:49:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:A4:92:03:86:2F:C3:22:64:CE:27:37:0D:70:C7:C0:31:FA:03
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/bU6kkgOGL8MiZM4nNw1wx8Ax-gM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.99.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3a:5c:e4:d2:e0:d8:cf:66:04:48:6c:e5:f8:6a:37:c5:8e:39:
3d:55:1a:e5:1e:2e:ff:ab:de:a4:a7:3e:50:6d:36:4e:a4:4a:
b3:04:3e:db:8b:d5:65:de:29:7c:a1:57:ba:18:5d:a2:a6:b3:
26:25:12:b1:ca:4d:b7:df:61:53:bb:00:43:17:10:ad:2d:31:
8b:d5:e0:d5:41:36:be:d6:45:3b:bc:a0:bd:e3:24:d1:03:3f:
9b:ef:58:8f:72:44:eb:2a:de:39:b5:73:aa:5c:a6:22:8c:20:
6b:41:a9:d4:4c:52:c7:d5:b4:ea:79:5c:d6:9c:2c:62:6f:4e:
ac:e9:a6:a9:5a:7e:ec:62:ac:c7:69:94:a9:69:32:29:41:d3:
9d:4c:50:ef:b8:eb:8b:46:f6:86:59:74:4c:33:18:e1:6e:92:
da:0f:05:6c:ec:ed:ec:06:24:d5:ae:43:54:ad:b1:1e:b4:4b:
ed:85:06:f4:32:1a:9f:26:ba:10:14:e8:fd:ce:39:fb:25:0e:
82:f3:8f:db:c0:1d:5d:4d:5d:78:8c:a5:bf:8c:ac:46:de:4b:
27:99:38:62:f1:92:63:e0:b8:39:1b:59:42:b2:e9:05:49:3b:
14:8e:8c:74:4e:4a:10:b8:b2:95:35:a1:37:73:fc:40:e9:7f:
7a:c0:6a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:21:59 2025 by rpki-client