Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa
File: 2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa (raw, json)
Hash identifier: /rIczceKdRVLPMIyAMLWjK8QRU+2sOTWQdUsCLGNC2w=
Subject key identifier: D9:40:0F:8C:45:9F:75:85:7A:5D:F2:AD:3B:A1:5D:A4:94:F2:40:3E
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0D64
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa
Signing time: Mon 10 Feb 2025 14:12:19 +0000
ROA not before: Mon 10 Feb 2025 14:12:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 203.121.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428 (0xd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Feb 10 14:12:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D9400F8C459F75857A5DF2AD3BA15DA494F2403E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:d5:5c:f8:d0:40:16:b8:5c:39:6b:1f:99:
4c:44:4a:30:44:64:30:db:7e:bc:69:0f:c4:66:29:
a2:0f:ae:fc:e9:f4:23:a9:34:27:65:12:ec:bf:d9:
bf:45:3f:13:9a:e2:34:0e:89:fd:69:15:86:1b:c6:
77:c2:c2:0f:a8:18:e3:42:11:d7:96:c5:07:02:4e:
7e:25:98:42:ab:be:57:b0:82:2b:4f:9e:71:95:34:
89:9b:9d:80:ba:fb:39:5f:ae:8a:77:84:ce:af:a1:
d1:f1:fb:27:1f:24:fe:14:70:c3:ac:3d:54:4c:9c:
94:b4:47:ff:40:aa:c1:c9:35:03:a9:a9:58:76:dc:
03:0b:fe:97:66:c9:2f:d0:ba:c4:db:10:51:50:cf:
5c:74:cf:be:ec:27:20:a6:06:96:70:16:44:68:2c:
e3:87:19:64:d6:1a:27:46:75:2e:62:8b:0d:fd:cf:
f2:ea:ad:99:f7:02:95:0f:2c:25:c9:98:7a:59:7a:
ee:2e:e8:22:94:23:fe:44:98:fc:48:cd:78:dd:e3:
00:2d:96:db:f0:43:fa:55:5b:9d:33:58:b1:b5:bf:
92:8c:94:17:a0:b9:84:97:af:e0:f9:0d:a9:f8:aa:
11:8f:70:ff:f9:54:6e:1a:65:d4:12:7f:57:9a:4e:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:40:0F:8C:45:9F:75:85:7A:5D:F2:AD:3B:A1:5D:A4:94:F2:40:3E
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/2UAPjEWfdYV6XfKtO6FdpJTyQD4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.224.0/20
Signature Algorithm: sha256WithRSAEncryption
56:af:b1:6a:9c:5a:c0:da:1e:b3:04:b9:b0:17:76:f4:6d:60:
0f:09:67:1f:d9:01:09:f4:a7:29:fd:13:24:78:e4:56:03:18:
24:31:82:73:ae:75:c2:d8:97:74:7b:14:e3:30:4a:5f:42:ab:
3d:a8:6a:95:0e:3f:51:d2:73:26:72:a2:4c:d2:b3:3b:99:e2:
53:cd:79:c2:9f:3e:28:79:ff:10:07:7c:c0:9a:ef:19:07:d2:
37:9b:95:99:c5:3e:15:80:b3:85:c2:47:50:bc:e1:1a:ea:27:
b5:41:6a:61:39:74:8f:3f:3b:f3:f6:e2:c5:21:cf:23:e7:4b:
58:1f:93:1c:bb:e7:41:ab:b5:73:03:77:64:55:db:a8:ac:f6:
84:dd:2a:8a:80:d4:a5:d7:12:b2:88:69:bd:16:72:5f:33:c9:
a4:cb:ea:ea:45:1a:04:9a:4f:81:94:e5:34:b1:d2:4d:c4:c8:
0a:9c:f1:b3:af:88:93:96:f1:5a:b9:ef:cf:14:aa:d2:0e:eb:
17:fc:b6:46:06:87:c9:5a:4f:6d:a2:24:fc:c6:ad:b7:fe:a9:
a5:bf:21:56:d5:84:2f:4e:2a:29:28:c6:51:3f:c9:b2:f6:5a:
95:67:9f:81:5b:53:b3:25:07:96:28:58:04:b3:6f:97:f4:db:
41:c6:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:59:32 2025 by rpki-client