Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa
File: QVvcaqFVHOwW374k_9n_yDthk4I.roa (raw, json)
Hash identifier: TA6ww9Ny8ZecSv1JVildNA/L32Lo8pe0NKv2uVQUMTU=
Subject key identifier: 41:5B:DC:6A:A1:55:1C:EC:16:DF:BE:24:FF:D9:FF:C8:3B:61:93:82
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0D52
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa
Signing time: Mon 10 Feb 2025 14:12:15 +0000
ROA not before: Mon 10 Feb 2025 14:12:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 2402:2580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Feb 10 14:12:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=415BDC6AA1551CEC16DFBE24FFD9FFC83B619382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:6b:9c:fc:6a:af:cf:43:66:fd:26:ca:46:
58:2a:90:16:e3:4f:8d:06:f9:de:46:d0:f2:42:04:
56:f2:26:4f:98:e9:22:93:0d:2a:8b:de:45:a5:76:
33:1c:cb:1f:3b:fe:3a:e2:ea:d5:e7:f5:3c:e3:92:
3d:61:e0:29:f7:d1:75:db:4a:d5:99:b6:d9:78:46:
9d:80:5c:83:7e:19:92:66:3c:28:43:ae:42:17:4e:
d1:56:36:79:16:7f:45:f8:49:64:95:4b:a6:e1:a9:
ed:53:be:2d:d8:6a:54:d4:e5:26:2c:12:74:c6:52:
96:d0:f5:b6:67:7a:1f:33:b5:08:50:de:46:2e:61:
36:06:6f:10:e3:76:10:7c:ff:a3:b9:22:44:cc:11:
15:5f:5e:27:c5:d0:51:0f:17:17:c7:2a:d8:eb:25:
2b:d1:60:5f:b1:a7:eb:d3:3f:dd:f2:0f:eb:67:58:
59:86:d5:e1:f4:24:01:a8:f5:a6:4d:e1:a8:ef:d7:
4c:7d:2f:f8:ed:0a:1c:cd:76:5f:bf:2d:9a:3a:05:
5d:b0:38:71:57:7b:83:9e:de:c7:c8:7e:d6:8c:c7:
90:5c:f6:7a:a1:72:44:3d:e7:5d:29:64:e0:38:d4:
4a:91:15:62:89:89:a0:56:ef:55:cb:cf:94:54:d0:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:DC:6A:A1:55:1C:EC:16:DF:BE:24:FF:D9:FF:C8:3B:61:93:82
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/QVvcaqFVHOwW374k_9n_yDthk4I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:2580::/32
Signature Algorithm: sha256WithRSAEncryption
b5:c6:20:94:04:19:d6:2d:c2:3a:82:a5:d8:97:60:08:94:80:
8a:e6:aa:71:7a:42:48:f7:92:68:4f:03:b9:f5:28:b4:9e:ab:
89:ef:01:02:60:05:59:c9:36:2b:2c:fc:59:6e:de:d5:4b:c0:
70:db:cf:1a:58:af:53:e7:e0:78:aa:aa:89:cb:71:5b:b0:ac:
7c:d2:3e:cc:c9:86:8e:70:9a:73:d8:bc:7a:4e:4c:4b:13:10:
50:a5:bf:81:6c:a6:a2:4d:bb:c9:cb:9b:78:bd:70:1f:25:3e:
33:25:54:7c:bb:2d:c6:dc:f0:dc:e3:e7:1d:d7:73:25:16:2b:
4c:8e:a3:18:c6:a8:10:97:9c:22:74:5b:65:ce:98:35:93:20:
b8:e5:e5:ea:ee:39:98:05:bc:0e:76:a0:eb:23:05:86:61:e6:
3a:ea:ac:ab:03:af:03:2a:02:49:a4:b0:c0:5a:f6:c8:c4:fb:
cd:4f:9b:a1:a1:83:9f:ec:1c:72:9c:17:53:5a:57:46:f8:cf:
c1:53:c3:56:0b:7f:ac:aa:19:5d:87:49:9e:d3:76:6b:3b:a5:
7b:a6:cf:82:51:13:b3:5f:19:ba:c5:d2:eb:30:86:00:db:a3:
97:11:c0:f3:ea:01:83:43:3d:22:6c:9c:76:9e:8e:89:de:00:
45:6c:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:02:13 2025 by rpki-client