Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa
File: 6kbiqvrYxUogDnQnZMUvinRP7L8.roa (raw, json)
Hash identifier: 0Dz+quZWiEOug0Y9QbCvDZ+r7vqIZ0ivxnA3815GG/0=
Subject key identifier: EA:46:E2:AA:FA:D8:C5:4A:20:0E:74:27:64:C5:2F:8A:74:4F:EC:BF
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D08
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa
Signing time: Mon 10 Feb 2025 14:02:28 +0000
ROA not before: Mon 10 Feb 2025 14:02:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EA46E2AAFAD8C54A200E742764C52F8A744FECBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:9a:86:98:d0:82:81:b7:31:95:94:8f:f0:
6c:9c:90:ca:0a:b9:32:f9:64:a7:49:ca:fc:4e:62:
b6:e0:76:29:41:f1:5a:c8:21:25:8d:1c:ba:14:00:
e8:77:56:ae:60:f3:cf:c8:5b:f0:f9:cf:dd:4d:1f:
72:27:30:62:8f:ec:b9:dd:86:06:70:2f:43:31:27:
fd:ad:50:63:af:d5:f1:e1:63:df:d1:5b:7a:87:21:
0c:15:f0:03:58:d0:d4:d1:01:c1:9b:2c:9b:83:24:
0d:d9:94:46:4b:3c:f0:a5:2f:dd:d8:ef:01:71:c3:
51:40:34:3d:71:b0:e7:29:fb:4a:e4:1d:5d:b6:c7:
5b:6d:79:24:e5:8a:bc:8c:1a:0a:26:65:59:5a:25:
be:27:8d:6f:96:b4:7a:49:55:00:87:44:63:72:76:
b9:54:fc:dc:c4:a0:7c:5f:5c:c6:6f:03:30:48:e3:
36:ca:e1:c4:87:88:91:fe:7f:28:66:80:ba:25:4a:
15:4a:0c:d7:3e:53:53:b6:21:bb:f2:1c:8a:53:33:
e1:3c:47:72:0a:a6:aa:3f:00:33:55:f0:15:7e:60:
e2:84:73:00:cb:09:54:15:b1:63:73:a7:72:48:2e:
93:68:c2:4c:3d:76:6a:3d:c5:40:40:46:c2:cb:b0:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:E2:AA:FA:D8:C5:4A:20:0E:74:27:64:C5:2F:8A:74:4F:EC:BF
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/6kbiqvrYxUogDnQnZMUvinRP7L8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.48.0/20
Signature Algorithm: sha256WithRSAEncryption
10:df:9f:fa:74:c2:bc:b6:83:d9:a3:e1:02:56:12:e9:06:b5:
66:52:d4:f6:c1:8d:f6:99:b4:62:65:b6:fe:b9:1b:64:12:ec:
6d:92:d4:66:ea:08:6c:42:d8:e2:37:e4:ef:7d:35:f9:6a:b7:
98:eb:c1:93:a4:84:f3:16:36:11:3b:d5:59:87:25:f3:86:c0:
0c:09:25:60:d9:4a:96:d4:36:60:84:3f:69:41:2c:79:fd:9f:
8d:b5:ab:ff:37:4b:06:30:c8:c1:90:58:36:4e:f6:5a:ce:6c:
79:97:99:68:e5:56:9d:bb:38:8c:e0:63:c3:0f:77:34:5b:e3:
bd:e5:0d:8c:a4:bd:70:a8:6b:95:05:a4:7c:e3:74:c3:fc:cb:
4a:1d:d0:ee:83:dc:31:a4:2b:a0:24:a4:20:07:08:9e:ee:5d:
1f:8a:65:3a:65:78:36:b3:7b:1a:59:2b:5b:cb:52:4d:70:b3:
89:24:0a:4e:dd:15:f5:41:97:3e:f2:77:a5:2c:91:39:8f:0c:
f1:89:fb:73:f8:9b:b8:cb:5c:70:40:47:a4:86:5a:8e:ed:b7:
5d:9e:d5:06:54:bf:8e:8a:51:5b:73:c1:df:14:a1:42:be:05:
9d:7a:fe:6c:34:43:9c:ef:4e:38:f1:8f:6b:4a:18:ac:40:69:
fb:4c:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:27 2025 by rpki-client