Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/O1NjRs3K4AAlX_Fhr8nGXrlfwew.roa
File: O1NjRs3K4AAlX_Fhr8nGXrlfwew.roa (raw, json)
Hash identifier: jni2dHhHRKS9DRpcXUElX3TsdO5mNzs7tobvLPTz9f8=
Subject key identifier: 3B:53:63:46:CD:CA:E0:00:25:5F:F1:61:AF:C9:C6:5E:B9:5F:C1:EC
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D15
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O1NjRs3K4AAlX_Fhr8nGXrlfwew.roa
Signing time: Mon 10 Feb 2025 14:02:30 +0000
ROA not before: Mon 10 Feb 2025 14:02:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 45474
IP address blocks: 27.105.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3B536346CDCAE000255FF161AFC9C65EB95FC1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:78:ef:04:db:90:47:3f:dc:82:46:6e:7f:
d2:13:4d:75:bb:56:86:3f:8a:98:fd:f1:03:8e:16:
85:c6:c3:56:33:b9:92:56:f2:40:5f:8b:9d:ed:ad:
2d:b8:e8:c2:b9:a7:5f:e8:d9:8e:28:0c:76:ad:9b:
dc:c1:60:e8:2d:91:3c:61:0c:06:32:61:a4:e2:14:
51:ba:a8:f7:9a:53:1c:82:ac:33:1b:85:88:77:d5:
e6:d6:27:15:02:4e:63:48:ee:a9:95:df:ac:87:82:
2e:5b:3f:5b:c3:f0:7d:d7:45:5f:91:c1:2f:65:0f:
4d:00:e6:8f:75:ca:51:1f:34:fa:7d:56:b0:77:a2:
9a:ae:e4:9d:0d:de:fa:27:da:be:be:25:f1:3a:bc:
d2:c3:55:13:9a:9e:0e:bb:9c:ea:d6:b7:92:2f:eb:
26:f2:d5:0b:42:be:fb:ab:a4:62:7e:3f:5a:2e:6c:
3d:ff:3b:0e:41:04:38:9c:54:b1:ff:c9:3f:75:c7:
65:95:d4:83:8f:2e:6c:d5:9a:f1:6a:34:98:5d:cf:
f6:6c:01:1d:4d:5e:0e:9e:04:91:27:a1:a8:70:08:
24:c8:71:ce:bf:e5:1c:6d:58:86:b2:ed:c4:4b:a8:
6a:56:8c:a3:74:54:9e:0a:db:39:2e:5e:0d:64:d0:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:63:46:CD:CA:E0:00:25:5F:F1:61:AF:C9:C6:5E:B9:5F:C1:EC
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O1NjRs3K4AAlX_Fhr8nGXrlfwew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:db:e8:23:6b:a3:8d:52:2c:29:b0:bd:d9:b6:d2:0d:54:
35:6b:e7:9b:c3:58:47:4d:8c:6d:e8:42:d1:44:e8:bb:5b:59:
dc:98:91:3b:0b:86:8d:55:f2:64:6f:86:2e:b3:c4:8c:48:55:
d2:99:d4:73:ec:a7:bb:69:da:da:0b:04:07:24:f0:c8:6e:a3:
9c:30:af:aa:1d:21:cd:9d:7a:88:04:fd:73:4d:df:8a:ab:c4:
4c:06:43:5b:7f:af:26:a3:7a:7b:c8:92:e9:98:d9:81:8b:1a:
c4:67:d0:29:85:8a:f2:25:a8:89:06:db:b2:fb:18:f2:48:ad:
b4:18:e6:6f:a6:44:b9:cd:93:42:44:63:87:e1:78:24:ba:9f:
a1:2d:36:f6:33:04:9c:e4:36:4c:84:5b:cd:ae:fd:01:39:67:
bb:85:53:74:42:e8:91:b7:a1:a8:5b:98:6e:61:15:50:e2:bc:
a9:fe:b7:29:45:87:45:fb:c8:80:5e:3f:0e:8f:f6:da:26:ef:
7e:9b:3f:e1:05:78:2b:8c:78:11:52:68:10:9c:4f:16:94:ec:
84:30:a1:61:ac:cf:5a:65:9b:7f:2e:8a:5f:a4:9f:ee:14:a7:
f7:e8:ad:ca:68:5b:61:23:bc:68:84:77:23:79:9c:d2:e6:17:
32:8b:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:13:09 2025 by rpki-client