Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa
File: O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa (raw, json)
Hash identifier: k3SeCE8mNkmJm6OqQbfxH3OvHU8yhgSVc7lBM87vtps=
Subject key identifier: 3B:D0:92:A6:04:D6:9E:42:3D:C1:90:EA:77:24:B4:54:01:FF:51:94
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D13
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa
Signing time: Mon 10 Feb 2025 14:02:30 +0000
ROA not before: Mon 10 Feb 2025 14:02:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3BD092A604D69E423DC190EA7724B45401FF5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:3f:0c:86:ae:cb:71:44:8b:9c:36:07:9c:
91:01:69:b0:4b:bf:79:97:34:af:3e:ef:85:95:5c:
fc:c5:6c:3f:c1:be:ab:4d:d9:43:6a:b6:10:e0:e1:
48:a5:b9:b2:14:da:0d:ae:7b:19:b7:c5:45:b3:f9:
b1:70:8b:69:28:ea:31:a3:d5:19:af:1a:95:54:3b:
44:8a:35:e8:9f:51:a2:0a:aa:5d:be:e4:e8:8f:f6:
21:69:8a:e6:40:16:a1:c6:55:bf:bc:89:ac:db:a1:
b6:3a:b1:39:9e:26:ce:28:c6:ee:52:4b:f7:a4:2f:
26:cb:cf:5d:3e:59:cc:95:80:48:95:f4:2f:19:76:
35:14:07:df:bb:3a:d7:cd:80:f5:08:29:b2:cf:ee:
7f:f4:0e:46:96:ef:f7:c7:5f:44:47:26:42:8c:62:
72:5b:bc:75:35:0f:e6:cb:72:72:52:1d:14:69:ff:
69:9a:4d:4d:6c:db:73:d1:a0:38:a3:9b:92:f2:c8:
98:d5:dd:a0:88:bb:c7:9b:1d:39:b9:4b:12:a6:52:
c4:87:d3:8b:c4:53:cf:48:c2:78:f4:66:54:ff:84:
ff:ba:6f:50:a1:d1:25:94:05:ad:51:c6:09:c0:88:
42:8a:d8:98:a2:5f:56:32:f8:c7:0c:d2:8c:f5:b2:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:92:A6:04:D6:9E:42:3D:C1:90:EA:77:24:B4:54:01:FF:51:94
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:d1:ef:8a:ff:75:2f:aa:ff:44:d0:1b:78:43:96:fc:fd:32:
fc:19:14:a4:3e:e7:8b:d4:ae:d4:de:62:e9:e3:74:84:c2:58:
44:44:6c:fb:db:48:6f:5a:03:48:75:65:f7:85:4d:e6:1e:14:
2a:8a:63:b0:81:05:d5:58:d8:cc:63:85:13:3b:d1:4a:31:36:
68:f4:56:31:49:7e:3b:8b:4a:a3:fe:f7:95:32:75:ce:d6:78:
54:77:63:31:13:9c:78:f0:10:ca:a5:af:53:10:46:d2:75:7e:
22:c0:68:0b:d7:bd:70:57:35:9d:f9:f7:38:a6:1d:d6:98:48:
79:d1:3e:7f:a0:45:46:bc:a3:8b:d9:d5:bb:0c:61:4f:c2:df:
21:48:1b:f8:cf:c4:67:48:74:f6:04:ed:70:ad:e0:f0:b3:71:
bb:a3:83:0f:c7:cd:3f:b1:4d:8a:a3:6f:e8:19:85:20:fd:bf:
97:29:83:ae:70:f7:2e:03:f6:cb:e9:b3:7b:ba:1b:96:5d:54:
f6:5a:c4:7d:eb:74:bd:9f:06:78:19:c6:3d:73:e6:85:d2:38:
c5:b5:e4:ec:da:d8:37:32:f0:4c:54:97:67:54:60:fa:bd:09:
21:0c:ad:78:8e:99:fc:a6:67:74:93:ac:6c:1b:93:37:fa:ad:
3f:8b:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:07:23 2025 by rpki-client