Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa
File: O9rIUW2j-iTzzHYEAijZry7OZts.roa (raw, json)
Hash identifier: VFvisbotMqdFyIi+krSLGb9KsqUkmSXozEV0sG11wac=
Subject key identifier: 3B:DA:C8:51:6D:A3:FA:24:F3:CC:76:04:02:28:D9:AF:2E:CE:66:DB
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D14
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa
Signing time: Mon 10 Feb 2025 14:02:30 +0000
ROA not before: Mon 10 Feb 2025 14:02:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3BDAC8516DA3FA24F3CC76040228D9AF2ECE66DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:da:0f:d3:39:b1:87:95:7c:e3:3f:1c:17:
56:52:83:ed:07:e0:80:89:ef:6d:cc:ea:ff:dc:57:
3a:74:39:78:0d:2f:bf:79:6f:d2:2b:0a:c2:fe:f3:
54:f3:60:7b:91:5b:b8:d2:8b:fb:28:76:3d:ab:f7:
19:d5:e8:15:37:36:c3:3a:a4:71:d3:de:66:88:72:
87:97:61:25:c5:fc:3f:bc:6d:bf:8f:ed:40:e9:00:
63:84:e4:ca:a9:27:50:d9:77:d8:4c:de:a4:8f:e2:
a7:b0:dc:34:7d:ce:a8:f3:52:40:ab:1e:d4:68:07:
50:38:b9:7e:f5:98:a5:03:71:3c:87:47:f3:4a:9e:
e5:62:ec:53:8f:4a:ee:01:e8:f8:16:53:9c:00:ff:
1e:73:b5:a5:d4:24:e6:d9:33:da:99:b1:f8:c7:07:
b2:d5:43:df:99:bc:aa:19:4f:ea:c5:ea:da:85:73:
0a:9c:cf:dc:15:69:de:72:0f:ef:ca:05:6f:98:03:
57:5b:69:de:d2:73:ba:d5:40:95:93:cd:16:46:bd:
fe:28:37:0a:3f:59:6f:4e:60:bb:7f:63:43:74:b1:
87:97:67:7e:21:bf:f1:ce:71:6e:27:93:23:85:35:
18:5c:bd:9e:18:dc:0d:cd:fa:e6:3d:c7:f3:a0:cc:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:C8:51:6D:A3:FA:24:F3:CC:76:04:02:28:D9:AF:2E:CE:66:DB
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/O9rIUW2j-iTzzHYEAijZry7OZts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.32.0/21
Signature Algorithm: sha256WithRSAEncryption
21:a4:e2:b8:6d:2b:6d:b5:4c:cb:9f:ea:05:a0:58:f3:cf:ac:
9d:52:30:f0:84:1c:c0:d7:79:5c:39:4e:9b:e3:22:34:a3:a8:
fa:85:48:00:33:4a:b5:93:9c:c2:e9:18:7e:c5:87:45:d7:a7:
40:fc:43:e0:25:e9:e4:30:f7:60:c7:cc:f6:33:c5:df:39:7d:
5b:e2:35:05:91:5c:aa:73:fc:c5:d2:8a:62:b2:9d:ab:31:2b:
08:d8:f6:87:16:bd:33:86:31:4c:f2:56:f8:c2:28:6b:57:81:
f1:eb:88:6c:b1:9f:5b:04:91:2e:67:00:97:70:49:6b:f5:71:
7c:08:12:e3:55:56:9c:4a:a2:4b:3a:90:1c:d4:f2:37:04:4b:
c9:f2:95:66:4e:8d:51:ca:80:3a:8f:55:81:b2:55:eb:f4:1b:
a6:43:11:26:e1:cf:11:de:88:8e:78:27:a0:65:ad:ce:10:ba:
2f:67:99:1e:f7:ae:42:9f:ae:b3:54:63:ea:bd:24:fd:e2:cf:
6d:03:7b:c1:09:ef:b8:39:70:e7:10:73:33:c7:95:e7:29:f1:
35:72:a2:f5:86:b4:eb:bd:a1:fe:8f:a6:14:ca:a4:2f:a7:14:
4e:b9:dc:f1:06:1e:8c:7f:9a:77:2c:74:e6:2f:d1:46:3f:32:
85:2c:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:05:40 2025 by rpki-client