Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa
File: n0z-7gw9P02Q1_udeWLPVppNBt0.roa (raw, json)
Hash identifier: TO7npdkWXVhjIRYg2GRj4OkY0OpzW8h6N0e9LezxyBY=
Subject key identifier: 9F:4C:FE:EE:0C:3D:3F:4D:90:D7:FB:9D:79:62:CF:56:9A:4D:06:DD
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D19
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa
Signing time: Mon 10 Feb 2025 14:02:31 +0000
ROA not before: Mon 10 Feb 2025 14:02:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9F4CFEEE0C3D3F4D90D7FB9D7962CF569A4D06DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:17:ef:18:61:ac:1b:c1:c0:79:ef:20:1b:
af:7d:18:82:eb:6f:85:b5:5d:30:40:63:48:46:d5:
4a:e2:86:20:bb:74:d7:70:8f:ec:5f:54:2f:62:c8:
9d:85:23:0f:00:2c:83:cb:56:cd:05:a7:2d:f4:49:
b3:cf:05:3c:00:78:9b:2a:3e:be:e6:a5:20:44:cb:
ce:f3:3c:52:e2:9d:4a:80:6d:3e:e9:47:ec:cd:06:
f3:ac:ca:74:2e:3f:a2:52:2a:a1:2f:02:6a:b3:50:
10:f9:73:02:94:94:4d:12:e5:11:ab:26:bb:be:aa:
d7:2c:61:f2:52:bd:9f:a9:cc:f6:79:3f:5b:64:90:
ce:0a:1e:04:93:c6:d0:ce:1c:4d:5c:95:81:d5:ad:
ee:65:53:7f:af:90:af:9c:ad:78:31:af:01:c5:fe:
0b:7d:f9:eb:bd:7f:cf:50:22:98:5b:6c:5e:b9:4a:
44:21:8d:ae:e0:3f:a9:64:8c:8b:be:f0:84:7e:ea:
45:9c:eb:78:b8:42:ac:77:75:c9:ec:1f:ec:73:5a:
e3:8b:a5:ba:e2:2f:75:02:9a:0a:5d:76:a9:94:cd:
0a:d3:fb:f5:e3:b0:70:5d:ca:af:30:6f:80:7d:bf:
bd:f1:0a:47:6f:de:30:f5:e8:1d:25:b3:b4:44:ff:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4C:FE:EE:0C:3D:3F:4D:90:D7:FB:9D:79:62:CF:56:9A:4D:06:DD
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/n0z-7gw9P02Q1_udeWLPVppNBt0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.40.0/22
Signature Algorithm: sha256WithRSAEncryption
24:ca:c5:db:04:18:84:ea:47:ce:a1:cf:75:99:d7:20:6e:85:
6a:64:24:f9:ba:a9:10:cf:05:9b:46:73:b5:db:87:5d:ce:43:
b0:45:30:d4:43:e4:16:ab:d6:70:10:71:55:63:7b:ab:64:22:
9c:4d:46:5d:64:89:83:33:89:1d:e5:a7:16:0a:bb:00:06:b5:
5a:ef:77:d4:48:24:9e:f4:9a:bc:34:6a:9f:22:88:11:bc:04:
2b:75:31:c1:e0:24:2b:b7:13:a5:52:80:54:ca:8c:e5:4d:6d:
a8:03:5e:8a:ef:56:9b:08:20:80:f1:ae:bf:17:ed:49:83:a3:
26:4c:35:cc:91:e9:f1:4e:5a:84:44:c6:ce:17:ef:c6:93:c5:
32:da:6a:1c:c4:e4:07:2c:f3:55:5c:40:2c:5d:d6:36:ae:25:
65:57:e0:a3:e4:d2:54:57:1f:f1:99:3d:66:12:d7:58:2e:bf:
8b:b3:16:a0:91:89:64:32:df:dc:cd:7f:17:a8:95:00:7f:5a:
c2:a4:96:12:2d:a2:0a:c3:1e:64:a4:4b:62:ac:07:e0:5c:7e:
3e:db:48:6c:61:fb:b5:17:9d:56:26:d6:11:5c:bd:52:73:5f:
76:51:e1:6a:e4:75:97:af:d3:db:8b:25:11:9d:6d:71:d7:78:
f4:6a:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:02:13 2025 by rpki-client