Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa
File: m1m3T8Q2u4MkKVepOryOWW5_I7I.roa (raw, json)
Hash identifier: dBrljFSHHBcm0OxUkalKcS3/gd8ffeCtJiuyCMwpT94=
Subject key identifier: 9B:59:B7:4F:C4:36:BB:83:24:29:57:A9:3A:BC:8E:59:6E:7F:23:B2
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0D1C
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa
Signing time: Mon 10 Feb 2025 14:23:27 +0000
ROA not before: Mon 10 Feb 2025 14:23:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 101.3.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Feb 10 14:23:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B59B74FC436BB83242957A93ABC8E596E7F23B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:ee:db:dd:81:c1:fc:68:e6:bb:72:42:88:
99:58:f6:af:21:ea:7c:8a:6b:a6:42:73:a7:e9:eb:
08:8d:7f:42:89:08:ff:e7:e9:bb:e0:bb:6f:ed:b0:
93:81:c6:e1:f2:cd:51:9b:81:ba:d3:87:0c:5e:5b:
62:21:e9:eb:f1:8c:f1:d7:c8:8d:37:52:6b:8c:86:
51:d7:6d:ad:46:55:18:0b:25:ac:d0:a7:e9:07:7f:
e8:21:d4:f9:25:86:7b:04:de:3a:9c:a5:27:8c:ff:
b1:42:85:1a:7d:81:66:fe:f5:24:c1:40:09:30:ba:
e0:48:c8:45:2d:37:fc:ff:95:d4:e9:57:bf:e7:3c:
2e:e1:8f:c6:0e:97:53:f6:b4:64:d3:fa:23:69:f3:
3e:97:50:05:57:7c:b6:3c:c1:b1:ec:38:f3:f8:38:
0d:8b:eb:36:cf:da:a0:a8:bf:6e:1a:9a:33:db:71:
25:65:19:58:e9:42:e6:38:ac:f6:e4:f8:28:90:34:
a0:65:10:4e:57:a4:5e:73:14:35:7e:f6:29:60:c1:
63:f9:36:2e:4d:a6:47:3e:2c:9c:b7:17:86:58:8e:
05:c7:5b:d3:43:46:5b:15:bc:48:ca:55:b4:d9:5a:
c2:c9:6b:99:b7:88:36:5d:52:5f:12:c4:9f:ff:ac:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:B7:4F:C4:36:BB:83:24:29:57:A9:3A:BC:8E:59:6E:7F:23:B2
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/m1m3T8Q2u4MkKVepOryOWW5_I7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:cf:ed:53:4e:a0:12:59:8e:df:71:eb:61:a4:c3:4f:19:a9:
ad:bf:1b:19:9d:90:d5:68:71:2c:4b:5a:89:09:34:ab:03:d3:
6f:ca:f1:7d:ad:e3:f8:9b:40:c0:3b:f3:23:10:f1:99:db:10:
a8:d0:8a:ad:06:d4:70:09:5f:3a:5b:13:87:54:f5:1a:ae:f6:
96:db:20:af:cf:87:ed:8f:df:f0:57:54:23:e1:69:61:94:ee:
f1:23:2d:c0:b3:7a:a3:bb:c1:94:64:ff:49:d0:55:8b:ad:9e:
d8:38:54:65:1b:82:56:51:67:49:b2:fb:04:42:45:47:68:b1:
20:5d:2f:9c:bc:e1:5c:02:1d:4e:98:64:25:6c:40:ee:d3:ad:
84:7a:5a:15:db:ca:0e:de:bf:02:d3:9c:fb:ca:27:f0:a6:dd:
50:62:31:4a:62:d2:63:89:e7:41:56:6f:21:95:39:88:11:c0:
8c:77:a2:e2:c3:54:4e:db:5e:f7:7e:57:b1:22:32:70:42:b5:
e9:71:58:de:0d:39:54:c3:f4:da:cc:1c:fa:cb:c4:50:13:bd:
d4:94:4c:bf:e7:29:47:5e:2c:2a:99:55:3d:72:9d:16:9b:47:
a2:38:00:3f:c7:b3:0c:45:dd:2f:c3:df:79:fd:b8:97:f6:78:
4e:36:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:23 2025 by rpki-client