Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
File: oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa (raw, json)
Hash identifier: C/TbAxBbt8x4ZbwJfyY8LxIY7Z9LW0jZmjOnS0dLwQw=
Subject key identifier: A1:6D:D9:48:BF:2D:7E:52:D9:E3:97:2B:C8:27:15:80:8E:51:8F:D3
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0CD9
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
Signing time: Mon 26 Aug 2024 05:27:02 +0000
ROA not before: Mon 26 Aug 2024 05:27:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24157
IP address blocks: 1.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Aug 26 05:27:02 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A16DD948BF2D7E52D9E3972BC82715808E518FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:33:68:e8:9a:23:db:74:37:90:3d:be:fd:
ad:b2:db:62:d8:62:d8:47:59:9b:15:46:83:74:df:
35:11:ed:e3:44:e3:79:eb:7d:45:7f:71:62:26:fd:
14:16:dd:17:a8:27:07:5c:2a:ae:3a:c7:a2:71:be:
b0:8d:66:8f:a3:e0:12:31:0a:f7:1b:a1:e1:55:85:
11:3d:5f:2f:3d:d1:07:48:a3:fb:b5:41:75:c7:31:
82:a3:f2:35:a4:b0:75:e1:d4:f7:c3:3c:7d:bb:ca:
09:82:27:a3:da:37:d3:36:35:16:7e:31:00:ce:63:
72:2b:60:72:7f:d6:f8:2f:91:8a:80:34:a5:61:7b:
3e:73:0e:59:2a:c5:50:38:cc:c3:24:a3:e3:86:b6:
07:c9:b4:a1:18:d4:f2:1d:95:06:cb:07:6f:da:18:
cb:d6:2e:14:dc:01:e3:47:ae:d8:86:1a:34:5f:62:
2e:22:36:8b:75:d1:ac:1a:83:21:13:65:64:94:5e:
16:ce:4f:78:89:fb:c1:5d:9a:66:ad:95:e0:07:3e:
ba:00:dc:38:03:af:4e:f8:f1:c9:97:cb:44:67:5f:
b3:84:9b:df:bb:8a:95:ad:59:d8:80:b0:3b:50:27:
e0:e8:86:a5:f8:b0:98:b1:b5:2e:ea:d0:47:de:7c:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:D9:48:BF:2D:7E:52:D9:E3:97:2B:C8:27:15:80:8E:51:8F:D3
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:bc:40:7f:fa:51:a9:24:55:70:ed:df:4e:59:ba:5a:0e:4b:
d2:20:27:5a:3f:d2:62:55:e9:8c:3f:1c:bd:02:29:65:1d:01:
6d:ab:58:b0:2f:a8:2a:e6:f8:22:1f:2b:e0:4f:d4:38:f2:5e:
a0:fe:c9:91:8f:04:61:b0:05:41:66:f2:68:8e:dd:b5:fa:06:
b8:78:5c:6d:5a:a0:8f:3b:2d:77:e7:fa:db:19:9a:ac:d8:24:
08:64:1a:04:ce:d5:b3:24:90:10:a8:3e:e1:7e:e4:fe:b6:de:
11:54:c1:17:65:5b:e0:52:36:8c:30:42:af:8b:60:91:29:11:
87:64:50:3f:1f:03:f4:bc:ec:62:5f:d3:b6:6d:df:20:4b:5e:
52:6a:52:bd:48:55:0c:2a:a1:d1:ec:78:54:d8:a8:3f:ac:a4:
7e:42:b6:cc:d9:e7:82:dc:68:8e:f8:40:05:91:1b:9f:63:f1:
43:37:4f:ac:95:99:61:7d:1b:c5:5e:86:e8:21:14:2d:b4:c2:
48:b8:3c:ed:2f:f1:b4:0b:4e:e6:2d:05:bf:eb:a5:63:1c:0b:
89:25:74:bf:c3:af:e6:dd:a5:eb:40:7e:34:b1:93:8a:05:c3:
01:5f:e9:e4:be:3a:e5:55:98:75:72:34:ff:5c:96:04:65:f6:
b4:30:e8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:31 2025 by rpki-client