Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa
File: 0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa (raw, json)
Hash identifier: b/wXCHIYDDlWv9EFqk1bQUIbOb17PE4pGzX95Atyjek=
Subject key identifier: D0:8F:19:E4:E2:BB:91:C3:05:2E:FA:80:9B:F1:AE:46:B8:EA:F4:2A
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0D52
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa
Signing time: Mon 10 Feb 2025 14:13:10 +0000
ROA not before: Mon 10 Feb 2025 14:13:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131596
IP address blocks: 61.58.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 10 14:13:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D08F19E4E2BB91C3052EFA809BF1AE46B8EAF42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:07:66:9f:3a:fe:c7:95:1e:25:63:73:89:
80:2a:1f:d7:e5:9e:5a:81:16:24:43:fd:b7:7f:46:
e8:9f:61:51:af:20:08:43:4e:ac:79:f1:94:d1:35:
7f:ea:55:6c:22:5e:28:e0:1e:42:88:0b:b5:6d:58:
cc:dd:fb:95:b8:06:e0:dd:cb:55:3c:2c:6a:e8:6e:
f3:17:97:c9:b7:14:f8:e3:8a:89:f1:e5:c8:96:db:
7c:cf:44:22:a9:05:76:12:e4:3b:7e:50:41:08:59:
f9:13:92:bd:7e:24:21:60:a6:fa:0e:20:6a:ed:b7:
51:cc:45:3d:33:b1:65:3e:58:2b:14:5e:34:b9:89:
e3:26:ef:58:c1:21:d7:8e:5c:2a:a7:d5:90:09:c9:
40:d1:a2:37:21:f5:23:50:7e:56:03:10:ee:70:a0:
4f:da:4e:86:be:dc:37:11:13:74:b1:ef:17:78:7c:
ca:ab:6f:59:e2:d1:7b:03:2a:df:cb:c5:2d:cd:97:
22:13:22:e7:5a:53:72:75:94:a6:06:19:3d:88:fa:
5d:28:25:40:6e:5b:f0:f1:c2:ce:89:ec:08:35:d6:
02:21:22:2c:a9:2b:60:a5:a8:91:4b:94:42:5c:22:
b9:22:f7:5e:3f:c5:08:00:60:f8:d5:15:96:8f:3c:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:19:E4:E2:BB:91:C3:05:2E:FA:80:9B:F1:AE:46:B8:EA:F4:2A
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
86:06:f6:1d:4f:36:9b:51:5c:25:28:3d:01:67:28:e2:3e:90:
33:a5:4a:13:25:5d:b5:f9:b5:11:95:57:36:4b:7c:75:22:de:
5b:33:30:e5:5c:4d:0d:1f:33:61:0a:f8:09:1d:23:2c:a7:7b:
05:e0:7e:1d:60:d6:7c:74:9a:d7:b7:58:bf:7d:ab:be:42:fa:
d4:76:bc:27:d7:31:32:27:2b:3a:5c:49:27:8a:f3:9d:24:57:
95:4b:79:44:e5:6a:f9:8f:3c:58:dd:37:f3:bd:fd:86:ab:79:
f3:78:1b:3a:9e:35:f6:67:34:09:ae:9c:d5:24:45:b9:bd:23:
4e:e2:1c:eb:38:e6:aa:ed:61:df:e2:68:c9:82:fb:f4:a3:9f:
78:15:a5:6d:d5:0d:fc:2d:5f:7c:a4:b7:56:a6:ac:0f:69:75:
71:ed:d1:0a:a4:23:fa:eb:4c:f9:2c:5d:80:56:74:f4:8e:8a:
23:60:33:14:48:ee:14:32:54:54:82:7e:14:47:2f:d0:36:bf:
75:19:a3:0d:a9:b3:44:43:fc:bb:88:8f:f4:0e:1f:78:4f:cf:
b1:2d:a8:05:97:05:cf:0e:31:7c:4d:e2:18:be:6b:fc:46:d1:
ce:44:5b:2b:d7:20:f9:2f:87:4f:e9:9c:e9:70:fa:58:36:02:
81:52:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:25 2025 by rpki-client