Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa
File: VE9LWoK3JP5BV-xnNCMwXruNJf0.roa (raw, json)
Hash identifier: MqGU7zCdDPc9gUcakaqgTfhtv5T5BXRfkTkOV3YKz2k=
Subject key identifier: 54:4F:4B:5A:82:B7:24:FE:41:57:EC:67:34:23:30:5E:BB:8D:25:FD
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0D65
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa
Signing time: Mon 10 Feb 2025 14:13:16 +0000
ROA not before: Mon 10 Feb 2025 14:13:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 116.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3429 (0xd65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 10 14:13:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=544F4B5A82B724FE4157EC673423305EBB8D25FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3d:48:86:f3:87:69:24:f4:e8:c0:92:a1:16:
96:90:44:23:fb:c3:e4:74:33:4b:79:7c:2a:3f:30:
26:4c:e5:10:6c:14:4d:92:b4:62:bf:12:24:2a:94:
cf:fa:8f:c6:a6:df:24:1d:9c:3e:e9:37:40:47:08:
f8:d3:e6:70:ce:e9:1e:2a:57:c5:56:99:b1:a5:31:
bf:1f:6c:80:38:45:39:05:f0:1c:8e:d3:b6:31:e7:
0d:48:bd:0a:67:37:c5:00:32:a2:7e:0a:ef:8a:fc:
94:b2:63:ce:e6:92:b3:f1:c4:17:be:8c:a7:21:ff:
d2:07:34:a8:fd:4d:f4:c2:3c:1d:e8:0c:63:06:10:
9f:5a:89:c9:23:08:88:7e:c7:b7:c5:7a:cf:f1:ae:
77:5f:00:ee:83:fa:05:20:da:da:6a:0a:87:f8:07:
bf:3e:62:bf:ae:45:bd:79:52:cf:e7:0b:1b:4f:ba:
80:fe:c7:fa:aa:49:5f:5b:9a:fc:15:1e:96:e9:02:
7e:ac:5c:92:c9:ff:9a:9c:2c:38:8f:82:7a:65:6f:
86:25:74:75:61:6d:02:ec:72:04:89:30:9d:f0:be:
3b:0e:5e:6c:52:a7:ab:cb:7f:58:27:3d:ae:89:8e:
be:88:86:91:88:39:bd:ed:9b:f2:69:d4:9a:0e:6f:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:4B:5A:82:B7:24:FE:41:57:EC:67:34:23:30:5E:BB:8D:25:FD
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/VE9LWoK3JP5BV-xnNCMwXruNJf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.241.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:89:2b:7a:3d:b3:62:ee:09:f3:ff:ac:06:69:0c:af:d6:5b:
59:0a:4d:d7:fa:c2:5f:5a:e8:a2:07:ca:21:7d:1e:cd:ca:5a:
9f:36:a8:48:5f:dd:c0:b8:12:8d:e7:ef:a2:ba:db:09:61:52:
67:d0:a5:9a:a7:bf:e6:da:b7:6e:82:9f:72:ee:a1:27:21:b0:
6e:fc:cc:12:98:c5:7b:a9:7d:58:40:60:3c:c8:52:2c:19:52:
ef:f3:d9:ab:b2:1b:19:fc:45:67:df:33:7d:57:25:50:0c:25:
0a:e3:35:11:15:b3:ec:05:3f:30:1a:c0:9a:98:21:98:e6:14:
09:d7:e2:6a:86:4c:1b:d2:17:c6:f8:64:32:e4:70:75:74:39:
f2:f0:70:80:d7:ce:fc:78:81:b0:d3:66:db:fc:cb:aa:9b:27:
ef:e5:88:bf:8e:ef:b0:b5:77:2b:7d:70:5d:cd:39:d1:1c:c3:
10:34:ef:1b:a2:27:bf:df:00:15:41:f5:e5:30:a2:86:9a:ad:
da:52:25:95:4e:99:ae:5c:65:25:e7:ef:30:85:8a:b3:df:f4:
b0:ec:20:c1:c2:c1:d7:97:d5:fe:82:f4:98:ff:48:c5:18:da:
60:bc:b5:07:43:22:09:1c:dd:d5:4d:5f:df:4a:02:13:2a:1c:
cc:c0:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:07:22 2025 by rpki-client