Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa
File: cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa (raw, json)
Hash identifier: Dj1i/1AdRA13RqX/WNcmJpj3+Me1MKHAw1Uy9nuNGQc=
Subject key identifier: 70:6D:2B:A7:CB:14:E5:83:C8:D9:E9:E9:4C:28:19:EE:69:CB:FA:81
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0D53
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa
Signing time: Mon 10 Feb 2025 14:13:11 +0000
ROA not before: Mon 10 Feb 2025 14:13:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 2405:9200::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 10 14:13:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=706D2BA7CB14E583C8D9E9E94C2819EE69CBFA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:3a:84:cf:f2:f8:fb:3e:37:49:22:42:24:
5e:13:3a:79:d6:bd:3f:0b:2e:2b:ec:bb:44:fd:52:
8b:80:ab:40:75:e8:e9:22:c5:4e:ff:28:49:c7:0b:
0e:57:67:8f:6c:10:b5:14:f7:7b:7d:54:2b:b4:49:
f8:d0:45:5b:7d:83:9f:7d:ca:70:3e:23:fa:c8:f6:
ac:20:c3:5e:ed:b3:9c:fd:e8:d9:8f:84:22:70:3a:
48:17:ab:af:80:b9:8d:28:b8:83:22:60:ca:b3:dd:
82:a6:f6:75:1e:72:c5:64:6a:8e:f3:8e:53:d1:a8:
9c:17:99:68:e3:57:fc:97:b8:28:e1:99:79:7b:d9:
21:69:a4:fb:7d:39:c6:b5:99:bb:44:1d:a3:ca:c3:
8a:82:7a:34:af:ee:8c:95:76:34:21:3c:07:82:48:
65:4f:32:ba:f0:fc:93:f4:c9:1b:9b:cb:5c:f7:d1:
64:aa:6d:39:af:a5:a7:cc:65:1b:b8:99:2e:65:8a:
4e:3f:00:f9:a1:70:80:09:a6:41:dd:2a:24:53:dc:
72:4d:79:4d:c3:d3:72:ae:58:5c:15:43:a1:80:86:
b3:d3:b8:18:da:b5:9c:84:0e:b9:4c:3d:4c:51:20:
19:b4:c3:70:5b:d9:30:84:b1:43:b4:48:cc:2e:64:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6D:2B:A7:CB:14:E5:83:C8:D9:E9:E9:4C:28:19:EE:69:CB:FA:81
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:9200::/32
Signature Algorithm: sha256WithRSAEncryption
40:25:e9:68:00:f4:60:4e:d3:64:da:0c:03:be:da:c5:65:3d:
3b:39:99:44:20:f3:6c:4e:cb:25:49:e9:75:41:df:dd:fb:bd:
69:54:7d:92:e1:59:97:02:fa:c8:8a:0d:61:dc:e5:aa:19:c4:
bb:e3:54:44:42:c2:23:ff:db:6c:09:43:5a:75:85:4f:86:5a:
47:d1:1b:8c:5c:c9:c4:c3:57:a6:5d:36:f8:5d:e9:3a:69:ac:
a4:0f:ac:d0:1d:52:ef:c0:27:0a:04:88:ec:24:cc:be:0b:c9:
26:3c:78:46:88:83:77:cf:94:a2:2c:65:b7:ef:4f:83:1a:17:
93:c4:40:7c:b0:33:56:8c:2f:fb:30:2e:64:ff:1d:8a:a5:48:
3b:ac:a0:04:e3:9e:2f:39:88:39:b3:41:a7:35:cd:83:ef:aa:
cb:6b:19:b1:1c:9c:1a:04:1e:86:c3:a6:1a:95:34:3a:db:38:
cd:84:a9:5d:f4:66:d5:89:03:9b:c2:c7:f4:a1:6a:59:d3:78:
d5:a4:3f:bb:e0:33:f3:7b:82:d9:5f:8b:06:d3:f2:89:04:f0:
30:e8:78:53:aa:5a:7f:72:e4:94:5d:22:08:4a:8d:9d:f0:34:
dc:21:8c:6b:7f:79:7b:cf:98:f3:e4:7e:6e:c0:77:8f:99:ad:
75:d5:91:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:45 2025 by rpki-client