Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa
File: hYyepMDIpBY-JHorYEhIMB-ANW4.roa (raw, json)
Hash identifier: 3WB6jlJPGMPg7wIcwtP7oU3R9Bwxw/9ND8vEnS2H624=
Subject key identifier: 85:8C:9E:A4:C0:C8:A4:16:3E:24:7A:2B:60:48:48:30:1F:80:35:6E
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0D60
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa
Signing time: Mon 10 Feb 2025 14:13:15 +0000
ROA not before: Mon 10 Feb 2025 14:13:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17709
IP address blocks: 61.58.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Feb 10 14:13:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=858C9EA4C0C8A4163E247A2B604848301F80356E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:72:0c:bb:73:0c:38:1a:02:b2:ea:5b:67:
62:55:95:48:02:25:8f:1d:af:78:bb:82:07:eb:6a:
34:a9:8d:73:0a:2b:1a:6f:c0:9a:2f:ae:2f:c8:5c:
e7:cc:33:96:b7:e6:52:01:a6:0f:a3:27:93:6f:43:
a8:9c:11:0b:bb:5d:a4:e8:4a:24:7a:40:a2:49:b8:
8f:f7:be:ff:d2:67:80:b8:a0:5f:08:f4:9b:a7:10:
c5:a4:93:14:46:84:d7:6b:b9:b3:a3:9b:b2:56:03:
67:73:f7:77:1f:5e:41:59:a2:9b:a6:e7:68:29:ba:
5e:10:43:a5:cf:b1:91:0a:45:aa:d4:ef:9a:77:0e:
bd:15:4b:c8:cf:45:a0:b9:e5:c0:e1:58:cb:25:1a:
05:c2:71:79:da:44:3e:96:b9:c3:cb:0a:74:da:f7:
8c:e1:48:3c:e5:35:95:d6:b7:eb:11:5d:0b:a0:cf:
10:58:6b:b5:d9:72:5f:1c:8c:8e:e8:4d:7b:bd:f4:
3a:59:b4:21:82:14:c5:4d:0e:7b:ac:99:19:ad:bb:
fa:e1:c2:67:f2:67:63:2a:23:31:1a:7b:07:94:42:
04:fc:a8:69:d1:94:5c:d8:d8:d4:6f:cc:34:94:1c:
08:5a:be:7f:f2:4b:3d:2f:76:26:0b:64:fc:c0:c7:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:9E:A4:C0:C8:A4:16:3E:24:7A:2B:60:48:48:30:1F:80:35:6E
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hYyepMDIpBY-JHorYEhIMB-ANW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/20
Signature Algorithm: sha256WithRSAEncryption
45:42:7e:4b:34:14:3c:09:51:41:75:83:8a:eb:c1:39:62:68:
0b:19:2a:36:64:03:a4:21:e9:2a:da:0f:75:7d:ca:85:6a:c6:
fe:1d:74:72:a8:f7:1e:1f:e5:c9:7a:cf:8f:44:5d:b5:6e:d4:
23:33:6f:ea:57:72:27:4d:f3:10:79:cb:c8:e4:c1:53:e9:25:
92:5e:a4:fd:39:78:ba:bd:7a:bb:76:29:04:e0:aa:ad:68:d6:
43:c5:76:ed:89:68:25:1a:53:92:39:0f:77:0a:f7:32:f0:4c:
21:8a:f3:30:6f:c3:bd:ad:19:97:03:9c:d3:56:f3:07:ec:af:
50:a2:41:5c:a8:ee:ab:21:62:f2:df:2f:69:a0:b3:66:0a:82:
6c:1e:0d:46:8f:34:7a:c6:5a:d1:1a:8f:ef:9b:f1:d3:b7:84:
c2:90:a2:0b:b0:ba:11:82:21:e4:60:2a:52:ff:13:7d:aa:34:
c6:9b:98:2d:b8:58:ad:36:c9:23:1f:6a:15:0b:ea:3a:e4:66:
29:dc:9e:1f:06:15:7d:da:b1:ff:0f:3c:36:ee:21:b6:52:af:
74:b1:11:c6:a8:20:98:22:c1:33:f4:16:07:92:8f:1d:3b:34:
e2:fa:29:ba:48:5c:51:32:33:39:60:a1:80:5f:15:6f:4b:0f:
2a:a6:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:26 2025 by rpki-client