Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa
File: X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa (raw, json)
Hash identifier: Nu17R64WXaWslx/ReIjhLvq/lF2xFDfTtETTKppn/Io=
Subject key identifier: 5F:FF:89:93:0A:DF:E3:0C:02:E8:8B:73:2D:08:4B:78:F6:B3:95:44
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 142C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa
Signing time: Fri 06 Jun 2025 07:21:52 +0000
ROA not before: Fri 06 Jun 2025 07:21:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 2404:178::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5164 (0x142c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Jun 6 07:21:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5FFF89930ADFE30C02E88B732D084B78F6B39544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:7e:10:bc:5c:ea:d0:5c:15:9e:5a:73:22:
fe:a5:5a:1a:93:58:bb:6a:64:17:56:c2:84:9a:48:
20:9e:c9:53:18:62:71:80:59:49:2b:6d:ba:8c:95:
ae:43:6b:28:e3:73:b1:37:65:92:ae:b7:0e:65:48:
ca:04:93:1b:51:af:ae:40:7c:14:7b:eb:1e:b5:09:
bd:a1:5c:74:1d:d0:62:af:47:46:24:e3:5b:b1:67:
4b:c6:b0:12:bf:80:0a:ec:60:1e:cc:1e:89:54:7a:
e9:b1:82:dd:37:5e:1b:06:bc:06:3d:60:6c:9e:92:
d8:08:74:53:cf:aa:8c:5e:d5:93:76:dd:cb:bc:05:
24:6b:97:2e:27:49:b6:13:da:16:87:df:4b:44:2e:
15:85:60:0e:70:44:c0:ec:c8:f3:c8:e9:c8:05:f9:
44:19:2a:93:2d:8f:eb:aa:f4:53:51:35:b4:0a:a2:
99:89:99:b7:4b:5c:8d:85:69:79:08:45:c1:63:e5:
16:e3:59:64:9e:99:b3:38:11:79:3c:1e:24:59:2f:
24:e4:23:65:e2:d2:dd:41:23:52:ea:ea:05:07:1e:
f7:ec:7d:9d:9f:69:8a:bf:ba:76:5c:b2:03:aa:10:
72:8f:c0:71:26:77:a9:59:95:de:a3:3d:44:b9:59:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:89:93:0A:DF:E3:0C:02:E8:8B:73:2D:08:4B:78:F6:B3:95:44
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:178::/32
Signature Algorithm: sha256WithRSAEncryption
6b:90:92:8b:9a:c6:6f:8a:20:e8:72:0c:28:dd:05:10:e0:7d:
80:5b:63:9c:f8:23:3c:cb:09:19:fa:f2:0b:0c:34:35:16:7b:
1d:23:05:c1:bc:d9:ff:a9:4a:ea:de:53:f8:08:3f:d9:d9:2e:
be:00:18:c8:8d:ce:a6:45:dd:d6:a1:51:da:65:42:c8:3f:07:
25:68:20:c0:76:b5:89:93:13:d8:da:5f:20:52:20:1f:77:f4:
de:04:57:e4:ad:89:63:7e:b1:f2:68:b7:de:7d:03:44:f8:28:
aa:11:30:39:b1:bb:73:e2:2d:33:4c:83:90:1e:37:21:f7:56:
7f:f8:a4:79:c0:1b:28:1c:89:9b:a8:31:dc:5d:34:a3:a8:d8:
f0:da:c9:65:d0:22:7c:e1:38:fc:5c:52:8a:c8:fe:87:78:97:
6a:b6:1e:7d:94:47:17:9c:c6:65:ab:57:ae:a8:10:27:b2:59:
cb:34:86:92:c9:e4:a8:66:64:3e:73:45:a4:78:3e:19:69:b6:
f7:d9:9d:0a:fe:6b:e1:c5:67:e0:7c:ae:ba:27:4a:54:20:c6:
fd:8b:24:63:df:34:cc:da:79:ea:b3:d0:46:5c:64:60:eb:e4:
0e:02:fe:92:ce:ef:ee:aa:90:50:dd:a0:15:4d:04:44:de:a3:
a4:2a:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:16:06 2025 by rpki-client