Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa
File: 4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa (raw, json)
Hash identifier: UHa3y3sVuw5kO1RpYSpEa+E98XVHXFiGK4bdXVhvV4Y=
Subject key identifier: E2:CA:96:2D:54:2C:25:55:7F:B5:02:1D:6D:34:93:5D:92:FA:C6:63
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0CC4
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa
Signing time: Mon 10 Feb 2025 14:23:21 +0000
ROA not before: Mon 10 Feb 2025 14:23:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 43.250.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Feb 10 14:23:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E2CA962D542C25557FB5021D6D34935D92FAC663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:34:17:85:3f:42:9f:a6:e7:68:a7:08:00:
db:8c:1f:94:c6:65:e7:e9:93:8a:f4:73:8b:10:71:
8a:76:d8:0b:39:10:fb:81:b1:08:1f:da:00:0d:b7:
48:91:64:16:24:1e:53:cc:41:79:71:ba:be:32:11:
91:b9:d9:9f:2a:56:bf:c2:65:5b:b7:85:07:ef:12:
7e:aa:53:06:3f:83:e9:a8:5e:ad:db:fa:80:bb:1b:
62:9d:8c:19:56:1e:2d:87:51:ea:e2:33:89:d7:b5:
36:12:f8:c7:eb:57:96:b2:a0:b6:79:09:62:02:79:
82:40:23:7f:5f:e9:b3:c3:d2:64:72:2f:95:77:2b:
f3:30:d1:03:ea:eb:2b:ad:82:a9:1c:62:3b:b1:70:
e5:f9:78:55:c8:80:2c:28:ce:96:91:1e:0a:77:c4:
a4:e2:62:14:42:f5:a3:44:24:55:f5:c4:ea:ec:dd:
0d:e4:f8:e4:c2:12:76:3a:1b:6b:dc:db:21:fd:f5:
fd:4e:03:eb:93:07:62:d5:5e:18:db:27:06:f2:2e:
03:bd:83:09:b2:61:05:ab:39:05:ec:a2:17:e1:ef:
89:ed:cc:9e:44:ac:ca:89:12:a7:3b:62:97:2b:0f:
d6:ed:ba:5a:fd:a6:82:5d:fd:ec:c1:78:97:79:cd:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CA:96:2D:54:2C:25:55:7F:B5:02:1D:6D:34:93:5D:92:FA:C6:63
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/4sqWLVQsJVV_tQIdbTSTXZL6xmM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/22
Signature Algorithm: sha256WithRSAEncryption
39:6d:a2:57:ef:95:6a:b4:3d:79:b4:1c:47:36:59:76:48:a3:
bb:2f:1d:44:95:4e:00:5a:cb:e1:03:ae:b3:08:1a:56:34:b5:
ef:81:05:7f:8a:b9:0d:8d:d4:8a:5c:9c:23:c7:0b:1d:83:78:
42:87:57:be:e7:ee:7b:3b:d4:85:e5:99:77:8b:e0:f9:69:5e:
cd:d4:97:96:2f:35:88:0b:9e:9e:9c:56:87:2a:cd:ad:dc:a2:
f7:66:42:36:37:84:e6:37:1e:18:61:f1:1e:49:c1:e7:02:73:
d9:fb:93:61:9c:b4:99:13:23:61:96:20:e0:65:82:f1:21:08:
bd:1c:15:44:c0:ef:6b:0c:8b:b4:1c:d4:db:38:4d:ed:16:7a:
6f:ea:c1:95:42:2f:bb:92:c2:9c:7f:1b:be:99:8c:90:2e:0a:
5b:60:b7:0d:a9:fa:28:71:ab:2d:64:07:f2:8d:96:a3:ac:27:
e8:be:4a:8d:20:08:26:b9:f4:0f:be:45:a1:6c:28:fb:f0:ff:
b6:38:43:c6:7d:ab:6a:ef:24:56:30:58:f8:2d:4d:de:c3:f9:
38:ae:39:0d:73:ca:14:27:df:c9:6f:38:c5:35:2b:14:4d:14:
3d:60:cd:32:e9:f8:82:07:48:c4:7c:09:0c:b5:9d:43:98:92:
f9:28:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:39 2025 by rpki-client