Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/NPMXaXPapK6pFNUO-1OqRjXq7WI.roa
File: NPMXaXPapK6pFNUO-1OqRjXq7WI.roa (raw, json)
Hash identifier: sYME6Tcf8Dai8QcEM6XFdZYhfWoNXVaZTA8UTHZybdc=
Subject key identifier: 34:F3:17:69:73:DA:A4:AE:A9:14:D5:0E:FB:53:AA:46:35:EA:ED:62
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/NPMXaXPapK6pFNUO-1OqRjXq7WI.roa
Signing time: Thu 15 Sep 2022 02:40:15 +0000
ROA not before: Thu 15 Sep 2022 02:40:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 2404::/26 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=34F3176973DAA4AEA914D50EFB53AA4635EAED62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:35:cf:20:1a:f7:19:4b:b5:ed:8a:fd:ba:
ba:54:94:c7:61:b4:57:2d:02:f6:09:83:eb:c3:45:
e1:44:ad:37:ce:79:c3:a5:91:fb:19:41:e2:11:0d:
58:da:a1:14:47:96:00:b4:56:a4:5c:e9:01:d4:d3:
2f:8b:20:ea:73:a4:46:32:cc:30:47:28:a0:c1:35:
f2:8b:51:9b:00:9c:3f:a5:c0:b2:84:1e:6f:26:57:
d6:9f:0c:3f:ce:07:6c:fb:ac:ba:41:9e:bd:a9:92:
ce:c2:40:26:ab:2a:a9:ed:bc:d8:9b:02:27:96:fb:
92:4f:87:b1:97:c6:38:c8:8e:fe:1f:1d:9b:9f:93:
72:d8:bb:fe:b3:69:72:a9:ce:ba:4a:fb:c4:b6:70:
4f:78:dc:e7:f5:a4:21:8f:3c:07:4f:65:e3:3d:e5:
ae:4d:3e:75:d0:c2:6d:d1:13:f7:5f:9d:5a:ec:7a:
af:57:93:54:71:24:4b:a5:d6:cb:2a:22:03:0d:fd:
59:82:48:89:5e:6d:b3:b8:d9:b1:1b:f3:de:78:02:
51:46:e4:02:2f:44:43:c2:31:01:55:c0:8c:55:90:
e4:ef:75:7a:80:4d:e6:8c:2f:14:83:bd:c3:e7:38:
33:83:75:b4:27:23:3c:89:59:56:c8:84:37:f0:1e:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:17:69:73:DA:A4:AE:A9:14:D5:0E:FB:53:AA:46:35:EA:ED:62
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/NPMXaXPapK6pFNUO-1OqRjXq7WI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404::/26
Signature Algorithm: sha256WithRSAEncryption
4f:2b:01:a4:c4:94:15:fa:54:8c:84:38:fc:5e:0d:63:f4:6d:
17:50:69:8e:74:b4:c3:1b:cd:2a:87:fa:8f:3f:8a:51:b5:06:
a3:9a:56:4e:bc:6b:ed:bb:42:46:ee:01:40:03:a8:f5:01:8c:
28:be:02:5a:cc:4a:5a:97:3f:90:54:9c:39:03:56:30:50:97:
75:c1:dc:04:57:67:fb:3c:28:36:99:ef:74:67:00:c9:5b:34:
85:78:a7:7f:26:a4:fa:2b:67:53:45:9e:05:a1:6c:9f:12:c7:
a1:c3:97:bd:e3:0b:fb:df:00:7b:ca:80:f0:13:c0:e9:dd:91:
3f:b2:cd:b3:2b:3e:97:4e:86:19:9e:de:67:3e:39:be:3a:b2:
8c:39:ed:09:97:5b:b9:5c:ff:51:69:d0:a1:6e:1e:9a:1e:e6:
0e:06:01:d4:59:bd:b1:2d:17:ce:ca:4b:cf:92:1c:7e:50:12:
8c:87:4b:a7:c3:0a:a0:ca:89:d8:f5:ab:a7:1b:0a:e6:e1:07:
53:3b:21:2c:c8:c0:4a:7b:5e:06:4e:76:34:89:ca:17:2b:7e:
a2:01:6c:57:7b:89:6e:3d:a1:a1:11:7c:28:3c:c4:b4:13:dc:
4e:0e:50:57:70:7a:3e:56:9b:ba:37:72:f3:40:49:9a:40:ce:
fd:50:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:17 2025 by rpki-client