Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/0Wr4WwRpVdlZcOYVd2Bi_opf_w4.roa
File: 0Wr4WwRpVdlZcOYVd2Bi_opf_w4.roa (raw, json)
Hash identifier: MJ7yCY1Bpf8PTiKJeaANZi/z3SCWBbsBam9hYqfSL2E=
Subject key identifier: D1:6A:F8:5B:04:69:55:D9:59:70:E6:15:77:60:62:FE:8A:5F:FF:0E
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0950
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/0Wr4WwRpVdlZcOYVd2Bi_opf_w4.roa
Signing time: Wed 29 Sep 2021 02:51:30 +0000
ROA not before: Wed 29 Sep 2021 02:51:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24167
IP address blocks: 2400:4500:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 02:51:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D16AF85B046955D95970E615776062FE8A5FFF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:fd:51:64:e0:25:3c:2b:ca:17:0f:5d:59:
31:19:41:85:c4:04:47:48:98:97:5d:5a:34:8e:3e:
aa:0f:3a:03:7f:8f:7a:33:d4:ae:f3:cb:a0:54:f4:
c4:36:57:20:f9:71:67:a3:32:2c:3d:ad:a1:6b:df:
d4:2c:d4:10:1e:0c:6b:4b:e3:fd:44:df:d6:c4:d0:
30:32:a1:38:07:94:90:8b:f5:ab:c0:81:95:70:df:
a0:df:ad:a1:55:86:18:86:ee:47:08:14:e3:81:99:
ba:91:47:40:fa:7b:38:2b:11:82:07:bf:8c:c1:d6:
24:7f:08:c0:d8:fb:85:1f:cc:8d:2b:59:93:5e:f1:
45:fe:ac:c0:1b:1f:e6:a9:6a:42:de:0b:59:8b:a7:
42:99:c0:7a:af:fe:b4:d3:b2:4b:76:3a:de:71:27:
b1:25:26:3c:16:94:96:a3:4f:42:17:23:9f:28:ba:
0f:9e:51:90:c2:b1:cf:bc:c5:c3:32:bd:a6:cf:12:
62:a8:74:25:91:99:7b:01:6d:47:02:4b:b2:6e:35:
2d:33:44:64:50:d0:ca:de:f1:55:52:d8:df:5c:8b:
b9:ec:c8:5e:06:29:64:a4:4c:4b:cb:5a:45:69:af:
49:1a:18:8c:5f:2e:c3:5a:8b:65:48:0e:fc:69:b9:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6A:F8:5B:04:69:55:D9:59:70:E6:15:77:60:62:FE:8A:5F:FF:0E
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/0Wr4WwRpVdlZcOYVd2Bi_opf_w4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
78:0a:b4:66:06:21:8d:b6:51:08:e4:eb:c6:4b:cf:0a:84:df:
54:98:aa:4f:67:0e:af:fd:88:c0:ec:11:2f:29:3e:7f:e7:7b:
ab:4f:e7:6e:3a:ba:b6:37:00:27:e2:91:6a:46:62:05:98:0c:
e5:fc:a5:ad:c7:45:6b:37:23:5b:d6:4e:a2:f0:73:28:d2:4d:
3c:9f:26:96:ba:5b:0e:11:d3:af:dd:07:18:76:d1:3e:f4:ba:
97:ba:da:dc:ad:06:4c:6e:e3:8b:d8:eb:7b:48:fc:d2:03:b3:
d3:62:a7:f3:e3:3a:87:4f:79:7a:2d:38:90:59:2a:2e:cf:54:
b3:4f:66:82:9b:31:11:ca:7f:35:a0:7e:ff:c2:8c:af:fe:80:
0e:33:a4:e2:00:07:f1:e0:62:d2:c9:b2:f3:b1:c3:79:c4:4f:
1d:c3:79:4e:b7:6e:5a:89:9b:d3:68:f5:a2:ff:4c:62:4b:ef:
af:ff:1a:1d:bd:78:c7:0d:4c:c8:d0:ac:3a:73:92:f5:8a:a8:
39:ef:c2:99:3b:67:f8:31:c8:88:e5:8f:15:27:6d:2d:9c:0e:
15:28:39:81:11:17:0b:43:db:a8:d6:1c:fd:dc:c0:9d:ff:c9:
81:fe:03:4c:1f:69:de:1d:c9:17:b3:e5:fb:15:4f:69:db:7a:
3b:d2:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:54 2025 by rpki-client