Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa
File: 6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa (raw, json)
Hash identifier: gMh0wwac41YhfDMiHEE90LF+AKmpSFWvauo0beidvCc=
Subject key identifier: EB:36:32:26:9F:41:8F:AA:A4:8B:F1:31:9C:80:79:3B:86:69:D8:31
Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial: 027C
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa
Signing time: Mon 10 Feb 2025 14:05:31 +0000
ROA not before: Mon 10 Feb 2025 14:05:31 +0000
ROA not after: Wed 15 Oct 2025 15:30:20 +0000
asID: 150766
IP address blocks: 160.191.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Validity
Not Before: Feb 10 14:05:31 2025 GMT
Not After : Oct 15 15:30:20 2025 GMT
Subject: CN=EB3632269F418FAAA48BF1319C80793B8669D831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:12:2e:7a:8b:9d:6d:1e:c3:78:74:76:7e:
33:66:4f:1b:63:4d:ba:0c:2c:71:4d:9d:22:7d:b7:
29:f6:3d:88:f7:9c:1b:62:19:68:4b:e0:27:94:bf:
de:dd:f1:17:53:d5:c9:09:d9:58:35:cb:8e:7b:a1:
8c:b3:57:4b:a6:4a:8d:af:6e:15:1e:36:b4:b3:38:
84:99:af:09:02:0b:92:1a:b6:7b:6e:d1:49:e7:f7:
2e:9a:ef:b3:03:6c:10:8e:6c:fb:c6:79:28:61:37:
5f:3b:bf:ce:bc:8c:c1:11:df:ea:55:59:e1:1f:6c:
c2:24:0b:f0:c2:63:8a:7e:b9:5b:94:b9:6a:18:bc:
73:6e:4e:16:df:96:8a:3d:1c:03:c7:ae:02:7d:b7:
9c:61:26:a4:be:e1:da:25:87:a9:32:1b:df:7a:2a:
c7:f7:38:cd:87:61:53:8f:0c:cc:0c:b1:6c:64:43:
48:57:57:7e:a0:d2:aa:b4:f6:b3:ff:31:e4:24:1b:
96:3f:c3:eb:2d:ac:b6:57:68:0b:b8:e9:86:c5:6d:
04:fe:6a:b8:f7:d7:62:44:4f:81:3f:2f:b4:97:8d:
2f:f2:2a:a9:a8:f2:7a:5a:d7:42:13:5f:72:f8:bd:
42:2d:56:95:86:d2:85:05:6d:b6:20:c7:97:80:c4:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:36:32:26:9F:41:8F:AA:A4:8B:F1:31:9C:80:79:3B:86:69:D8:31
X509v3 Authority Key Identifier:
keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/6zYyJp9Bj6qki_ExnIB5O4Zp2DE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8a:5d:d7:c3:b6:91:19:8a:f7:57:75:06:9c:a6:f4:34:e0:
a6:4a:1c:6b:46:46:e7:c0:6b:c2:d5:54:de:a8:06:b6:92:b3:
13:e1:d9:66:10:99:52:ba:74:d9:14:ad:b3:22:06:fe:51:cc:
f7:49:b1:ff:65:e2:0d:2e:e5:ed:a0:78:dc:74:51:7e:bc:28:
77:f5:20:ce:1d:f6:55:cf:ff:3a:d4:42:47:32:7a:2a:e9:97:
95:f0:ca:aa:f7:13:d1:db:29:28:32:ca:81:b6:5b:e6:c1:f4:
8a:20:5c:dc:34:b8:a5:a6:0c:76:1e:1c:51:dd:68:53:92:be:
d8:42:7a:06:be:db:08:44:d8:3b:ff:55:4f:cc:a7:ff:5c:8c:
52:18:c4:91:77:16:fb:21:86:68:e0:d3:27:e6:bb:46:34:34:
c6:c8:bb:5d:81:8c:49:7e:66:16:7a:70:3a:9a:1c:42:ea:a2:
89:11:2c:11:2d:ed:b4:f9:77:e8:5a:55:9e:04:a3:04:d9:d6:
c6:9f:6a:9e:49:b9:ab:2a:aa:1d:02:f8:dc:25:bf:74:5a:aa:
8b:32:ed:55:a4:27:50:2f:01:74:c5:56:a8:cf:8a:36:32:fa:
d9:3d:10:b7:6b:1a:39:d6:38:2e:52:92:b6:6f:f2:12:24:62:
e3:b1:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:30 2025 by rpki-client