Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/XCdILw1kfQrRLeRYy1RfcUvsXHg.roa
File: XCdILw1kfQrRLeRYy1RfcUvsXHg.roa (raw, json)
Hash identifier: VSEcXH/y32YVTQaZhogaT/vbcT/eK2ZzSBEYc2CO+SY=
Subject key identifier: 5C:27:48:2F:0D:64:7D:0A:D1:2D:E4:58:CB:54:5F:71:4B:EC:5C:78
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E68
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XCdILw1kfQrRLeRYy1RfcUvsXHg.roa
Signing time: Mon 10 Feb 2025 14:03:30 +0000
ROA not before: Mon 10 Feb 2025 14:03:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 61.57.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C27482F0D647D0AD12DE458CB545F714BEC5C78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:80:02:e9:d7:cc:6f:3d:d1:41:29:00:ec:
a9:83:bc:9b:c2:05:f2:15:4f:3f:c7:12:26:37:f4:
7d:fb:00:7b:6a:ff:ff:54:c9:54:3a:32:b5:b7:02:
e3:9b:7d:18:20:b9:ab:9a:61:e1:1e:38:6c:55:01:
69:64:81:16:fa:96:f4:5e:be:27:1a:15:3c:aa:8c:
8c:60:dc:30:4a:aa:6e:7b:5b:7c:b2:b8:b9:04:47:
1f:29:e7:c5:e0:26:88:d1:78:10:b9:9e:4c:0d:5e:
9c:ee:8a:49:54:50:de:b2:1b:c7:ce:ff:ec:f7:bf:
40:00:59:83:3b:cd:73:60:73:48:31:59:6b:09:10:
6b:ae:04:37:4e:5a:a4:f2:44:56:e0:eb:af:3e:62:
53:bd:67:08:e4:f6:fa:11:81:37:59:32:49:7b:80:
37:24:6e:db:d0:1b:7e:ba:f1:ff:1a:a9:b7:37:b1:
9c:97:fb:bf:67:52:f5:a8:6f:59:a5:24:a4:d9:8e:
50:5a:ae:fd:b0:43:25:5e:2f:a1:c9:79:f3:90:dd:
99:7d:2d:61:e3:2b:40:27:7a:61:bb:eb:08:33:04:
a5:f9:9d:a8:f3:4e:a1:ac:35:42:6d:49:db:26:7e:
30:6a:22:73:b2:e6:ce:fa:c1:3f:e9:f2:b3:d9:ef:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:48:2F:0D:64:7D:0A:D1:2D:E4:58:CB:54:5F:71:4B:EC:5C:78
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XCdILw1kfQrRLeRYy1RfcUvsXHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.152.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ff:38:9e:cd:62:2d:7c:74:f5:09:7a:08:e9:e1:b2:2d:ff:
b4:17:c8:56:10:38:5b:b2:89:25:2e:a2:fb:df:0f:8a:07:ac:
ca:04:18:65:6e:a6:8c:4a:6e:03:b4:7f:ec:1f:2f:52:a4:f0:
5c:c1:d8:bf:93:93:b8:8e:99:ec:29:3b:dd:42:55:4e:e2:0f:
87:64:71:be:25:bd:d0:d9:a5:77:6c:38:54:b0:3f:05:46:6f:
02:96:e5:85:28:f4:f8:4e:05:06:85:4f:6c:71:5d:42:93:b9:
36:dd:04:85:37:b1:3d:83:bd:38:3c:7e:92:51:8c:9c:35:d0:
a2:4b:3c:3d:59:de:d8:49:d3:5f:f4:ee:b7:35:15:07:03:bf:
49:1f:3a:ea:58:86:15:8e:cb:87:46:72:1c:67:82:84:40:15:
6a:06:56:55:64:33:0f:d4:ee:7c:86:3e:7b:70:a8:b8:c2:16:
16:e2:15:66:24:5e:75:e4:a1:6a:08:cd:5b:8f:0d:cf:68:3b:
f1:b6:57:e1:d1:c2:41:a5:56:da:f4:b7:ac:c6:6a:15:66:e8:
29:e2:72:d7:8e:e5:c0:86:81:09:66:48:c2:ca:05:a5:e5:a1:
40:b4:9c:f7:d6:38:31:a3:48:fc:8e:58:86:be:62:4e:12:09:
b4:18:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:21 2025 by rpki-client