Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa
File: dzWYojmHAg7zztUtrm31gOqxD_A.roa (raw, json)
Hash identifier: 33SSTQHZ+M+kwJm/xttqzoFkgbA8atoPsZ9Yu3ZFEbY=
Subject key identifier: 77:35:98:A2:39:87:02:0E:F3:CE:D5:2D:AE:6D:F5:80:EA:B1:0F:F0
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E4D
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa
Signing time: Mon 10 Feb 2025 14:03:23 +0000
ROA not before: Mon 10 Feb 2025 14:03:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3661 (0xe4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:23 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=773598A23987020EF3CED52DAE6DF580EAB10FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:f2:46:87:8d:90:b8:ad:3f:3e:2f:7a:c5:
b9:3b:0c:62:45:1a:4e:e5:84:bb:be:b1:e1:f9:c2:
55:59:c2:3a:1e:b2:23:65:8a:f4:2b:3a:5d:a7:ec:
ce:09:c5:f7:89:9c:4d:eb:1f:65:06:cf:07:67:0e:
c8:ae:c7:97:99:eb:08:41:01:1c:26:e0:5a:59:df:
21:e2:8e:24:54:17:fa:66:b9:51:39:56:c6:e2:32:
96:bf:a1:c3:7a:e6:d7:a6:4c:b6:64:af:1c:b2:23:
fe:15:41:ff:2d:41:57:55:f2:35:0a:33:1f:c6:cd:
85:5c:3a:b2:1d:94:d2:9e:d4:b7:2b:91:8d:5f:4c:
ee:de:07:94:aa:e9:69:13:f0:f5:6d:89:12:d6:6a:
4b:c9:7f:0e:89:53:59:cd:97:72:43:02:01:14:93:
1a:c9:ef:64:6c:63:db:e3:ee:c8:32:7b:c2:f1:25:
24:da:1b:17:53:1d:c9:c2:3d:10:2f:de:8d:23:27:
12:17:d9:a8:a9:25:13:ae:7a:9b:dc:a0:6f:12:ac:
cd:3f:ee:4d:a4:a7:8a:2f:79:27:c2:bc:cc:a2:2d:
7a:4e:f8:8e:24:0c:b7:a9:da:7a:89:21:41:76:34:
27:dd:42:7c:d0:8c:4f:62:be:75:c5:41:df:c4:be:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:35:98:A2:39:87:02:0E:F3:CE:D5:2D:AE:6D:F5:80:EA:B1:0F:F0
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/dzWYojmHAg7zztUtrm31gOqxD_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ee:de:62:a7:41:03:45:2e:f4:8e:98:34:0c:0f:6e:40:64:
15:68:f5:6e:e8:96:d2:06:e7:28:45:62:b2:68:67:45:15:a2:
0e:29:95:05:48:90:27:98:68:78:50:07:0c:6c:b2:cd:1a:f4:
f0:a8:90:aa:53:99:29:37:f4:d9:7f:7e:16:85:35:a4:30:11:
73:75:fc:a3:b0:e9:1f:1e:6c:98:a8:64:d4:fa:e4:c6:2b:da:
39:82:51:bc:7f:4c:8f:13:f5:60:15:70:99:49:42:70:98:0b:
26:4b:55:1a:71:12:b4:92:58:4f:fc:40:f0:11:87:d9:c8:71:
80:7f:8f:40:20:cd:43:64:c3:e9:2c:09:b0:c4:24:9b:6b:de:
0f:4e:78:aa:4d:cb:b6:cb:db:1d:e8:ed:82:79:9a:e3:8b:f3:
4f:62:53:21:43:e1:8d:19:06:d5:4a:b6:32:a5:bd:60:d4:a0:
5b:4e:80:9d:32:fd:c7:16:58:e3:62:db:3a:c3:e9:1d:ed:30:
08:be:31:0e:a3:cf:3d:b9:a6:d3:81:7f:86:1e:b1:90:7d:d1:
cf:b5:9b:69:9b:48:37:3f:f8:64:de:4d:79:e6:9f:44:9a:73:
6c:7e:0e:28:d2:9b:cb:f7:96:5c:76:34:73:98:96:26:cb:18:
3b:38:96:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:45 2025 by rpki-client