Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/gWNUAqEjkatuwm7QUqx5V5XS7T8.roa
File: gWNUAqEjkatuwm7QUqx5V5XS7T8.roa (raw, json)
Hash identifier: hjTiPBl6CPHwuiA8y4AoGG5EGrvlrjlQx1NuPjXaY5E=
Subject key identifier: 81:63:54:02:A1:23:91:AB:6E:C2:6E:D0:52:AC:79:57:95:D2:ED:3F
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E60
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gWNUAqEjkatuwm7QUqx5V5XS7T8.roa
Signing time: Mon 10 Feb 2025 14:03:28 +0000
ROA not before: Mon 10 Feb 2025 14:03:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 123.50.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=81635402A12391AB6EC26ED052AC795795D2ED3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:41:17:d2:c9:3f:d4:5c:41:e4:ac:d6:bf:
df:b9:b5:b5:70:76:18:de:6c:7a:ee:24:7b:45:31:
33:b4:11:8d:65:05:b5:1c:65:5b:4c:59:86:4e:e8:
a7:9c:d2:7a:e0:a5:ae:fe:08:48:4b:c4:20:9f:c1:
c3:41:71:2b:1e:9d:35:ff:4d:2a:14:3a:3e:bc:da:
ed:20:70:28:e2:47:90:41:aa:e7:1f:9c:35:40:24:
6e:13:7f:e1:85:74:11:38:e4:62:2a:e7:c9:3b:36:
2a:2a:e5:a0:ef:2d:c4:60:bc:c0:12:d8:a0:21:63:
f5:8d:d4:f8:8b:d2:86:70:d0:fa:b0:c2:ff:70:66:
cf:c3:2e:1e:51:0c:3a:10:06:57:a8:1e:8b:5b:d2:
d1:b2:a1:50:57:d3:f4:7f:35:91:d6:10:68:6a:5d:
27:4e:fb:3d:84:09:30:e5:4d:dd:80:e1:96:26:b3:
cc:01:08:61:87:be:f0:3c:3d:fc:a8:1a:26:c1:5c:
4c:09:95:7f:4c:88:8b:73:ee:6b:98:7f:40:08:f7:
94:8b:36:4a:42:02:17:f8:c3:48:68:ab:36:d1:72:
20:46:5a:e6:30:84:75:a5:3b:7e:77:c9:47:30:49:
c2:b5:63:28:ca:03:e1:f1:aa:9e:8a:1e:14:3c:43:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:63:54:02:A1:23:91:AB:6E:C2:6E:D0:52:AC:79:57:95:D2:ED:3F
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gWNUAqEjkatuwm7QUqx5V5XS7T8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:da:b5:5a:48:53:ee:ff:6e:71:44:aa:20:30:41:1b:af:39:
ee:90:64:65:9f:7b:c1:19:b5:d2:3f:03:6a:90:57:ad:69:75:
67:41:09:8f:93:01:ab:b6:35:f9:9a:af:48:45:44:52:ad:40:
22:e0:5c:2c:2f:e2:d9:5f:66:b8:c1:31:5e:19:80:83:e9:06:
0d:fd:8a:42:57:af:5b:e6:e0:40:d4:48:de:77:b5:44:d7:fc:
b4:e0:6a:96:9b:60:b5:7b:7a:62:a0:b0:bb:63:67:2c:53:67:
9c:b2:b9:36:fd:82:b2:61:af:79:c9:04:7a:e2:7a:df:dd:3a:
3c:17:67:d8:60:04:36:e3:9e:21:ef:bf:b9:32:de:bf:2b:85:
90:ee:1b:51:02:99:c7:fc:4c:15:f6:6a:d1:39:25:6e:07:9e:
26:03:b5:a7:2a:7c:b2:af:35:e5:69:cf:5f:16:8b:33:a0:8a:
75:c0:91:c1:b3:73:6a:f6:48:50:5e:19:73:44:b4:19:5a:4b:
4a:1e:a2:a5:18:33:c5:19:ba:ae:8a:d3:5b:ee:2d:db:57:11:
a3:0c:5b:1b:11:f2:f0:09:38:f0:65:d3:b3:9a:b0:9a:8a:f3:
f1:20:16:8b:cb:63:b0:76:40:8a:dd:48:9e:7b:be:69:f7:97:
ae:6f:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:14 2025 by rpki-client