Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa
File: oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa (raw, json)
Hash identifier: yd+LZjsIUynr6TiSlNCjz+/LVm3MUBwh+KE4Xo/zwSg=
Subject key identifier: A0:E6:15:36:54:11:CA:37:14:9B:AB:82:F0:7A:D7:FB:52:62:C7:43
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E62
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa
Signing time: Mon 10 Feb 2025 14:03:28 +0000
ROA not before: Mon 10 Feb 2025 14:03:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A0E615365411CA37149BAB82F07AD7FB5262C743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:ef:ff:1f:af:20:09:b7:da:df:20:19:a0:
54:12:be:c1:00:c0:8b:1e:ae:8b:19:dd:9a:e6:f0:
f0:22:fa:d0:d1:5b:11:c8:01:e2:f6:ef:e0:5e:ba:
be:ff:ad:e5:80:fd:2a:35:82:5b:f6:67:49:4c:32:
6f:5b:33:d9:c7:75:8c:4c:4d:86:ab:aa:21:a5:80:
a4:da:e8:c7:3c:0b:99:40:aa:78:af:91:f2:3d:e9:
0c:c9:46:63:ad:ed:95:a9:65:36:50:c1:1a:d9:8f:
ac:ea:14:b5:50:a4:34:10:27:d0:9d:34:2b:a9:6e:
53:36:82:20:44:cb:5d:5e:50:e7:87:3b:56:a4:6d:
f5:f5:81:b4:fe:6a:e2:d3:be:57:00:55:f2:53:da:
6c:3f:0e:5e:1e:12:9f:af:bb:61:00:d6:f3:9f:6a:
e7:3b:77:a3:15:e8:f2:c7:2c:03:75:74:cf:8d:55:
bd:90:43:d2:4e:6b:9a:ba:f1:82:e6:5a:61:f5:63:
f6:34:c4:77:4d:8b:8a:e7:6f:b4:c5:09:51:45:41:
54:c2:83:17:10:84:70:f8:11:91:8a:a9:6e:e3:b9:
5f:17:8c:d9:3c:fb:17:75:30:c7:12:93:64:de:67:
69:96:4c:12:bf:2e:6f:e1:87:c3:85:b6:1a:57:e6:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:15:36:54:11:CA:37:14:9B:AB:82:F0:7A:D7:FB:52:62:C7:43
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/oOYVNlQRyjcUm6uC8HrX-1Jix0M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.48.0/21
Signature Algorithm: sha256WithRSAEncryption
17:79:ae:ac:d8:0f:85:2e:46:15:39:2b:07:3a:a2:83:50:69:
5b:77:14:89:00:d7:ec:0e:e1:65:80:e7:e6:72:8b:06:60:1a:
c4:40:05:98:e5:9f:87:61:c0:95:09:5f:9f:a6:06:7b:d8:b2:
74:6a:97:8d:6a:d5:0f:a8:be:c5:97:14:97:1a:e9:d9:c0:de:
c5:f1:97:16:2e:8c:e4:e5:bb:e9:78:54:8b:46:0c:6e:f7:7d:
c0:17:a0:81:e1:c2:f6:61:31:fc:b0:e4:74:70:48:50:bd:37:
12:42:5c:d3:db:d4:37:c7:a8:86:9b:9e:6a:c1:f7:29:fc:69:
22:d9:82:2f:57:97:a3:51:e2:bc:59:36:58:29:7b:e2:31:8f:
ec:0b:5f:28:98:53:b5:d0:57:64:3f:f5:55:8f:aa:f0:8f:fb:
8c:7a:c1:78:94:a6:20:fa:7a:dc:36:ce:78:e3:e6:e5:6a:d2:
ed:ce:83:9d:df:ae:5e:2e:02:d3:1a:cd:c7:ff:3e:47:0d:fc:
55:a7:84:48:39:a3:19:d9:6c:01:1c:d9:c0:8f:c5:53:21:8d:
4c:24:7e:12:77:1e:3f:bf:b9:00:44:48:48:42:db:49:e3:83:
f6:d5:47:3d:6b:66:46:b1:80:44:53:72:a4:d1:03:c7:02:ba:
5e:2a:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:52 2025 by rpki-client