Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/sw3uJDINp6_QP5DxVB1tzRbdx9A.roa
File: sw3uJDINp6_QP5DxVB1tzRbdx9A.roa (raw, json)
Hash identifier: ubK8v0aSMlzg7ARZCK9Br0M3NAOHJGgzGnSdrhG4/vI=
Subject key identifier: B3:0D:EE:24:32:0D:A7:AF:D0:3F:90:F1:54:1D:6D:CD:16:DD:C7:D0
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E66
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/sw3uJDINp6_QP5DxVB1tzRbdx9A.roa
Signing time: Mon 10 Feb 2025 14:03:29 +0000
ROA not before: Mon 10 Feb 2025 14:03:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 61.57.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B30DEE24320DA7AFD03F90F1541D6DCD16DDC7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:de:58:92:63:1a:71:9c:e4:ac:8d:0d:a4:
c2:e7:65:eb:f6:54:ca:6a:b8:75:f6:37:f9:9b:5a:
e8:5a:72:63:f3:77:f0:41:0b:47:33:d6:bb:85:35:
b7:4b:ca:a3:6f:95:1d:4b:85:89:d0:76:df:03:5a:
70:cc:99:f5:91:7d:17:4d:cd:61:af:e3:3d:90:70:
c6:38:86:a4:a2:2c:8c:2f:ef:c6:af:ce:c3:50:81:
3a:6b:55:25:81:ce:56:32:af:89:05:1c:87:4b:19:
f5:a8:9e:af:6a:28:ae:f3:8b:de:03:92:99:e6:45:
32:53:02:3b:f6:13:23:87:82:bd:d1:a0:84:e8:4a:
f2:99:ea:7a:3c:f0:b9:1c:52:b0:57:f1:7a:60:09:
0c:d3:76:af:c4:84:96:72:ff:13:c5:55:47:21:27:
6e:99:6d:ca:11:5a:df:fc:fe:da:74:3b:b7:31:6a:
1b:c3:50:e3:a7:a5:18:bf:5e:5f:9a:d4:c5:83:68:
c3:f8:ed:0c:46:56:04:39:ad:54:87:de:dc:72:41:
f3:f5:cf:3f:04:b3:79:56:09:22:9d:37:74:91:18:
d7:1f:df:bb:45:c7:f4:76:03:b5:ed:32:38:f1:92:
6c:9a:64:dd:74:c6:6f:2f:f9:5d:68:bc:36:76:66:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0D:EE:24:32:0D:A7:AF:D0:3F:90:F1:54:1D:6D:CD:16:DD:C7:D0
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/sw3uJDINp6_QP5DxVB1tzRbdx9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:33:58:e9:bf:45:f6:87:58:c8:57:91:5b:b5:fe:01:24:34:
ce:2c:72:9c:ec:95:29:de:bf:19:5c:d7:5e:a6:c0:6a:bd:b4:
bc:2a:e8:8a:f5:9e:4b:40:74:b6:76:17:8c:c5:c3:1d:07:27:
f2:59:fc:a0:50:4f:42:a4:7c:70:0f:24:73:2c:35:ad:42:fd:
f7:cd:40:7c:79:85:48:d2:06:bc:81:e2:61:ab:5e:63:e0:82:
58:ed:63:f3:14:4b:b5:48:c2:54:b3:08:58:8d:cd:f9:1d:1e:
d4:cb:3d:2f:e2:54:e0:62:5c:ad:ba:52:1e:79:a6:aa:65:b4:
88:c4:52:83:cd:61:e3:b0:41:01:94:09:0c:d2:35:4d:b4:ef:
0b:46:98:bc:64:5d:57:3b:5a:ff:2a:12:a0:87:22:e8:c9:74:
13:68:64:a6:eb:b5:2f:6b:c7:a3:bb:93:05:2e:70:c0:01:be:
e7:4a:c7:23:a8:ff:9f:02:d3:65:eb:53:d2:5f:2a:a3:9e:aa:
2c:d7:10:41:da:f9:0b:16:15:b9:df:9a:7d:21:e5:70:17:14:
10:e4:ae:fd:e6:33:43:2e:01:8a:81:b7:17:7d:55:f6:a0:65:
9e:41:12:85:2f:0d:1a:8a:21:e6:65:38:1c:61:1c:d3:63:23:
0d:34:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:12 2025 by rpki-client