Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa
File: 9u--09ipu35tjCB0QgLyuz0Ox_M.roa (raw, json)
Hash identifier: HwMu4pjhe9rwsW3rZgUDd9IB3Vz6jJTYVyGAxIGJdd8=
Subject key identifier: F6:EF:BE:D3:D8:A9:BB:7E:6D:8C:20:74:42:02:F2:BB:3D:0E:C7:F3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12AE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa
Signing time: Mon 10 Feb 2025 14:15:08 +0000
ROA not before: Mon 10 Feb 2025 14:15:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 150150
IP address blocks: 150.116.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4782 (0x12ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F6EFBED3D8A9BB7E6D8C20744202F2BB3D0EC7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:ff:30:a5:f9:6e:9f:0e:ef:ca:61:22:a9:
75:88:7a:93:6d:db:b8:a2:f6:3d:1a:f7:e2:ff:4d:
70:08:f6:d0:12:0f:73:e3:13:55:c4:73:3b:16:0c:
45:fb:a3:dd:d2:da:c8:c7:b2:2d:14:67:f2:8b:51:
71:2f:2d:c3:18:20:5b:8f:d1:95:8b:5a:ce:ec:9b:
72:6f:41:cc:c9:db:af:d2:0c:3f:47:c5:b2:e7:ba:
42:e8:e0:d2:8d:f2:c6:d2:81:3a:0d:24:09:ab:53:
26:a0:a9:19:8c:bc:90:48:47:ab:c2:93:75:07:3c:
ea:22:20:cb:52:58:a6:36:bf:8f:90:79:89:76:48:
86:5b:93:26:d3:5b:f4:9b:10:f4:dd:6f:7c:eb:6a:
f0:47:ff:90:40:07:18:7c:db:2e:46:ad:03:02:39:
c1:a2:e2:e6:67:b8:f8:ac:aa:50:9f:ac:c8:ea:02:
4c:ee:01:d9:18:0c:3b:73:e3:6d:9c:a0:3a:57:9a:
38:ae:93:46:07:0e:db:ed:a1:e9:b7:4b:ce:bf:d1:
9c:f9:aa:de:e6:50:9d:6c:88:67:c4:a5:3e:5c:32:
7a:0e:ee:52:4b:51:e9:b0:5f:ac:06:b5:e2:17:bf:
8f:4c:c0:11:8b:1f:16:e7:3b:32:67:10:02:b0:72:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EF:BE:D3:D8:A9:BB:7E:6D:8C:20:74:42:02:F2:BB:3D:0E:C7:F3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9u--09ipu35tjCB0QgLyuz0Ox_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.11.0/24
Signature Algorithm: sha256WithRSAEncryption
45:87:ee:f7:73:bb:e1:91:3f:c4:98:3d:c0:72:28:fb:7d:f9:
4e:71:27:04:92:cd:e3:bf:e7:c7:64:fa:0e:3a:b4:9c:29:bd:
83:40:0c:62:d4:d4:ec:b6:c5:11:3a:e5:b2:0d:e8:be:a1:68:
4d:99:b7:71:2b:48:ab:9c:ca:2b:8f:c6:df:c5:14:d6:45:3b:
ab:d3:db:7c:33:8a:9f:fd:b1:79:f6:80:0b:d7:d5:7a:42:e2:
70:04:a0:5d:42:43:3f:c3:b4:36:00:e3:38:e1:4a:21:97:e1:
25:c0:c0:e8:6a:9e:d5:f8:49:9e:4f:c4:99:fd:51:94:dd:a1:
76:5c:ad:66:4d:c9:f3:cd:c1:c6:c1:09:48:2a:7a:6b:69:95:
37:35:ed:3c:6d:56:76:79:5c:64:c8:86:12:77:c6:f4:bc:51:
37:c8:8b:30:d0:6d:d8:02:d4:2c:43:1c:c5:8e:26:a0:8e:64:
75:49:76:85:ab:91:26:ff:bc:4a:fc:85:2a:a5:f7:50:9c:17:
1c:7a:b8:aa:2a:0d:13:6f:13:a5:23:14:ad:64:c9:44:1d:b6:
06:a9:3b:7a:28:27:7f:7d:b9:7f:15:ba:39:81:19:45:32:06:
69:ed:22:c3:12:88:7f:b5:1b:8e:cf:1d:48:84:b4:de:14:07:
0e:f9:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:28 2025 by rpki-client