Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MfoURx-8vJGw4RogU4xZQcYhiWg.roa
File: MfoURx-8vJGw4RogU4xZQcYhiWg.roa (raw, json)
Hash identifier: ll3JWJpnh7ywFWsAIHrTMRZQ1sCKkacAV2Ckh3BB888=
Subject key identifier: 31:FA:14:47:1F:BC:BC:91:B0:E1:1A:20:53:8C:59:41:C6:21:89:68
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1250
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MfoURx-8vJGw4RogU4xZQcYhiWg.roa
Signing time: Mon 10 Feb 2025 14:14:42 +0000
ROA not before: Mon 10 Feb 2025 14:14:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10085
IP address blocks: 150.117.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4688 (0x1250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=31FA14471FBCBC91B0E11A20538C5941C6218968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:88:68:4e:14:43:ac:52:d5:db:bf:96:40:
1b:44:14:3e:1d:3a:0c:dc:e9:5f:b9:4b:9a:9a:e2:
0f:b5:af:b5:cf:24:e0:47:03:7f:3b:9e:2b:56:12:
e6:b7:0d:8d:72:e4:72:cc:75:9f:1c:d7:13:be:c4:
3e:2c:9c:7f:8f:a8:f9:49:6e:eb:63:5c:e2:ff:71:
4c:bd:f8:76:f5:f0:3c:7f:c5:0c:fc:2b:e0:e6:31:
2f:40:1b:0f:6b:d4:70:5a:0f:f5:4e:e7:91:c7:86:
b3:a3:35:19:96:11:75:c4:61:ff:58:50:33:b9:ac:
6f:09:81:62:27:9e:72:0f:f8:1e:3d:c6:b1:81:dc:
fd:ee:71:d4:d4:41:6a:1f:53:7a:f3:dc:49:79:38:
05:17:1a:59:f8:83:ed:45:af:d1:e3:69:23:0b:2f:
8c:45:7f:ef:40:1f:34:09:0e:bc:94:e6:98:3f:16:
b2:7a:e6:79:82:c6:f3:03:f6:0d:13:ce:a8:e9:9f:
00:6c:74:5e:06:22:33:ab:f0:6b:2a:59:a4:6a:16:
16:5b:e8:a2:1f:58:6d:f9:b8:e8:6d:b9:be:5f:40:
d4:d6:d9:e5:9f:84:ca:f0:85:a5:1b:28:71:bc:49:
da:49:fb:c7:58:c8:88:a8:80:03:69:07:4b:5f:ce:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:14:47:1F:BC:BC:91:B0:E1:1A:20:53:8C:59:41:C6:21:89:68
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/MfoURx-8vJGw4RogU4xZQcYhiWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.104.0/21
Signature Algorithm: sha256WithRSAEncryption
40:7f:8f:16:b9:5c:fb:0d:12:c6:e2:e7:28:08:b8:2f:cc:4f:
be:44:7e:64:1f:09:48:eb:c3:93:4a:94:22:df:c9:ff:28:d5:
e3:04:70:a9:62:0a:15:c0:b3:b9:f7:d8:01:5a:54:37:bf:5a:
0b:37:87:e8:93:af:71:62:b5:f0:ab:02:f7:64:e8:cd:1b:d7:
4b:89:12:2e:4d:70:81:2c:79:55:f6:fd:7f:8e:a7:a9:23:9a:
5e:a8:a6:46:a8:a4:64:81:ab:b5:e9:11:6b:c5:1e:47:d9:09:
c5:69:6e:00:95:15:d0:e9:97:08:a4:e3:8f:56:1f:12:8b:71:
41:00:2a:c2:0d:a1:10:74:fc:95:2c:5c:7d:a2:02:7f:32:a2:
a6:66:fe:aa:cc:2b:87:69:90:59:c8:f5:28:6d:23:28:ed:5d:
1a:55:ae:f1:a2:fa:7e:ee:d6:73:f2:fa:ce:1f:c5:50:e1:fa:
b5:ec:71:43:83:08:9d:d3:a2:9f:6b:21:40:db:3c:01:f9:d0:
eb:2e:2c:25:e7:70:6d:a3:eb:3c:33:9a:e2:1f:de:49:2c:5e:
36:b0:1c:8f:63:6d:99:09:a9:6a:00:b7:5d:2f:7a:7d:d2:17:
86:02:19:8e:6d:b5:93:8d:9b:ab:0d:29:24:91:0f:fa:40:01:
c0:bc:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:16 2025 by rpki-client