Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa
File: SrabNYJZ8SpTLaOcTX0XMQj774k.roa (raw, json)
Hash identifier: 1gmTgmbrhLG97sh3207UoySpJJZZ9V1hQr2qHZwDCec=
Subject key identifier: 4A:B6:9B:35:82:59:F1:2A:53:2D:A3:9C:4D:7D:17:31:08:FB:EF:89
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 116D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa
Signing time: Mon 26 Aug 2024 05:10:46 +0000
ROA not before: Mon 26 Aug 2024 05:10:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63199
IP address blocks: 150.116.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4461 (0x116d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:46 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4AB69B358259F12A532DA39C4D7D173108FBEF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:ee:31:94:3a:0f:6e:34:a6:fc:e9:4f:5f:
06:93:33:ba:6e:bb:fd:b0:c1:4e:02:f8:19:6a:6e:
f2:c9:85:19:54:ce:89:13:f1:12:c2:6d:9c:c5:9e:
3b:25:91:23:86:90:d3:36:ff:cb:8d:82:c0:56:43:
7f:00:1b:2a:09:ce:60:f9:e3:b4:d5:d7:48:09:d4:
12:03:1f:b8:81:9c:d4:5d:f2:8f:f8:22:e3:36:b2:
6f:e9:67:65:4c:f9:99:0a:9e:2f:bd:30:62:5d:8c:
40:ab:d9:08:ca:2a:6d:8b:41:ea:83:b4:84:6e:af:
ff:5c:58:13:00:12:a2:8b:29:1f:11:5a:38:22:13:
97:18:70:a7:84:0c:98:1b:fe:e2:2a:e4:c1:6d:16:
a6:57:41:be:3b:b2:3c:42:3f:e9:fe:dd:92:ea:91:
60:47:d8:7e:b5:bc:5f:5c:e8:c7:68:c7:80:eb:4d:
b9:15:85:3d:55:88:f9:32:60:4c:1e:4d:67:74:e2:
da:68:82:d2:83:ab:d9:28:69:f7:cd:3c:fd:6d:f3:
fd:15:5f:21:55:ea:20:cd:1a:78:d5:88:aa:28:9f:
12:cc:f2:b8:0d:41:59:3c:9d:a6:fa:7b:77:b2:bf:
29:ce:06:82:41:af:ed:a1:75:35:45:5b:2d:9d:e7:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:9B:35:82:59:F1:2A:53:2D:A3:9C:4D:7D:17:31:08:FB:EF:89
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/SrabNYJZ8SpTLaOcTX0XMQj774k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:4b:cf:24:f4:48:86:f2:2b:22:62:dc:2f:13:a9:46:03:7c:
33:e0:0b:9e:db:22:83:2c:3e:94:ed:d1:0b:45:fe:1c:2d:a5:
4a:bc:de:68:7f:11:0d:a7:8d:a5:1f:21:de:68:97:a2:da:f8:
25:98:84:6e:22:ed:38:5a:5f:83:09:84:c6:a5:f5:fc:42:b9:
01:65:9d:db:71:13:9f:b8:2b:1f:57:76:28:7c:d4:ad:4e:e7:
5c:1b:9b:c6:e3:e3:01:7f:1f:96:ae:8d:4b:cd:90:a5:44:ee:
9e:32:3b:e7:df:94:6d:05:d3:e2:89:29:6e:be:af:bd:60:d1:
7d:02:af:28:63:b9:50:ee:2a:f4:5a:00:5b:f7:2b:4f:a6:ed:
36:d6:4f:c7:65:37:d8:d1:e3:7c:36:9f:f4:74:ee:1a:cd:e8:
fe:72:9f:de:b0:ad:b9:e4:b0:4d:85:f5:ab:b3:31:ff:25:3a:
17:de:51:04:9c:73:e5:d7:09:b6:98:57:a6:c7:8b:09:3f:a2:
39:91:da:60:ab:2b:71:2e:a8:37:5e:3d:ed:2c:91:15:bc:07:
aa:56:3a:ec:09:23:29:17:45:a2:aa:e4:cc:64:ce:df:34:9c:
d4:0d:59:cf:48:54:88:19:40:27:da:2b:12:0d:8f:d7:e1:4a:
ec:e9:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:46:14 2025 by rpki-client