Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa
File: XAqy7niA1rMyTVMe35XevX6d0yM.roa (raw, json)
Hash identifier: /LmHX7enMEv9j9S+8GK6HBhbd0pSFJR+s5gqEhcptDA=
Subject key identifier: 5C:0A:B2:EE:78:80:D6:B3:32:4D:53:1E:DF:95:DE:BD:7E:9D:D3:23
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 119A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa
Signing time: Mon 26 Aug 2024 05:10:57 +0000
ROA not before: Mon 26 Aug 2024 05:10:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4506 (0x119a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:10:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C0AB2EE7880D6B3324D531EDF95DEBD7E9DD323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:64:82:53:31:29:fa:b1:d6:47:e6:90:16:
e0:a0:dd:2c:ce:8f:89:c1:05:fc:71:47:c1:ff:51:
23:6a:c3:67:09:44:ec:44:e2:b3:9f:5e:5d:57:bf:
64:0d:24:7a:60:bb:98:36:9c:9d:35:e5:da:e0:50:
cc:2e:9f:22:45:c3:72:09:71:e1:c3:f0:a7:9d:3c:
0d:af:9e:2e:0c:f7:05:7a:d6:36:41:db:5d:e4:86:
50:5b:25:83:c2:19:0a:46:43:93:17:97:cf:a2:e2:
6f:96:36:b6:27:15:fe:20:89:27:a6:e8:5d:6c:ac:
1f:a2:4a:64:e6:41:07:60:ec:94:3e:48:d9:db:db:
fc:11:1a:44:61:dd:82:1e:c6:b7:00:89:5a:c2:55:
ab:ea:14:05:aa:c0:eb:b1:25:13:4e:b9:9a:d0:e2:
fa:52:3c:db:50:33:d0:5a:26:12:6d:3a:3a:e0:a6:
f5:59:04:b4:a9:80:b3:88:b9:3d:dc:7a:89:45:05:
fd:0f:7d:23:9e:6e:c0:ca:e6:7a:8c:49:5e:c2:3b:
11:6f:b3:28:73:5b:db:aa:83:3f:a7:57:6a:f9:bb:
72:79:84:63:2b:9d:15:b9:59:d0:1f:af:2c:3e:84:
47:ed:f9:bf:1b:01:04:14:b5:28:e6:ee:8f:3a:e6:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:B2:EE:78:80:D6:B3:32:4D:53:1E:DF:95:DE:BD:7E:9D:D3:23
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XAqy7niA1rMyTVMe35XevX6d0yM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:3e:2b:05:4b:3e:ce:15:ed:af:c4:a9:fb:b9:aa:02:8e:db:
25:9c:93:d1:a0:a8:62:2b:1a:5c:19:75:ad:e1:c2:6e:92:fc:
27:18:cf:da:ba:e1:f5:63:16:14:58:f1:05:08:ed:1d:3b:cf:
8b:f0:f9:f9:a6:e7:bd:da:da:49:96:ae:5c:d5:38:00:b8:3d:
d7:84:d3:c0:30:a7:c3:eb:6e:52:12:c8:30:71:22:26:6b:59:
a4:bb:05:9c:13:2f:dd:68:43:56:ba:f9:05:42:0e:a0:2f:ea:
27:c9:21:a3:47:a2:3b:d8:f4:60:79:2a:6c:ff:f9:24:c6:dc:
8f:da:27:c9:48:64:ac:c5:2d:ab:04:34:b9:d8:22:a0:ae:45:
93:b1:33:7a:c7:8b:58:b9:75:55:b0:d4:95:95:c3:1e:35:8e:
8e:b5:d2:c9:68:20:ff:ff:1e:9b:96:0f:7d:10:67:15:96:23:
de:1b:ec:d1:46:42:bd:a5:7e:43:67:88:63:4d:4f:a9:da:d5:
a6:2b:dd:9f:38:ba:da:58:fe:1d:2f:5c:cf:ea:12:1d:94:3e:
75:c3:83:62:4e:92:af:9b:e3:b6:b4:2c:d2:ad:77:d4:12:43:
41:02:bc:0a:04:1e:96:d3:f6:ee:85:fe:e3:ac:0c:68:21:48:
4f:c3:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:49:03 2025 by rpki-client