Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa
File: YU0zH0RHDMopnnifn0sG4s9PieU.roa (raw, json)
Hash identifier: pgbY+sbRsut/SS8m8b6xk9YCaS9++CHIq2TM5/HrSCI=
Subject key identifier: 61:4D:33:1F:44:47:0C:CA:29:9E:78:9F:9F:4B:06:E2:CF:4F:89:E5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11B8
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa
Signing time: Mon 26 Aug 2024 05:11:04 +0000
ROA not before: Mon 26 Aug 2024 05:11:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131607
IP address blocks: 150.117.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:04 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=614D331F44470CCA299E789F9F4B06E2CF4F89E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:f6:33:cd:a0:06:a4:da:88:fa:8c:74:79:
74:01:d6:92:5c:60:f8:be:88:6b:59:dd:b0:84:27:
08:dd:cc:50:28:ae:03:2a:ea:0e:aa:1c:05:88:9a:
dd:b6:25:32:b2:e2:87:20:71:69:95:80:2c:30:8f:
a4:93:56:59:90:d0:19:f6:e8:2a:b4:8f:82:e4:6c:
7b:1c:94:fe:94:7c:5d:33:3e:a1:c2:59:b8:08:d3:
95:7d:8f:ef:77:bd:b0:70:f4:0d:8e:76:05:1b:49:
6b:c8:27:ce:84:f1:2c:8f:1c:63:df:ab:0b:d1:1e:
26:16:15:3e:1f:af:e7:38:c5:13:64:bd:fa:fa:12:
b8:71:b2:30:4c:96:ee:e6:95:71:e8:b9:32:5e:b4:
98:cd:e1:7e:a6:7c:1d:43:fa:04:4e:dc:6b:92:c0:
6f:79:e7:35:d8:89:66:1c:3a:46:14:63:d6:86:bc:
00:60:61:4c:1e:01:8b:87:8f:0b:55:be:88:b3:bf:
20:91:d1:6b:c7:d5:f7:c7:ad:32:82:bf:93:1a:26:
e1:02:da:07:f8:8f:c6:69:5a:75:44:25:29:db:cc:
38:78:a8:83:a0:0e:9b:13:37:7a:ea:35:35:2d:3a:
7f:80:af:82:56:f7:d0:40:e5:01:90:5b:5a:85:a5:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4D:33:1F:44:47:0C:CA:29:9E:78:9F:9F:4B:06:E2:CF:4F:89:E5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/YU0zH0RHDMopnnifn0sG4s9PieU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.224.0/21
Signature Algorithm: sha256WithRSAEncryption
38:db:60:33:57:6d:b9:f5:61:47:a1:11:38:83:1c:72:90:24:
91:c4:19:b4:b6:ff:79:55:b9:6d:93:df:64:98:96:94:95:29:
f0:27:78:be:e1:56:69:04:0c:3d:12:6c:7d:0d:a2:fe:64:bb:
31:46:44:f1:46:f9:12:2f:0d:9f:1c:ae:b1:f4:6f:02:07:3a:
7c:8d:55:92:69:ac:3c:bd:57:ec:9f:60:ba:0a:79:dd:1a:e5:
96:9d:7d:ba:95:aa:12:b5:2c:ca:90:ce:9d:b9:60:fe:28:f5:
90:00:f1:67:d9:c1:03:21:64:5b:b3:ef:d8:e5:e0:ae:3b:d3:
98:f4:e6:3f:ba:26:25:0e:40:92:7a:9a:9e:71:95:7b:4e:8d:
7e:da:9a:72:f8:29:2e:d2:6f:cf:0c:fc:ab:41:a8:bd:d2:62:
35:70:60:09:77:cc:f7:00:89:05:90:8b:f2:35:44:67:19:c1:
9e:3e:6e:d6:f2:ea:83:ea:c0:25:c1:0c:20:8b:e9:e4:22:51:
a9:00:a2:eb:62:25:38:e5:8b:8e:e1:e7:d4:b3:9e:f5:b1:e7:
51:78:ee:1f:07:eb:2e:0c:0e:c8:60:6e:cd:8c:56:33:19:36:
7d:ed:ed:90:31:1e:68:9e:43:d4:65:9e:31:23:8b:4c:c5:fa:
7b:7a:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:39:49 2025 by rpki-client