Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa
File: cmGn4-wZjUiYCgQbV0K0capbpz4.roa (raw, json)
Hash identifier: u9PXfbu7+qAeqO1u5LbTbXj0VTokLUrfbG5l+utfQ4o=
Subject key identifier: 72:61:A7:E3:EC:19:8D:48:98:0A:04:1B:57:42:B4:71:AA:5B:A7:3E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12BB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa
Signing time: Mon 10 Feb 2025 14:15:10 +0000
ROA not before: Mon 10 Feb 2025 14:15:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 119.31.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4795 (0x12bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7261A7E3EC198D48980A041B5742B471AA5BA73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:78:cd:52:5b:bb:53:db:6b:fb:3a:f2:1a:17:
a3:f4:b1:61:27:20:3b:a7:a1:fe:ed:0f:32:33:87:
dc:89:d3:ca:7d:40:15:f6:4b:7b:1a:5f:bf:44:0b:
dd:bb:a4:68:9d:75:7b:ca:23:21:31:56:7e:ff:ef:
51:f6:ba:a2:92:4c:5c:3a:34:79:9c:9a:c3:7b:6b:
15:40:ea:51:d6:0c:35:5b:94:17:ee:99:d7:01:7b:
5d:a0:f8:2e:a9:ef:8b:b9:5f:02:7f:16:69:e6:bb:
ec:c5:e5:e6:66:8d:c5:3c:28:6a:12:07:6c:c6:06:
21:73:0d:b6:d6:48:73:9c:f7:5c:aa:8a:49:5b:12:
65:61:a4:6e:7c:96:c1:1d:e6:dc:e8:07:8d:5e:c1:
8c:01:8b:ca:1e:cb:7c:b6:e2:2f:9b:7d:da:7b:db:
9c:da:88:b9:f5:6d:aa:73:6a:aa:c8:01:53:af:cd:
b9:36:97:b0:18:55:c2:07:7f:67:7f:8d:5e:2f:d4:
9e:fa:88:8c:d0:62:61:45:ed:75:1c:4f:9c:3e:78:
1a:b4:1d:69:51:35:f1:0a:73:0c:07:aa:7d:45:47:
55:fa:b0:f6:d4:f3:2e:db:67:5a:f6:0e:fd:b5:7c:
f7:24:5b:38:8f:23:53:96:f5:5c:b7:9b:95:b2:2a:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:A7:E3:EC:19:8D:48:98:0A:04:1B:57:42:B4:71:AA:5B:A7:3E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cmGn4-wZjUiYCgQbV0K0capbpz4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.31.176.0/20
Signature Algorithm: sha256WithRSAEncryption
38:5f:c4:38:1a:e5:9d:a2:97:4d:0b:4d:f3:d0:aa:3c:e1:0d:
b1:d1:37:15:33:e6:4d:33:f5:96:b4:9e:82:6d:6d:3d:aa:bd:
cb:65:5a:16:a6:5e:3a:3e:22:71:97:0a:74:53:6c:6f:5c:c8:
09:b4:1c:c1:73:de:4d:5a:f1:e9:a8:74:64:2e:f5:cc:5f:25:
c4:09:1c:58:19:38:6c:ba:14:a6:77:40:b3:86:fd:b4:12:c7:
95:c5:dc:d7:bd:f3:d4:12:12:f8:06:bc:95:33:ab:f1:d2:2d:
f8:99:8e:fd:25:52:26:71:43:8e:d0:2a:7b:f7:27:01:74:54:
b2:8e:9a:7c:31:a2:aa:98:57:59:48:ba:05:10:a8:ac:3f:c1:
2b:90:80:2d:49:74:45:94:1c:75:5d:e2:b2:9b:25:d5:66:66:
6c:6f:fd:52:86:a5:5b:43:30:f7:7c:0b:4a:04:81:e1:3b:ff:
cd:13:da:15:2b:27:cd:ec:0e:81:d2:03:5f:5c:7d:94:80:c6:
c0:7d:f4:40:33:a5:03:4d:4d:29:7f:cc:31:2a:69:57:de:0b:
31:e5:a2:85:39:08:1d:64:06:78:84:c6:90:b1:ec:e8:60:87:
30:1f:0a:07:34:f3:62:c9:e6:19:aa:4a:38:d6:61:31:0a:bf:
20:f0:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:21 2025 by rpki-client