Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa
File: fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa (raw, json)
Hash identifier: BtzwO6fpfzr5m+l+gyK4aphGWnwoT+oeog3zOvmzUpI=
Subject key identifier: 7D:A8:7D:0D:4C:F6:75:7B:21:FD:3E:21:F2:F5:4B:99:0E:67:16:70
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1294
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa
Signing time: Mon 10 Feb 2025 14:15:01 +0000
ROA not before: Mon 10 Feb 2025 14:15:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131600
IP address blocks: 150.117.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4756 (0x1294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:01 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7DA87D0D4CF6757B21FD3E21F2F54B990E671670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:14:5f:2a:c9:8e:92:e2:46:52:07:3a:93:
b4:ff:7b:cd:4f:ba:30:a5:73:2c:cf:8a:2c:2c:c5:
dd:7a:4f:78:11:4f:35:6e:23:69:6c:ac:1b:55:53:
cd:46:ed:a3:a9:61:9e:f8:d3:bb:ce:e2:7b:2b:2a:
76:61:e7:a8:db:85:a0:12:5c:0a:9b:f2:f3:33:c0:
6d:b0:32:8f:be:f5:7e:4f:cb:ed:25:a7:fe:d9:0d:
e2:08:55:01:ef:1d:73:37:80:1d:51:90:bb:89:38:
ad:13:47:2c:ad:bc:34:01:82:77:4e:ec:4f:db:de:
00:21:1f:c1:9d:af:b2:7f:97:78:14:ae:bd:09:b8:
5d:5e:d4:0d:10:bd:10:9c:80:4b:1f:26:c2:46:94:
f5:5c:1d:c8:0a:4b:b9:63:d2:f3:55:bf:f8:52:77:
22:bc:b4:67:2d:f5:b6:35:05:b5:b9:2f:63:41:3b:
96:2e:74:bd:58:d6:1b:68:89:72:81:06:a1:23:80:
94:e1:77:e4:91:8d:e0:19:d2:30:1c:16:5b:d0:86:
4d:63:14:46:d3:9e:39:8c:ef:30:e6:36:96:b1:31:
43:26:88:50:08:75:c5:c0:d0:c7:c2:03:4b:a4:73:
33:51:95:c3:1d:f0:01:8b:16:ea:02:3d:fc:cf:62:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:7D:0D:4C:F6:75:7B:21:FD:3E:21:F2:F5:4B:99:0E:67:16:70
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/fah9DUz2dXsh_T4h8vVLmQ5nFnA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.120.0/21
Signature Algorithm: sha256WithRSAEncryption
95:68:1c:3a:42:9a:69:e6:24:2d:f7:72:ef:22:c0:88:0e:1b:
e2:08:d3:c9:43:0a:ed:38:7d:64:55:14:dc:72:85:81:e8:a2:
57:60:44:0b:25:7a:0e:66:c0:34:f9:44:d6:29:a8:e2:f4:9c:
b8:56:88:69:f6:b1:21:c0:98:b6:28:36:9c:b9:01:45:80:76:
bd:81:6c:f8:1d:64:f1:12:92:80:15:66:46:4d:d0:54:91:47:
57:47:e7:4b:93:ec:e6:d4:a9:0b:73:13:6e:e6:9f:44:6f:97:
a8:5a:c2:6c:97:2d:2d:8d:be:06:6b:f4:71:b4:1e:08:f4:8a:
64:31:b4:29:56:fc:47:35:91:a7:de:33:3d:26:0a:37:36:07:
52:eb:58:04:bd:90:0d:a7:f0:01:fd:26:1a:8c:df:f5:cf:9b:
5d:dc:2d:41:be:ed:ab:b5:a9:43:51:10:87:e0:3b:ea:14:03:
c0:cd:23:6f:30:84:f5:2a:99:d3:6b:a0:63:a0:b8:95:05:d6:
e6:54:29:31:78:3f:bb:55:b8:58:9f:64:c1:d6:66:0f:b0:c9:
ac:45:84:53:ba:45:94:76:4a:be:29:3f:8a:82:7d:11:96:41:
4b:59:5b:ab:af:4f:63:4d:7b:c2:36:66:d6:25:65:44:7d:96:
22:e3:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:57:04 2025 by rpki-client