Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uzt6shZ6UwF6mt-kaM2zvzoPj1k.roa
File: uzt6shZ6UwF6mt-kaM2zvzoPj1k.roa (raw, json)
Hash identifier: 5uNQUHJrkC1OaR6FmlA5L3Ze1LO8gXN1RbZiKsWc/KA=
Subject key identifier: BB:3B:7A:B2:16:7A:53:01:7A:9A:DF:A4:68:CD:B3:BF:3A:0F:8F:59
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12A4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uzt6shZ6UwF6mt-kaM2zvzoPj1k.roa
Signing time: Mon 10 Feb 2025 14:15:05 +0000
ROA not before: Mon 10 Feb 2025 14:15:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 118.150.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4772 (0x12a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BB3B7AB2167A53017A9ADFA468CDB3BF3A0F8F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:df:72:e6:96:34:1b:40:8b:b3:a9:5f:22:
20:2a:23:f0:5a:6e:4a:98:34:83:20:2c:f9:01:bf:
06:53:0e:1a:58:62:a3:11:6b:1e:02:21:de:10:b2:
39:58:cb:6a:ca:e5:69:11:8e:22:50:fe:94:e0:75:
62:a1:e0:05:13:c1:06:9d:22:fa:f3:3b:51:b2:a8:
d8:76:29:0a:05:83:c1:30:e5:57:73:5e:e0:1b:4f:
a0:89:42:78:5d:17:cb:5f:b9:d7:4e:44:45:c4:62:
c4:ae:b3:55:74:dc:8d:c8:2b:c8:53:f8:f4:02:67:
26:16:16:69:62:df:96:d2:0a:11:27:4c:bb:6b:7d:
14:8b:7c:3f:aa:d9:dd:f1:e3:62:a7:17:54:5b:e7:
72:3e:cb:0b:bb:89:50:bd:e0:16:1c:db:10:f8:a7:
89:42:e9:93:0e:e9:87:04:1d:fe:36:3b:82:80:af:
9b:4a:f8:f0:64:a6:33:0f:07:d6:7e:a6:e0:3c:f5:
18:e5:84:af:5e:4f:4a:9c:b2:4d:52:f5:24:47:65:
4a:b6:7c:34:2d:d0:0b:bd:dc:0c:83:c8:ec:06:36:
57:72:22:19:64:35:a4:11:8e:39:d9:2a:cd:71:ab:
94:f4:4b:8d:6e:be:63:ad:7c:50:90:21:df:08:d4:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:7A:B2:16:7A:53:01:7A:9A:DF:A4:68:CD:B3:BF:3A:0F:8F:59
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/uzt6shZ6UwF6mt-kaM2zvzoPj1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
85:7f:e9:58:d5:4e:bf:19:57:99:d5:6a:6d:ca:51:e5:72:c4:
b7:53:f5:57:32:b4:a6:61:1e:92:e4:c9:0a:e1:1f:89:48:54:
c1:49:c3:07:4d:8d:bb:90:54:99:77:e2:a0:8a:95:c8:d4:40:
3f:86:e8:50:c0:ff:3e:66:03:42:3d:44:1d:91:3d:fb:fc:82:
56:59:03:87:9e:c7:23:32:6f:95:1a:7d:f5:2b:a3:d2:c8:56:
f6:c2:2c:12:dd:82:28:31:a2:8c:11:74:03:c6:75:dc:9b:79:
0f:e1:ea:e6:41:82:f9:7a:30:5b:9d:2a:2e:6c:aa:bd:bf:84:
0e:b2:ae:6d:97:fc:a6:16:cb:d1:6f:20:59:3b:f5:f7:29:d8:
d2:71:24:7a:d8:1d:81:58:ac:b6:27:01:c6:16:18:94:c9:fc:
be:8e:9a:09:8a:94:b2:af:63:5f:9d:a1:0e:40:50:3f:e9:19:
ba:99:87:1a:85:9d:30:c9:ca:41:e0:6e:03:7f:1e:4b:16:b5:
68:ce:e2:c5:b9:97:c3:9b:89:cb:51:64:2a:f4:8c:86:ce:cd:
73:7e:c7:56:75:34:0e:4d:0a:13:e5:57:55:8f:62:ad:69:f3:
6e:60:29:ff:49:b9:d3:5b:de:3b:72:c1:43:b5:15:a3:25:29:
a9:fc:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:25 2025 by rpki-client