Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa
File: xfFrPWKHExghKa8tEQc6j8nxloA.roa (raw, json)
Hash identifier: rJmJWqBXRoZbhmxcwqEEREGX/DjluHAw6uhsjUjVUtE=
Subject key identifier: C5:F1:6B:3D:62:87:13:18:21:29:AF:2D:11:07:3A:8F:C9:F1:96:80
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 12C5
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa
Signing time: Mon 10 Feb 2025 14:15:13 +0000
ROA not before: Mon 10 Feb 2025 14:15:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 113.21.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4805 (0x12c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C5F16B3D628713182129AF2D11073A8FC9F19680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:03:4c:3d:33:72:21:99:15:40:36:c7:6c:
bd:4a:3a:31:44:15:35:89:51:dd:69:80:06:23:30:
5b:76:39:b1:e0:a6:38:a2:f5:20:91:3b:79:d1:44:
e9:89:5b:b3:c8:7d:07:69:4d:7c:83:8d:dd:38:8f:
3d:05:64:8d:ea:2b:ef:d7:c7:7a:e3:d4:da:34:e0:
ab:01:57:52:83:bf:cc:19:98:1a:42:72:6c:77:07:
8d:62:fa:1e:4a:ec:ff:f0:8f:71:33:0f:12:70:26:
4c:fa:6b:cd:e7:49:93:e5:60:c3:85:ee:b7:ae:b9:
a3:ef:fb:eb:56:14:55:9c:3c:50:f4:60:74:45:c9:
77:17:a4:c8:15:bf:7c:3b:73:87:7c:94:7c:4b:c5:
76:6d:0b:1c:f3:81:6d:71:0b:78:c3:c1:4d:59:54:
fd:dd:59:57:1a:eb:81:cc:e7:ff:a3:82:88:c7:c8:
23:bc:e7:d0:3d:c9:bc:a3:86:08:02:bb:f7:d1:88:
37:91:e6:46:44:9c:ff:49:95:fa:fb:a2:58:76:99:
6f:97:70:12:f2:5e:12:dd:54:46:7e:08:76:d1:19:
40:9a:79:1b:46:4f:f8:32:0e:89:03:f2:47:2c:fa:
5a:f4:bb:df:fa:16:bd:91:ac:16:bd:73:9b:c0:f1:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:6B:3D:62:87:13:18:21:29:AF:2D:11:07:3A:8F:C9:F1:96:80
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/xfFrPWKHExghKa8tEQc6j8nxloA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.90.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8d:44:4e:49:92:67:92:df:a9:4c:92:93:33:65:e3:38:5e:
cc:8d:52:dd:cd:e2:56:df:ca:7c:3c:2b:b9:9c:f6:29:d8:37:
72:2e:5a:f0:4e:72:3c:33:e7:9b:88:a7:05:87:42:73:f7:a4:
0c:b9:43:6a:bd:e8:a7:82:ef:ae:ad:fd:6a:a8:b5:2e:78:38:
8e:6f:3a:16:cb:d2:8f:8d:e5:2b:af:dd:95:68:f4:20:cb:09:
9a:e2:2f:f5:c7:18:ee:ef:2c:ae:f6:44:2e:cc:64:d4:f0:50:
63:a8:c5:da:4b:a1:de:3b:3b:b6:55:83:43:c7:8a:db:1d:c5:
e8:1d:6a:cd:0f:3a:e6:85:b2:a3:e4:77:a4:fe:61:4a:4f:73:
29:d2:37:97:95:9f:bb:9f:69:bc:8e:42:44:cc:e4:de:2f:f1:
55:21:bd:54:ab:ba:87:23:5b:db:eb:cf:51:f5:a8:97:77:0a:
b1:18:b9:ec:28:08:6e:15:bd:b4:50:bf:3a:03:20:1d:4f:16:
bc:5e:89:e7:86:dc:c9:2e:20:db:ad:1e:74:c6:b7:7c:b9:7a:
48:d3:e9:5a:6b:ba:d7:60:c2:74:77:cb:ce:7c:7a:e2:97:b6:
c4:33:8f:3d:71:4e:b4:fe:0e:db:93:db:48:c0:a9:57:e8:67:
79:7c:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:12 2025 by rpki-client