Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa
File: 6M67JmSEoaeUKxvtWpD-49a5JGo.roa (raw, json)
Hash identifier: 5IVv+j9HV8IsUWqwbiGKgH1ePVhxkXF8oORytispBLM=
Subject key identifier: E8:CE:BB:26:64:84:A1:A7:94:2B:1B:ED:5A:90:FE:E3:D6:B9:24:6A
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0CBE
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa
Signing time: Mon 10 Feb 2025 14:04:32 +0000
ROA not before: Mon 10 Feb 2025 14:04:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 159.117.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Feb 10 14:04:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8CEBB266484A1A7942B1BED5A90FEE3D6B9246A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:7c:64:9d:a6:77:32:8e:db:b6:63:b8:68:
01:3a:c8:ce:13:85:ea:cd:48:23:2a:ee:fa:a5:5b:
67:88:d7:6b:4e:72:dc:43:53:5f:a1:88:92:3a:b7:
5e:c1:45:af:c6:a5:23:07:cd:55:fb:67:bf:78:27:
5b:6e:90:de:0e:a5:88:32:e7:f0:a9:4c:b0:71:c6:
f8:e0:1f:27:ad:8f:8e:40:97:f1:cf:9d:68:8e:9a:
1f:41:00:67:81:e3:d8:a6:3a:f0:83:57:3c:57:b2:
c5:02:32:bf:44:83:ef:21:c0:91:1f:7f:36:9b:71:
38:97:fb:c5:ab:17:a1:2f:30:16:d3:f9:2c:2f:eb:
e2:5f:92:42:09:7f:6f:4d:d5:62:5b:7c:04:0c:5b:
a3:9c:c0:61:1e:f1:44:9d:54:34:85:74:e1:6a:c6:
7c:a3:fe:ba:d7:5c:1f:ec:5f:c2:da:65:09:1a:cb:
96:b5:86:0d:a5:d7:54:53:ad:e4:63:63:b7:d1:74:
0a:a7:ee:7e:22:ac:ee:4f:8b:ef:a6:cb:ef:2d:8a:
5b:4b:1f:e0:43:e0:3b:a5:82:0e:f4:8f:69:44:f2:
43:43:a0:3a:63:6c:90:be:40:d4:0c:5d:3e:fc:93:
26:65:d0:f8:97:65:5e:d0:d6:0e:40:8d:0c:ad:6a:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:BB:26:64:84:A1:A7:94:2B:1B:ED:5A:90:FE:E3:D6:B9:24:6A
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/6M67JmSEoaeUKxvtWpD-49a5JGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.64.0/19
Signature Algorithm: sha256WithRSAEncryption
12:60:51:2b:08:88:ad:42:fd:b3:8f:1e:63:6a:12:49:17:59:
6d:b0:1a:50:29:5e:1b:8a:b7:6a:5c:8e:0f:2f:59:b1:4b:66:
38:c1:44:4b:77:82:12:0d:74:8c:b3:18:c2:76:6d:f5:9c:73:
8d:a9:16:07:84:86:ad:96:fb:c1:88:a9:4f:f2:38:a6:e0:29:
b3:42:4e:ab:04:c9:e4:76:fa:55:4a:83:0b:4c:5e:71:0c:09:
5d:d5:d7:4d:83:ea:a9:72:9b:ed:fa:23:56:82:de:35:9a:c4:
dd:c5:b2:8b:87:92:de:a2:48:00:fc:91:09:a8:dc:8f:5f:c2:
0a:db:a2:47:8c:5f:9e:62:70:a9:13:92:05:c7:85:99:ef:49:
69:c9:a2:ef:ee:d3:f1:41:05:36:bc:14:e5:76:c5:fc:55:b9:
a2:4a:1a:58:d4:37:79:5e:3d:a6:35:a3:3c:23:ee:47:d1:4d:
f5:0f:32:69:c1:b7:66:fc:d6:a5:42:a7:c1:40:9f:23:80:b6:
aa:05:77:56:31:e5:08:77:93:07:c1:76:2e:57:b3:6e:9e:84:
60:72:a7:cc:93:d4:d6:6f:7a:e9:ec:25:47:69:0d:7d:3f:1c:
d8:a5:f5:af:82:24:c5:bb:92:3e:0e:2e:6a:21:3f:2b:55:a2:
a2:54:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:15 2025 by rpki-client