Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa
File: l9O-eISc_dECMF9e43SWxmq4AEg.roa (raw, json)
Hash identifier: Y1pbsqjJNWxpuCH/R9FBJN0tRoSqkpUmOcFlxjK86zA=
Subject key identifier: 97:D3:BE:78:84:9C:FD:D1:02:30:5F:5E:E3:74:96:C6:6A:B8:00:48
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0D23
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa
Signing time: Mon 10 Feb 2025 14:04:36 +0000
ROA not before: Mon 10 Feb 2025 14:04:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18046
IP address blocks: 61.65.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 10 14:04:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=97D3BE78849CFDD102305F5EE37496C66AB80048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:d3:de:f2:cb:bd:f5:62:a8:ee:9f:6e:f2:
7c:bb:6c:5b:9b:b0:e9:72:39:81:aa:c4:91:d4:7e:
79:f9:ff:89:9a:68:06:ea:f8:cd:06:27:6a:84:0c:
1f:4e:17:36:27:f6:44:6b:41:be:bd:c3:02:5c:48:
6f:aa:b8:e7:e0:e2:2d:2d:a4:02:1c:24:36:6a:c6:
b1:a8:19:aa:63:6a:49:05:68:f7:f3:88:8a:6e:51:
ac:05:89:46:55:59:11:5b:bc:08:ab:40:29:35:4d:
fb:2a:9a:8a:73:c9:5b:04:9e:28:3f:5f:0e:33:25:
c6:b7:9c:fa:63:ad:b0:87:c9:24:9c:5b:7b:4b:d8:
c3:8b:e1:92:67:01:7e:cf:e1:91:f2:2a:6e:37:3b:
2b:9f:ee:ad:d5:cb:6b:4e:48:c1:69:00:8d:85:b1:
22:90:3d:49:ef:00:95:0f:4f:0f:94:ee:ab:dc:f8:
e3:a6:93:94:28:48:a9:7d:29:a1:cd:5a:f3:58:3e:
1e:62:be:a7:a6:ed:52:a9:77:f1:dc:af:76:1e:83:
c3:23:ea:bd:ac:2f:20:40:ac:ff:9b:56:f6:ad:ab:
87:0f:82:7c:ed:a7:dc:30:b5:ba:be:15:6e:59:f4:
d7:a1:13:3b:75:3d:1d:bf:04:db:8c:d9:be:b1:e9:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:BE:78:84:9C:FD:D1:02:30:5F:5E:E3:74:96:C6:6A:B8:00:48
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/l9O-eISc_dECMF9e43SWxmq4AEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:db:d1:ae:a2:eb:cf:5f:4d:3c:01:37:78:d5:74:7b:2b:7a:
f2:33:af:c3:a6:52:81:db:0a:63:cd:63:6a:12:87:59:22:d1:
15:fe:f7:98:ca:d2:fd:45:82:ea:09:a4:fa:64:6b:03:8c:f5:
7f:61:31:c5:70:3e:de:18:ae:71:1c:af:e4:bb:6d:12:fa:52:
2a:89:e2:f9:f7:d3:88:93:aa:0e:6b:ff:82:32:a2:1b:72:ef:
f8:b9:0a:ba:2d:43:98:2f:ad:b6:94:cf:58:ab:80:68:c1:a6:
e1:74:2d:6c:a9:6c:be:cf:a1:f6:44:74:03:db:27:43:fd:20:
a4:03:3d:85:a3:3e:47:7f:a9:f5:dc:89:15:2f:6b:af:d3:e6:
46:42:ba:f7:c9:a6:93:10:40:f4:ea:60:77:88:56:92:e3:3f:
00:ec:66:2b:c4:79:b3:5f:7d:f6:50:5e:2a:4c:74:2f:45:e6:
94:65:44:f8:de:19:a8:93:25:73:d8:0e:db:7f:3e:a6:24:38:
5a:f0:79:e4:c4:0b:28:b7:eb:33:80:df:02:b3:1d:38:b3:03:
2e:3a:7f:b5:1a:37:41:09:09:6a:63:ae:b7:43:58:28:dc:1f:
12:2e:39:f4:58:70:d3:e4:79:09:da:c8:b4:f1:be:0f:1f:69:
10:51:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:50:02 2025 by rpki-client