Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa
File: TmtOrpS7o28ER7oLjnOBZLdWcgM.roa (raw, json)
Hash identifier: mQz/hV7i4zdeNwzhSThQr7qIHt69JvQ2KxLsJS+vAxM=
Subject key identifier: 4E:6B:4E:AE:94:BB:A3:6F:04:47:BA:0B:8E:73:81:64:B7:56:72:03
Certificate issuer: /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Certificate serial: 0C87
Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa
Signing time: Mon 10 Feb 2025 14:31:25 +0000
ROA not before: Mon 10 Feb 2025 14:31:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38837
IP address blocks: 211.78.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3207 (0xc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Validity
Not Before: Feb 10 14:31:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4E6B4EAE94BBA36F0447BA0B8E738164B7567203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:9e:68:39:a0:72:74:cf:29:a9:3e:9b:d1:
d2:d5:2f:5f:15:8b:4f:c9:4f:17:25:9c:16:b4:a7:
fa:19:18:84:36:b2:b9:0d:5e:10:11:a3:0e:75:68:
79:4e:2f:3c:37:9d:dd:a2:25:ea:ef:01:df:fe:39:
a2:ad:bf:af:c9:17:f8:fd:6d:e8:4e:91:f2:8c:6d:
77:7e:80:f9:1c:24:43:36:91:0f:42:a8:93:8a:60:
d8:59:d3:ed:20:75:7b:50:20:85:b5:67:b7:81:3c:
54:90:6d:e3:4d:c7:7c:70:74:9d:5f:0a:fe:49:3a:
7b:8f:a6:ac:c1:f9:8f:30:b1:1e:ce:71:84:38:f6:
9c:a6:19:bf:96:6a:c1:3a:63:94:47:ad:3d:04:31:
22:b9:50:4b:b3:dc:5d:21:4d:8f:83:a1:f2:1d:33:
d5:7b:99:48:ba:0d:a8:cc:bb:52:22:14:34:f0:00:
4f:5b:c6:94:d1:9a:91:d0:20:c9:ab:2a:21:b1:ca:
d1:c6:9c:4f:fc:67:b2:5d:a4:28:e8:ee:34:11:17:
f5:16:a9:8c:c5:39:20:06:a7:f7:9d:30:b7:55:a7:
97:ce:7d:d4:c3:d7:24:07:21:bb:d7:78:66:b6:85:
7e:24:49:12:11:4f:af:a8:82:db:bf:a9:49:4e:0e:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:4E:AE:94:BB:A3:6F:04:47:BA:0B:8E:73:81:64:B7:56:72:03
X509v3 Authority Key Identifier:
keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TmtOrpS7o28ER7oLjnOBZLdWcgM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:e5:c3:98:35:d5:eb:ef:f0:19:bd:5b:ac:02:44:c1:4e:3e:
38:3c:96:b0:85:57:81:49:04:77:7d:df:bb:79:65:f7:b7:fb:
05:32:d3:16:98:7c:71:e0:5d:1a:b8:57:9c:19:d2:37:19:50:
85:f5:9d:14:70:97:84:9f:e8:d9:70:71:61:f8:01:b5:43:8c:
4b:53:9e:3a:0f:0e:66:bb:43:b3:dc:b6:92:7d:20:90:a2:84:
39:06:8b:b2:14:21:c2:32:9d:76:be:4e:98:b0:e0:ac:5d:58:
05:d2:ea:d7:15:30:7e:ed:9b:6e:55:2f:84:6f:6c:3a:22:42:
c3:57:4a:87:14:11:f4:8f:97:af:bd:01:ee:cd:cd:3a:36:35:
6e:5e:ff:48:33:b9:dd:02:ca:a0:3f:c6:a4:5b:ff:93:c4:d2:
39:71:97:ba:81:90:8c:3e:f6:d0:e2:07:ee:f2:b9:69:24:ff:
5d:fe:a4:2a:4e:73:01:dd:d5:66:80:06:26:8f:44:c9:bc:d6:
c2:74:4a:e1:bb:b9:fb:60:0a:30:d1:d0:cd:e9:c8:b6:2f:32:
ba:e5:99:6b:03:25:bc:80:76:29:ac:f3:cf:6d:cb:7e:0a:5f:
fe:60:10:a4:26:94:7e:8f:58:9e:55:66:a6:28:32:82:62:7a:
00:bb:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:35 2025 by rpki-client