Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6jhCAVsAEif59XJSp_ByCGkHif0.roa
File: 6jhCAVsAEif59XJSp_ByCGkHif0.roa (raw, json)
Hash identifier: JBCJUwCEJoTzqzXFwB3jcso5poNs54vMmjiJ3l5Rhb8=
Subject key identifier: EA:38:42:01:5B:00:12:27:F9:F5:72:52:A7:F0:72:08:69:07:89:FD
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0792
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6jhCAVsAEif59XJSp_ByCGkHif0.roa
Signing time: Mon 10 Feb 2025 13:44:33 +0000
ROA not before: Mon 10 Feb 2025 13:44:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 2406:48c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1938 (0x792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Feb 10 13:44:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EA3842015B001227F9F57252A7F07208690789FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:03:f2:33:0a:27:42:b1:f8:33:1d:d7:b4:
0e:51:71:df:c5:64:03:57:28:63:8e:a1:49:1c:6d:
bb:8e:bd:f4:50:39:01:d7:ba:26:22:37:56:66:c3:
5b:1a:0f:58:46:30:f6:31:24:46:2a:e4:b3:59:64:
c8:15:90:e6:9d:58:ad:a5:07:24:e1:94:4f:d8:18:
01:22:71:2a:3f:e6:5c:e6:28:e5:5b:df:8b:5e:5b:
aa:d7:0e:62:e6:68:ee:37:00:21:bb:cb:99:d5:b3:
83:12:20:70:53:e7:0b:a7:b6:91:2c:0a:83:cc:cb:
9c:32:fe:78:31:55:02:e7:91:7d:39:93:a2:6c:29:
ed:30:40:57:37:ac:52:31:b6:a0:e7:de:5d:ed:eb:
5d:32:c7:04:c8:b2:bc:72:f4:93:2d:1c:62:0b:29:
1e:72:a2:b8:2c:91:5a:3a:c9:f9:7f:04:27:c9:c1:
3b:05:b5:69:91:c5:9b:1c:97:fd:7f:98:ff:c0:68:
f3:7c:17:59:52:fa:43:01:ce:76:53:9f:6d:e3:57:
70:1b:34:66:f6:fe:c2:af:de:72:da:a4:2a:c6:5a:
2f:8a:9d:8c:2e:6b:33:25:cf:53:d9:f8:6d:7d:94:
86:99:b1:5e:3d:a8:84:34:cc:5b:eb:28:73:94:04:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:42:01:5B:00:12:27:F9:F5:72:52:A7:F0:72:08:69:07:89:FD
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6jhCAVsAEif59XJSp_ByCGkHif0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:00:36:e7:7c:ac:1b:e0:eb:1d:dc:6c:66:97:75:77:5a:af:
c6:cf:92:01:da:23:66:87:dc:21:e3:5d:47:11:36:54:cb:f9:
51:27:30:cd:33:14:a2:64:bb:46:f2:97:8c:3c:93:c8:fb:0c:
83:43:9a:1f:88:56:2a:0e:e0:52:d0:ad:64:e1:39:cb:01:8a:
a5:06:ea:04:38:f8:51:69:d6:45:72:44:6c:80:d9:bd:1c:82:
f7:6d:b2:85:d9:50:1f:ee:0d:3b:70:77:15:ca:36:0d:e1:4a:
81:6b:54:3b:cc:1b:ee:29:e1:e5:85:59:fc:69:69:e0:7a:cb:
62:6a:2b:da:e0:5d:d1:40:d9:fe:4c:9b:28:c6:9b:35:0d:00:
21:35:c0:d6:52:95:4f:03:e8:2f:fa:3c:63:ea:2e:2b:df:45:
32:d6:0a:0e:e9:1a:bd:92:40:4b:83:40:41:08:1f:62:86:32:
1b:91:b8:a9:75:b3:6f:1b:95:d3:d1:28:12:b0:23:ca:ff:d6:
08:b3:a2:dd:16:d6:25:c9:29:4b:e4:2c:a3:93:b6:4a:31:5e:
70:88:dc:31:16:5a:78:63:e4:cb:62:dd:16:57:0c:b3:93:13:
56:35:0e:30:63:32:1d:9e:c4:03:aa:67:de:7f:2b:fc:fe:4b:
6c:69:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:22 2025 by rpki-client