Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa
File: skbOegMCvEECPNkLj6hqpjcsTzw.roa (raw, json)
Hash identifier: UbRw9Z2UZ0talRPh3atdD7QTsqkqtLq4iXfnmeUPxT8=
Subject key identifier: B2:46:CE:7A:03:02:BC:41:02:3C:D9:0B:8F:A8:6A:A6:37:2C:4F:3C
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 06C0
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa
Signing time: Mon 26 Aug 2024 05:18:26 +0000
ROA not before: Mon 26 Aug 2024 05:18:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 2406:48c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Aug 26 05:18:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B246CE7A0302BC41023CD90B8FA86AA6372C4F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:f6:97:b6:3e:f0:ba:95:19:be:7e:e3:a8:
e9:b0:06:72:d7:6e:cc:aa:6d:3a:27:b1:fa:c7:3d:
d2:51:c2:6a:8d:26:2e:df:14:21:e8:a3:e3:ba:08:
2b:d4:c5:07:76:fa:0d:14:31:d6:2e:2c:44:00:2c:
89:a0:71:8a:08:0f:79:8d:5f:3b:00:3f:3d:cc:87:
61:a0:e7:0a:42:8b:76:01:d1:0e:b5:e8:e3:62:ce:
2a:89:d2:96:dc:1f:4b:af:04:90:f4:8b:0c:ee:43:
54:2a:ca:56:09:0b:17:30:89:f5:24:fe:be:6e:43:
bb:8d:d6:9e:ef:7b:aa:11:a9:ce:ab:e5:3e:f1:3f:
e5:6d:5d:1d:32:62:48:3b:55:98:2e:bf:5e:21:3d:
61:ab:db:0c:bc:61:84:09:da:16:0f:76:54:5f:71:
78:44:c6:16:f9:e4:1e:75:ed:d1:63:e9:aa:62:ac:
21:3f:b8:6c:d0:9f:11:71:30:b0:ce:a2:d2:c1:ea:
59:7a:54:a4:07:24:42:a8:ba:02:a7:22:c3:6f:d3:
a5:73:56:03:09:91:61:7a:57:02:fb:80:13:aa:e6:
bc:5a:4a:ca:73:c8:b6:c7:54:91:22:39:af:25:5f:
d1:fa:8b:fe:99:ae:69:74:7d:f9:8c:8d:25:03:33:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:46:CE:7A:03:02:BC:41:02:3C:D9:0B:8F:A8:6A:A6:37:2C:4F:3C
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:07:d5:05:7b:53:8d:63:6d:ac:44:a2:ec:ef:07:51:fb:ed:
29:8f:03:43:f3:f9:b4:d8:92:f9:49:44:c2:64:64:3b:02:8f:
e5:07:78:bd:f7:82:e4:29:69:66:78:d3:66:69:32:93:e2:4d:
cc:17:fa:05:05:80:86:39:4b:88:18:ec:c4:6b:75:6a:bd:24:
80:a2:07:91:77:96:60:a5:4e:89:25:72:dc:49:e9:a8:e0:3b:
2f:39:c2:2f:88:f9:7c:77:4a:80:12:f9:48:20:78:ba:6d:28:
fb:25:4c:84:58:61:74:69:7b:b2:96:14:b8:55:94:a5:a9:76:
65:c0:f1:5e:f0:53:0d:6f:39:4e:98:20:44:a0:4f:b4:ec:37:
9b:67:74:ba:57:46:f5:3e:f3:57:0f:39:37:6d:81:c7:03:ad:
4b:9c:29:fe:78:00:63:d5:85:ef:b4:91:e2:66:4d:e5:73:7f:
91:88:51:66:29:f0:c7:8d:66:28:43:7a:09:4f:1d:86:e3:bf:
d3:4c:bd:81:49:0f:5e:d9:35:3d:08:f9:04:a5:dd:ce:3d:af:
e2:01:3f:0e:e0:7d:76:dc:6f:0b:8e:5f:9f:8f:78:51:87:49:
5a:55:a9:80:91:1d:49:6f:91:50:95:43:0a:22:fd:6c:f3:32:
9e:de:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:49 2025 by rpki-client