Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa
File: qik-x-JwxJjquicMYVitsr8qciY.roa (raw, json)
Hash identifier: dwZlqyJ7P5jCp9o+/bmv2jHni84xDgfo2jW+wHxHYnM=
Subject key identifier: AA:29:3E:C7:E2:70:C4:98:EA:BA:27:0C:61:58:AD:B2:BF:2A:72:26
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0674
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa
Signing time: Mon 26 Aug 2024 05:18:39 +0000
ROA not before: Mon 26 Aug 2024 05:18:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9678
IP address blocks: 2401:95c0:2d03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Aug 26 05:18:39 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AA293EC7E270C498EABA270C6158ADB2BF2A7226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:dd:e1:d3:65:b0:9f:a1:07:e2:6d:8e:f9:
db:b9:15:06:cd:c4:4a:68:ea:c2:1c:d7:c1:27:5e:
3d:73:fe:59:26:f4:c6:bb:57:d0:ee:8c:18:83:47:
d8:6a:8f:50:8d:7e:1a:54:84:ea:0e:48:2d:84:e9:
f5:d7:58:c8:44:ea:9a:50:57:ad:bc:1d:d4:ba:59:
98:aa:b7:62:b0:02:ef:ef:7c:09:d5:5f:38:17:33:
5f:40:66:d2:45:20:8d:23:dd:fc:0d:92:85:4e:02:
d1:0f:13:05:57:cf:37:a4:de:20:75:c1:6a:15:0c:
77:f8:d7:eb:e1:41:eb:2f:f7:f1:fc:e6:4c:3d:ae:
25:a0:7b:56:e9:3d:5a:48:20:04:06:a5:25:66:20:
eb:83:b8:76:df:db:51:5e:b8:c8:2e:89:5b:24:8f:
60:12:f7:be:3c:e9:b4:7c:4d:40:f4:ff:d0:ab:63:
56:c3:6c:2a:47:7e:eb:30:28:fb:b8:05:aa:ae:14:
0f:b6:83:8b:2f:2d:f3:1a:fc:9f:b0:8f:26:47:70:
ee:07:f3:62:5f:f1:e7:91:4e:4c:fe:fe:e0:4f:6d:
93:64:c0:88:89:60:ad:7f:cc:db:70:79:04:5e:b2:
d9:e6:5a:c8:9b:3e:30:bd:00:b5:83:83:c1:6b:00:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:29:3E:C7:E2:70:C4:98:EA:BA:27:0C:61:58:AD:B2:BF:2A:72:26
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:2d03::/48
Signature Algorithm: sha256WithRSAEncryption
de:f5:15:8a:e7:87:d8:6f:80:60:e2:69:02:92:a6:3a:35:76:
63:e0:d8:72:ec:a6:f3:62:47:59:37:28:f0:ea:87:21:1a:59:
43:11:d1:4a:e7:bf:c8:bc:6d:da:51:fd:94:5e:24:c7:91:56:
07:f7:74:46:c4:b9:e8:ee:84:fa:11:54:eb:24:25:4b:d6:89:
88:13:d5:ce:8d:ca:0e:2e:b0:1d:6e:af:70:1d:17:39:62:ed:
cd:73:fe:73:03:45:fa:f5:9d:a6:64:65:da:06:8a:29:0c:25:
9c:33:3d:d8:44:ca:c5:00:a7:ce:b4:ad:ef:98:83:95:7a:3e:
37:03:34:ff:f3:df:97:b9:fa:5c:f9:d0:60:7b:6b:20:29:a6:
ea:80:49:22:d1:1e:67:73:73:79:e1:dc:71:1d:91:1a:ec:21:
9c:7b:35:86:c1:41:b6:f9:cc:67:30:2f:1b:a5:06:7b:b7:b1:
f7:fd:6e:19:b5:ff:90:c3:43:a1:36:27:a1:37:3d:73:71:d8:
93:c9:64:ee:9d:33:1d:77:6c:c6:fe:c8:16:b0:38:9e:67:df:
64:51:5e:cc:3d:c0:26:9b:19:49:0e:cf:5f:84:14:44:bd:cd:
12:9f:41:b1:ac:3c:a8:56:13:f3:b6:e8:df:d0:9c:60:c5:12:
36:fb:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:32 2025 by rpki-client