Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/-Y7wpraZt-_PI1FLYtnEjjSsNvA.roa
File: -Y7wpraZt-_PI1FLYtnEjjSsNvA.roa (raw, json)
Hash identifier: Cf00dec5u78ptkJnyfZfkcGmyHYOj3dMSo3uqUYCnnA=
Subject key identifier: F9:8E:F0:A6:B6:99:B7:EF:CF:23:51:4B:62:D9:C4:8E:34:AC:36:F0
Certificate issuer: /CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Certificate serial: A9
Authority key identifier: 6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/-Y7wpraZt-_PI1FLYtnEjjSsNvA.roa
Signing time: Tue 26 Nov 2024 11:06:00 +0000
ROA not before: Tue 26 Nov 2024 11:06:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 152609
IP address blocks: 2401:8c20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Validity
Not Before: Nov 26 11:06:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F98EF0A6B699B7EFCF23514B62D9C48E34AC36F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:da:89:f5:95:29:6d:09:6f:7f:bd:c3:8f:
7d:cc:28:e1:ac:d3:bf:fb:7b:8a:5f:39:d4:b2:c2:
04:cc:f4:ee:f1:8b:d9:73:e4:11:65:07:16:70:30:
7b:7d:f1:d4:c4:25:23:27:48:57:64:e9:56:60:16:
08:b8:21:1e:28:a9:d1:5a:fc:13:8f:b4:4c:6f:4b:
dd:3d:1e:55:27:d6:00:8d:76:28:93:b7:29:c4:54:
b0:2a:ce:9a:72:ac:32:dd:2a:7b:25:00:06:80:6f:
9b:19:51:9b:4b:37:52:69:1d:a3:08:fd:ef:41:87:
b6:9f:e5:77:76:1f:64:75:4e:9f:06:c2:2c:a0:b2:
b0:64:58:45:8c:d6:25:38:e6:4c:11:14:df:95:b4:
12:35:7d:0f:bf:f8:16:98:8c:08:21:76:09:b1:5a:
57:60:eb:82:92:db:5d:fa:f2:da:f2:9a:cf:54:49:
fc:74:8b:98:66:b2:a2:5a:bd:9c:81:fc:3f:41:aa:
b1:10:e6:41:e1:a5:8c:6f:98:ae:6d:ae:07:49:53:
20:18:16:e0:77:93:33:86:d2:f9:05:11:33:74:73:
85:db:29:61:c4:b8:5c:36:ca:6e:bd:42:23:0a:4f:
b0:48:2d:7f:f6:e9:da:c7:7a:dd:17:dc:2c:3f:ee:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:F0:A6:B6:99:B7:EF:CF:23:51:4B:62:D9:C4:8E:34:AC:36:F0
X509v3 Authority Key Identifier:
keyid:6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/-Y7wpraZt-_PI1FLYtnEjjSsNvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8c20::/32
Signature Algorithm: sha256WithRSAEncryption
01:e9:02:36:3e:12:00:a7:ea:14:38:2b:97:b3:58:45:6a:3b:
96:06:06:d2:2c:54:4b:e8:6b:98:3a:1d:1c:11:db:33:22:63:
14:b4:2f:0c:ed:45:d2:e5:dd:73:bd:a1:d7:a4:4a:f2:27:d0:
80:06:d0:6f:5e:90:6f:cb:93:7d:e2:58:83:dd:a4:a1:0b:b4:
ad:09:1f:49:10:77:18:d6:82:55:91:6c:49:d5:e5:25:a7:a8:
fd:10:39:d3:86:a0:3e:10:5d:b7:67:68:49:f0:93:ea:e7:24:
49:d1:6a:4b:b9:a7:a7:c6:dd:ef:dd:70:55:6a:55:2f:1d:cd:
36:6c:e2:fa:bd:0b:1d:35:eb:57:df:95:39:d2:22:69:28:9b:
d4:ab:33:1f:67:75:65:3f:43:74:e7:20:06:c6:3a:af:09:06:
d2:4c:f2:f4:98:31:f6:91:d6:d1:1c:e0:61:70:f2:d2:94:57:
40:b1:73:71:69:4a:2f:e1:9a:fe:60:9a:30:aa:50:43:10:79:
45:23:65:7f:76:20:a3:cd:bf:32:83:12:fb:98:ee:5d:97:0e:
44:9f:c7:ec:14:f2:78:06:71:fd:6e:49:53:37:6a:5f:d0:bc:
5a:09:4c:57:c4:31:7d:02:01:bb:96:ad:ce:2e:12:c9:db:f7:
33:f3:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:23:21 2025 by rpki-client