Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
File: j8CjSiduEiG62n9BMKX7VdMofp4.roa (raw, json)
Hash identifier: qQkY6gz2frNH5v5dp7i6URCchvdgy7BlFjImMQbRttw=
Subject key identifier: 8F:C0:A3:4A:27:6E:12:21:BA:DA:7F:41:30:A5:FB:55:D3:28:7E:9E
Certificate issuer: /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Certificate serial: 0145
Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
Signing time: Mon 10 Feb 2025 13:44:51 +0000
ROA not before: Mon 10 Feb 2025 13:44:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 14874
IP address blocks: 202.47.172.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Validity
Not Before: Feb 10 13:44:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8FC0A34A276E1221BADA7F4130A5FB55D3287E9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:a2:62:69:91:6f:33:5d:62:85:a0:74:e6:
e8:a7:d0:62:8e:e9:d6:2c:e1:32:d8:83:9c:ab:be:
72:5b:fa:98:6d:15:38:f7:e5:5a:c1:0b:bd:b9:b0:
33:49:a3:f1:90:27:ff:cb:fc:94:51:59:f6:59:79:
fc:2e:03:8a:25:e3:f1:f0:90:93:a2:4d:76:22:03:
82:ed:6c:77:82:78:fe:74:a5:c0:db:62:1f:d5:90:
59:b7:63:3f:3b:1b:04:f3:b6:b6:ef:fe:0d:08:fc:
64:ca:f9:c8:b2:47:36:51:97:3f:17:91:b2:8a:00:
a7:55:5a:69:82:76:96:47:83:88:df:d6:cf:17:b2:
bf:41:f6:ec:23:a1:f6:76:ad:d9:cc:aa:46:a2:dd:
43:0f:59:38:1f:c6:6b:b3:eb:98:dd:a6:78:81:4f:
eb:70:f5:69:38:6b:ed:0a:15:2c:83:b7:83:4f:c3:
9c:fa:d1:ef:0e:87:a1:b4:c3:30:d6:92:9f:c8:d6:
ed:e9:a5:27:5f:1f:0c:89:ad:c6:04:09:56:bd:c2:
ae:8a:ca:a4:71:a7:fb:5d:50:fa:8d:92:0e:c6:24:
42:af:d5:02:f0:83:9c:42:42:e0:3f:69:d3:75:56:
ee:c2:9a:ae:d3:39:05:e9:79:a0:6d:11:b0:eb:4d:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C0:A3:4A:27:6E:12:21:BA:DA:7F:41:30:A5:FB:55:D3:28:7E:9E
X509v3 Authority Key Identifier:
keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/j8CjSiduEiG62n9BMKX7VdMofp4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.172.0/23
Signature Algorithm: sha256WithRSAEncryption
87:b6:43:8f:5b:7d:b7:d1:a0:c5:ed:d9:23:93:bd:ca:d8:c1:
22:4f:bb:18:07:43:fc:87:90:cc:87:45:0b:b0:a2:f6:16:18:
82:79:a4:94:0d:3b:16:b0:36:00:f7:68:b9:3e:59:e8:6c:22:
29:7c:c6:85:64:c0:be:b3:65:3b:9a:71:56:1c:be:e8:35:0b:
fa:1b:79:0f:dd:e2:9d:9d:72:3a:81:a8:9f:bc:91:62:66:fb:
b3:84:0a:e7:a3:94:dc:42:2e:fc:f7:55:4a:91:e2:8b:10:b3:
c1:26:9d:07:aa:5c:eb:db:32:21:c8:c0:c1:70:43:ba:9d:f1:
b8:10:e6:5d:2d:33:a3:7e:42:d2:8f:f7:7c:56:f1:4d:f7:fa:
5c:2e:91:ab:7e:1f:8e:10:d0:ed:07:89:00:48:c3:11:9f:b3:
03:1b:09:e7:04:2d:cc:ae:a6:42:8c:80:39:d4:a9:bf:35:9b:
31:2b:4f:45:16:42:6a:47:c1:06:88:3a:d4:76:0b:dc:d5:3f:
98:8f:70:dd:bb:5e:0e:5d:ba:59:c4:3f:86:eb:1c:b9:65:cd:
cd:28:51:d6:c6:ac:65:33:b5:32:42:17:bf:1d:71:a2:21:d3:
f0:8f:b2:51:cc:7e:66:67:14:d4:6f:e8:cc:c9:2c:4f:a2:a5:
12:20:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:05:44 2025 by rpki-client