Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa
File: 54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa (raw, json)
Hash identifier: L1jxjPmqH4fiUgepqP9mHncPo3XXlUJvDMCL9EkBa2s=
Subject key identifier: E7:89:03:96:1A:4C:1F:09:59:3F:01:CF:7C:9E:45:A0:85:F4:68:6C
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0D53
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa
Signing time: Mon 26 Aug 2024 05:19:41 +0000
ROA not before: Mon 26 Aug 2024 05:19:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.61.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Aug 26 05:19:41 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E78903961A4C1F09593F01CF7C9E45A085F4686C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:dc:47:8a:19:49:77:c4:56:0d:80:75:7b:
6f:44:88:53:6f:f6:82:6a:1d:d3:a4:63:94:24:27:
e5:37:04:c6:85:65:47:69:ce:23:70:44:a1:c3:dc:
24:b9:11:17:44:26:3b:f2:8a:40:8d:9a:18:46:63:
c4:40:9a:58:1d:dd:ab:90:73:c2:47:06:99:28:e1:
d8:3c:ba:55:4a:7e:43:61:1c:9a:37:78:c2:cd:d8:
a6:13:14:00:e1:b1:65:4c:ca:d0:79:3a:dc:cd:2a:
20:88:28:c6:85:91:90:5c:a8:67:b4:64:c2:37:07:
6c:d2:31:5f:58:fd:22:1b:b2:4d:62:9f:f4:e7:32:
75:5c:66:7f:b7:3f:84:b9:7e:ed:04:44:ac:6d:d8:
fc:35:cf:f3:f3:13:c1:39:a5:f4:d8:11:09:be:02:
89:92:b3:cf:af:07:a3:78:c6:a5:14:d0:3a:37:a0:
25:8d:d5:0e:b7:9e:8e:b7:83:ed:46:32:59:a9:e7:
d2:ea:43:4d:b8:55:c2:0b:e7:a0:e3:8a:a2:e7:e4:
72:88:b7:00:af:b3:7e:fe:24:b4:07:4b:ee:9b:58:
42:b4:a9:0d:1f:3e:87:45:e0:c3:08:a2:cf:31:93:
0f:8c:6a:4f:61:17:e9:ca:bc:51:3d:13:3a:61:07:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:03:96:1A:4C:1F:09:59:3F:01:CF:7C:9E:45:A0:85:F4:68:6C
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.0.0/17
Signature Algorithm: sha256WithRSAEncryption
67:21:6d:4c:6e:33:93:1a:07:bc:c0:7b:7e:8d:61:97:29:47:
fc:d4:db:53:d0:3a:ae:33:cb:02:f2:50:f7:54:fe:ce:6f:62:
e5:34:66:cb:8a:53:11:c3:ba:0b:de:b3:43:98:19:42:b1:7b:
e9:ba:82:5f:09:36:41:62:40:ca:d8:30:38:e4:24:d6:99:6e:
9b:81:ae:99:c1:d9:31:1a:53:09:a4:15:d5:f1:46:a4:a2:e9:
9b:cf:86:de:d1:0a:1c:10:6b:fc:70:d6:0e:c1:42:1d:ba:b1:
7c:c2:ee:89:09:3d:5f:ba:0f:81:1d:53:51:d8:6d:dc:5f:c9:
06:46:2f:ba:9c:e2:f6:4e:60:5b:15:36:84:0c:06:5d:69:6c:
2a:7a:68:6e:a1:86:a6:ad:75:65:51:99:bd:3a:a0:7c:a1:5f:
f2:4a:7d:4f:ba:d3:5b:b0:7d:4b:c7:3a:81:4c:33:d2:7d:13:
b9:c9:00:c5:e4:ae:28:11:d1:dd:a2:58:4b:05:52:54:fc:cc:
ee:91:a7:59:52:2f:21:71:b9:96:01:25:b2:8f:bb:94:18:1e:
aa:41:0a:68:72:f4:cf:02:b5:36:0b:28:52:3c:ba:ad:ea:af:
ce:b0:51:3d:41:d4:7a:16:7e:93:a9:e3:87:3b:e1:70:74:30:
5b:aa:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:42 2025 by rpki-client