Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa
File: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (raw, json)
Hash identifier: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=
Subject key identifier: ED:F7:77:50:E2:1F:92:D5:F1:09:EB:81:27:B7:A1:92:DD:8E:B9:A7
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DF8
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa
Signing time: Mon 10 Feb 2025 13:59:17 +0000
ROA not before: Mon 10 Feb 2025 13:59:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 211.78.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3576 (0xdf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EDF77750E21F92D5F109EB8127B7A192DD8EB9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:81:70:21:1d:8f:9b:41:95:e3:40:05:c5:
1f:43:6f:af:af:cd:99:58:63:3d:3e:97:9d:0b:6a:
7e:f1:39:6c:6f:49:64:af:fa:a7:88:99:05:41:3b:
b0:46:1e:cd:33:61:44:e5:56:c2:a1:ee:fb:e2:d5:
f8:8c:2c:57:7b:ea:3c:f7:ad:47:b5:eb:af:27:3a:
fa:d2:88:37:94:ae:3d:36:3c:8f:24:eb:9a:38:1a:
08:a0:93:fe:c6:90:7d:68:72:f2:5e:67:81:47:92:
90:87:cf:7c:7f:ec:37:99:bd:fe:b6:19:77:ac:70:
09:8c:01:98:e6:16:ee:2a:be:ea:5f:da:fb:9b:b0:
21:05:95:12:ee:98:a6:d3:b1:ab:31:8e:c3:61:f1:
dd:4d:1a:ef:9f:21:b8:36:bf:cf:68:2e:c1:d8:8d:
37:ee:10:a1:33:ee:7d:f1:2a:11:07:ca:8a:79:99:
74:c4:2c:31:ed:85:77:08:37:b0:b3:4b:1f:44:93:
ce:0b:09:62:2c:a9:c7:64:2f:31:50:ab:ae:1e:1e:
77:ac:ee:5f:60:0d:d3:20:0c:bc:20:0f:b5:c0:2d:
93:1d:22:89:78:a4:93:28:ca:c0:7f:d7:64:dc:47:
08:73:a6:e3:bf:77:d5:cb:63:24:ba:1c:5f:60:fd:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:77:50:E2:1F:92:D5:F1:09:EB:81:27:B7:A1:92:DD:8E:B9:A7
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
09:18:78:2c:09:42:58:e1:8d:fb:c9:52:ca:29:df:cf:81:ce:
ca:cd:0a:09:1d:3b:3c:d1:fa:40:e3:89:15:f2:49:81:b5:9c:
11:14:20:8e:16:83:34:d0:5a:65:49:6a:cb:7b:95:3e:42:bb:
2f:75:d7:ee:32:2f:50:ef:dc:a8:3c:b0:86:53:42:fc:31:c6:
72:a6:70:2f:be:2c:f9:34:20:cd:86:6b:37:3a:81:60:db:02:
df:cd:08:3c:00:97:6f:53:f4:e5:42:8e:87:d2:21:dc:0d:2f:
d0:b0:25:a1:60:1e:38:37:61:8d:e6:74:36:0c:91:5c:ed:bc:
7d:1a:0e:b7:7e:6b:ec:a5:b8:41:a8:b5:a5:a5:e0:26:12:07:
74:95:a2:25:9d:cb:5d:3e:d1:49:03:e5:33:7a:6c:22:1d:41:
b1:b4:4f:e3:cc:61:44:ea:97:0b:42:65:e5:c4:b2:37:be:1f:
87:6e:65:99:be:13:fc:e4:e9:6e:c2:e3:02:dc:6c:f9:69:24:
b9:97:01:bf:de:b5:39:e4:e5:65:12:e6:3c:10:46:ed:1d:50:
5c:41:af:60:60:bb:4b:14:61:7a:c7:aa:32:6a:89:09:82:91:
88:a2:f7:fb:48:fd:c7:ec:1a:e7:66:13:5b:4d:d1:b6:25:04:
79:70:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:40 2025 by rpki-client