Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa
File: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (raw, json)
Hash identifier: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=
Subject key identifier: 2C:68:91:C4:BE:DE:90:B6:3B:37:2A:B7:92:83:D9:27:8E:C1:AC:16
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DF5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa
Signing time: Mon 10 Feb 2025 13:59:17 +0000
ROA not before: Mon 10 Feb 2025 13:59:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.78.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2C6891C4BEDE90B63B372AB79283D9278EC1AC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:95:9d:02:15:d5:54:79:8a:3d:23:fd:67:
b8:04:ea:2c:44:ab:26:58:02:04:05:01:72:5e:ba:
df:97:d3:7c:67:23:d2:72:1b:4e:92:39:5d:05:88:
6e:15:96:86:c1:b5:57:43:1d:93:44:ef:ee:6c:cd:
d1:c4:42:d1:65:9d:e6:3e:81:a2:21:12:66:8b:de:
86:a4:7a:52:8a:f4:8b:6b:5e:92:e5:86:0d:7e:ae:
30:32:25:38:85:80:36:3e:1c:e7:e5:3d:2e:df:24:
1a:3a:41:da:dd:2d:70:7b:83:19:62:9b:26:9d:47:
98:72:09:ca:4b:3b:c8:d5:34:36:9f:92:99:cf:d6:
86:f8:92:6a:eb:49:f3:b9:03:a6:d8:27:61:2a:da:
6f:0a:01:47:e8:f2:c6:dc:a3:c5:65:32:29:71:1d:
10:92:9d:4a:e8:26:30:4e:7e:9e:8d:d4:ff:8d:a9:
8b:37:e4:23:92:34:76:80:c5:bc:dc:81:7e:a8:49:
88:9e:70:4d:42:56:1d:03:3c:ca:b9:ca:c7:cd:e0:
8a:9a:c4:3f:b7:0c:93:9e:8b:37:27:60:94:68:d7:
65:7b:c4:db:4d:21:30:ee:77:05:18:fc:52:2b:ba:
f6:0f:19:43:2d:1d:fb:ad:51:83:b7:41:d3:a9:0c:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:91:C4:BE:DE:90:B6:3B:37:2A:B7:92:83:D9:27:8E:C1:AC:16
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.0.0/18
Signature Algorithm: sha256WithRSAEncryption
01:fc:df:03:af:5a:44:02:f7:ba:80:d1:e8:d6:31:96:85:c3:
dc:ff:27:33:f5:60:50:c8:2a:0a:06:32:28:43:cb:cd:78:5e:
95:a4:61:84:7b:ee:11:5c:c9:ac:bc:22:ff:8a:7c:f7:3b:7e:
b6:92:84:71:eb:07:b2:9b:6c:6f:99:c4:62:6b:01:32:03:05:
72:55:cb:09:69:2f:1b:f5:44:13:88:14:9d:b8:0e:e1:b7:d9:
86:ce:13:7f:59:cd:ed:67:fd:63:8b:44:95:11:1a:04:36:f8:
99:1c:18:36:fe:ff:6f:c7:f5:57:07:43:c4:28:a1:99:4d:b6:
25:f5:1b:fd:eb:c5:2b:2b:75:d3:ce:2d:94:fd:e2:49:a8:03:
63:13:66:0b:da:0b:0b:8e:a9:b1:cd:1c:46:ed:1f:32:ad:5d:
bb:b2:51:5e:ec:a2:6e:06:dc:66:38:fd:d0:6d:8b:b0:8a:6d:
2b:59:95:e5:5a:82:8c:9b:91:1a:2f:41:69:55:bd:a0:60:94:
0e:d5:a8:90:c8:cc:f4:e5:93:f6:7e:c2:96:0b:43:e8:69:75:
62:23:8c:c1:7f:73:fe:2b:4d:7d:0c:02:86:84:82:60:cf:18:
bb:40:a9:35:bb:83:1d:3a:7b:d7:2a:ac:d6:54:d7:fb:84:64:
70:2d:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:53 2025 by rpki-client