Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa
File: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (raw, json)
Hash identifier: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=
Subject key identifier: 36:F7:53:63:93:3F:7D:38:9A:AA:D7:C6:C0:C4:76:77:35:58:9B:49
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DFB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa
Signing time: Mon 10 Feb 2025 13:59:18 +0000
ROA not before: Mon 10 Feb 2025 13:59:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9918
IP address blocks: 211.78.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3579 (0xdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=36F75363933F7D389AAAD7C6C0C4767735589B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:b7:fd:48:3c:bc:44:f0:35:c2:9e:ad:26:
0c:fe:f5:e2:ca:a0:73:36:7c:e3:bf:47:6a:3d:46:
6a:c5:88:98:d2:b8:67:d3:4b:cc:c2:da:b7:49:87:
50:59:d3:08:20:d1:12:c1:83:af:31:4c:2a:9a:b5:
9a:b5:43:2e:73:48:05:4c:c9:67:67:ba:ed:1b:46:
e1:90:cc:f9:bb:1e:d5:56:a7:a7:35:b7:ae:67:6b:
79:65:08:3d:c9:71:b3:58:7a:b5:89:2d:4c:d4:39:
5e:02:75:cf:49:be:34:f7:d3:f2:71:dd:20:02:0b:
a6:ff:04:41:b2:68:42:b1:4f:34:72:3f:e5:0c:36:
1d:60:41:8e:f3:1e:49:ec:c2:db:45:96:1b:2a:86:
ba:ad:16:66:30:bf:34:d7:e2:b0:3d:ca:34:aa:90:
aa:5d:19:6b:ff:52:57:59:c2:33:c3:b0:ee:6d:f8:
af:24:82:18:07:fd:68:6f:a5:86:74:20:2e:26:b7:
ea:e7:ef:2e:82:4d:33:a7:c2:3e:66:27:dc:32:68:
04:45:74:57:ef:bc:36:b4:d7:8b:fb:29:c0:ce:90:
fa:f8:75:73:66:b9:98:92:2a:63:1a:a2:69:26:59:
8f:c0:b8:fa:cb:21:2d:70:b6:6a:9c:1b:57:8e:8e:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:53:63:93:3F:7D:38:9A:AA:D7:C6:C0:C4:76:77:35:58:9B:49
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.0.0/18
Signature Algorithm: sha256WithRSAEncryption
11:8f:c5:6a:e3:8e:cf:bf:20:87:c0:84:3b:59:db:44:59:68:
6c:6e:c5:55:ba:14:a3:f8:b3:43:2f:29:0f:fc:4f:6c:36:5d:
30:b1:f9:10:1b:70:5c:4e:fe:17:41:dd:55:a4:14:78:c6:a3:
2d:96:47:70:e2:72:3f:ce:f8:2b:b2:5c:47:29:6a:a3:29:2a:
09:22:83:e6:0b:7c:55:65:d2:ce:41:4c:b1:ce:18:fc:d9:26:
ca:7e:fb:2f:7a:01:f2:01:87:eb:ab:f8:22:8b:d8:c0:26:b0:
2b:de:7a:fb:24:60:70:45:94:65:2b:f5:e9:b2:71:1b:e9:f5:
0d:29:2d:2a:ef:ae:86:c1:57:89:6b:bf:86:1a:5c:88:5c:6d:
a0:f8:16:46:1c:f6:f4:1f:1c:6b:03:ba:27:18:00:ac:a7:f6:
fa:2b:bf:f0:f0:e5:9e:b0:b5:cb:82:f0:79:97:a4:74:9a:3e:
10:fa:50:fa:36:e9:85:46:76:bc:60:b4:23:16:a8:d1:86:85:
17:4b:78:86:19:d1:95:ba:d6:1f:9f:8a:98:7d:9a:9f:f2:f0:
c5:10:1b:87:6c:be:32:ac:70:89:db:a6:08:05:c8:1d:b3:9c:
6c:47:5b:3f:cc:d7:c0:10:5d:ec:2e:d3:59:e1:79:48:e4:e8:
49:7f:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:07:30 2025 by rpki-client