Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa
File: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (raw, json)
Hash identifier: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=
Subject key identifier: 9F:D0:6D:AE:71:01:47:DC:DA:BF:67:D3:76:09:C9:E2:E8:48:41:63
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DF6
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa
Signing time: Mon 10 Feb 2025 13:59:17 +0000
ROA not before: Mon 10 Feb 2025 13:59:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 61.61.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3574 (0xdf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9FD06DAE710147DCDABF67D37609C9E2E8484163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:cb:3b:d4:60:e5:bd:07:df:17:cb:bf:22:
ce:d6:fa:d2:cb:f2:48:9a:89:97:a7:ef:0c:5b:b1:
9c:b4:b3:11:be:fe:a8:8a:6d:b3:2d:7c:37:19:59:
eb:60:ab:a1:9a:2f:b8:91:b8:fb:9d:7d:5c:5a:20:
b2:3f:86:8e:93:6e:3e:b9:6e:31:0a:4d:a6:3a:69:
90:dd:f8:73:7b:8c:01:ab:73:92:29:37:c9:60:e3:
5b:a8:c6:a4:19:39:fb:d2:37:61:08:30:bf:c5:56:
1c:24:9e:b7:92:10:a8:db:61:01:ef:87:b9:f2:8d:
d4:78:62:c0:93:68:e7:5c:39:ae:e0:a6:00:01:4b:
85:22:e1:24:63:aa:b0:3f:cd:be:8d:2a:95:7b:01:
49:cd:1d:a0:19:33:9f:03:99:9d:e3:0a:8f:3b:5b:
d7:57:57:e4:c6:50:c2:8e:3d:74:b7:ea:d7:d1:42:
c0:7a:a9:04:85:86:65:d2:3f:76:cd:2d:c5:f7:cc:
94:7b:27:1a:b1:76:da:25:ae:9a:a3:16:2d:52:55:
ab:32:ea:e6:41:16:f2:de:a3:a4:0b:62:69:da:42:
f9:2d:59:6a:89:ce:ee:4f:0b:6f:23:ce:1a:05:36:
66:8d:9b:2a:5d:a4:c0:a8:91:31:55:e7:23:02:bb:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:6D:AE:71:01:47:DC:DA:BF:67:D3:76:09:C9:E2:E8:48:41:63
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.152.0/22
Signature Algorithm: sha256WithRSAEncryption
38:d7:4e:e4:e3:b5:a5:02:24:9d:7e:af:61:ad:a5:7e:76:5c:
ba:bd:3d:91:cf:8a:74:5a:56:2b:e0:1a:fc:17:51:2f:dd:8d:
a1:b6:7b:d8:1e:1e:af:1e:5f:52:b4:93:8d:30:18:b1:c2:5c:
21:64:b3:89:1a:76:5f:4e:31:d4:90:27:ba:d8:bb:99:18:4f:
23:90:63:17:54:ed:aa:0c:87:85:07:04:7a:19:d7:42:19:82:
c7:0c:ee:18:b5:a9:be:30:9f:ef:f0:aa:fd:2e:e7:c0:77:86:
b7:d6:0a:2f:c3:13:a8:71:56:6c:b4:29:57:2c:a3:ff:2e:ea:
29:00:66:63:47:0c:da:d3:ea:3d:2f:27:cd:ec:06:39:ce:17:
21:a8:c4:b7:22:54:da:fa:36:f5:33:f6:43:1a:aa:eb:60:45:
fa:73:2e:20:c2:15:3c:cc:92:39:97:7b:bf:3b:5f:67:cb:d3:
f5:bb:b6:b2:29:6b:bf:2f:d6:c3:c9:80:ea:05:d3:bf:c9:f4:
ef:41:0a:8d:75:c7:cd:4c:f1:93:8d:b5:ad:56:d0:28:47:95:
61:f2:11:ff:89:8e:9a:36:c4:4e:d8:c4:6e:42:6c:be:23:af:
48:28:4c:62:65:ef:e0:3a:f3:3c:54:21:77:3d:39:5d:c3:0e:
8f:ca:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:31 2025 by rpki-client