Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/tngoaW5JK2WDKwgVwlaltwvNJOw.roa
File: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (raw, json)
Hash identifier: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=
Subject key identifier: B6:78:28:69:6E:49:2B:65:83:2B:08:15:C2:56:A5:B7:0B:CD:24:EC
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DEB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/tngoaW5JK2WDKwgVwlaltwvNJOw.roa
Signing time: Mon 10 Feb 2025 13:59:14 +0000
ROA not before: Mon 10 Feb 2025 13:59:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.61.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3563 (0xdeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B67828696E492B65832B0815C256A5B70BCD24EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:60:9b:9a:69:52:22:51:28:b6:74:86:a4:
14:d7:33:d6:d3:bd:5f:39:e1:eb:69:68:a2:af:b4:
d1:0b:6a:b2:65:d5:6b:ca:c5:37:32:ca:db:53:1f:
79:21:00:8c:4e:bf:9e:fb:09:89:a1:2a:0b:b4:07:
ca:2a:df:10:f2:e2:e7:fa:09:51:f4:df:6d:07:33:
73:8c:34:12:8e:3e:58:af:e1:1e:57:86:da:3a:ab:
3f:c8:14:e0:85:67:fc:9d:f1:bf:cc:69:99:47:a4:
eb:ba:f8:79:3a:f9:67:16:73:c1:e8:8c:53:5c:b2:
c6:e7:ff:3b:e8:60:44:60:cc:dc:10:2d:50:03:b2:
76:7f:37:5f:58:cf:39:c5:98:c0:89:0a:9e:94:ce:
d0:72:db:18:88:fb:14:65:4b:bf:46:f4:68:72:58:
bf:56:b6:32:56:63:ea:cf:28:f1:04:e9:fd:a4:11:
17:d6:bd:d7:d3:5e:20:89:1a:cb:51:4e:e2:a9:e9:
56:aa:64:19:57:15:f2:14:db:1f:1e:18:98:90:1c:
cf:62:67:c0:d4:95:51:a1:37:c8:8c:89:82:72:98:
16:ca:8e:c4:31:fc:a3:7e:c1:27:e3:12:66:a6:65:
76:89:6a:6b:f0:06:3d:d1:13:af:df:1c:87:74:59:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:28:69:6E:49:2B:65:83:2B:08:15:C2:56:A5:B7:0B:CD:24:EC
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/tngoaW5JK2WDKwgVwlaltwvNJOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f3:ea:52:27:63:fa:ec:2c:b6:37:15:57:da:f8:aa:5c:98:
15:47:37:b4:dd:42:d1:18:17:95:d3:56:cd:05:41:48:b9:11:
80:a2:cf:28:e8:59:18:69:cd:cc:76:69:f3:b8:07:69:0c:c1:
aa:0a:d4:94:20:ff:f7:84:be:a0:2d:47:98:db:41:d4:44:e9:
9f:89:d3:3b:01:82:13:b6:07:7e:22:b8:6a:86:72:88:d7:8e:
f8:b6:ff:55:92:f0:fa:8d:63:3f:39:c3:d8:f8:d4:f8:66:99:
5d:e6:ab:73:09:ae:49:e3:0c:85:b8:db:4f:3e:01:76:b2:2a:
09:70:ad:e1:58:18:85:1f:a0:e9:16:b0:e9:92:8e:ae:22:e7:
c7:c0:3a:1a:ec:9e:92:d3:1e:91:b7:d0:4e:13:0e:c8:d0:90:
b6:1f:2c:dc:c5:2e:01:2e:64:e4:5b:17:f8:43:44:ed:dd:e3:
c0:6c:dd:0a:4d:6a:91:a5:fd:04:3f:78:0a:12:f9:2c:0d:c2:
38:11:67:9e:41:3c:5b:f2:d3:c1:ee:61:2b:a6:76:7a:2d:d9:
e4:cb:1a:29:54:23:2b:16:37:62:80:18:90:10:43:08:d0:ac:
9c:73:68:cf:7f:a7:0a:cd:40:94:d5:76:88:39:1e:ae:99:ba:
17:30:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:53 2025 by rpki-client