Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa
File: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (raw, json)
Hash identifier: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=
Subject key identifier: CC:07:C8:2C:B4:06:74:C9:FD:FC:7D:DD:68:1D:D8:0C:C6:2E:BE:F7
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0E05
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa
Signing time: Mon 10 Feb 2025 13:59:21 +0000
ROA not before: Mon 10 Feb 2025 13:59:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 61.61.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3589 (0xe05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC07C82CB40674C9FDFC7DDD681DD80CC62EBEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:c2:4e:b7:02:ab:34:78:e9:5b:44:65:d3:
3a:97:3c:62:10:18:61:cc:6b:8c:ee:16:34:ce:07:
4e:11:7e:2d:bb:5d:4d:f0:23:53:18:dd:2b:73:8c:
85:84:d2:39:36:53:dd:85:23:ab:7a:5c:06:dd:a0:
8b:c9:23:1d:68:89:1f:24:20:d5:3e:b6:a8:9c:34:
f4:c4:c6:31:63:fa:6d:47:18:9d:c2:e9:33:b3:db:
3f:ea:92:cb:a4:1c:51:42:65:20:76:cf:ec:98:fb:
a2:44:82:c7:ff:a3:d5:a8:94:34:04:dd:12:f4:39:
18:43:d8:30:46:5d:12:a2:be:4b:6c:b0:2f:17:32:
18:cb:13:70:ff:7e:04:8f:2f:60:09:ea:0c:67:df:
a4:ea:c3:b2:a2:4c:4c:2e:52:27:23:06:25:e3:d9:
77:c9:7a:48:ee:ef:db:57:a4:5b:a1:f8:f6:29:e6:
a1:5c:c5:91:85:9c:a1:74:fa:d6:5c:fd:c3:af:60:
e6:78:e3:86:51:91:ec:2e:93:78:4c:90:7d:ae:9a:
d7:b4:a8:f9:28:97:f5:05:27:c2:10:9c:a5:85:49:
12:3b:3b:aa:e8:11:13:96:60:c5:d1:a7:99:14:71:
8b:48:f1:eb:51:b0:78:c5:c2:ca:2e:8b:e6:2e:be:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:C8:2C:B4:06:74:C9:FD:FC:7D:DD:68:1D:D8:0C:C6:2E:BE:F7
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.64.0/22
Signature Algorithm: sha256WithRSAEncryption
79:8f:7b:6c:ed:ec:ab:e1:67:c7:d7:d6:ed:b5:78:2f:62:78:
57:93:32:02:ca:63:6a:c0:4d:6c:39:3d:92:e0:b5:42:ae:db:
b6:e9:ee:ee:33:ad:81:69:f1:09:a4:ca:15:46:fa:a2:a2:71:
c3:a3:51:bc:59:0d:68:1a:4f:a2:1d:aa:aa:fa:8f:75:43:0f:
b3:69:a8:4a:ac:d6:bb:76:dc:e9:20:e8:3d:30:9f:b5:64:32:
3e:89:9a:24:e9:6d:07:88:3a:7a:db:47:44:26:40:1a:02:fd:
06:04:c4:e5:f5:e2:0d:42:48:63:ad:82:01:c6:e7:b9:0b:e6:
a6:49:3e:c9:64:3b:cd:05:ba:f2:cd:28:cf:f8:4e:02:b6:17:
c0:53:25:9a:78:cf:f4:80:e3:03:f8:3f:df:55:e5:2f:b8:f8:
a6:12:6d:42:24:1f:ae:48:a7:14:2a:b9:aa:a9:cc:78:10:18:
d5:c8:d2:75:57:3b:9c:79:eb:26:fd:97:4b:23:30:e0:92:06:
d6:22:8a:de:22:9d:e9:58:b6:6d:88:4f:74:16:ad:8d:90:95:
da:b0:23:2c:b9:da:ce:15:3a:92:df:a4:66:21:d1:2e:fa:d1:
8c:57:d9:53:3c:73:33:b4:34:87:14:7f:7c:e8:f2:d6:e9:80:
4a:9f:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:34 2025 by rpki-client