Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/-grOOHa3_jddpy3GH8j4XTJS9wg.roa
File: -grOOHa3_jddpy3GH8j4XTJS9wg.roa (raw, json)
Hash identifier: eSjletpCySQKYScPYOUNFSI5cKWCEusALNTUcikKXzY=
Subject key identifier: FA:0A:CE:38:76:B7:FE:37:5D:A7:2D:C6:1F:C8:F8:5D:32:52:F7:08
Certificate issuer: /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Certificate serial: 101E
Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/-grOOHa3_jddpy3GH8j4XTJS9wg.roa
Signing time: Mon 10 Feb 2025 14:31:42 +0000
ROA not before: Mon 10 Feb 2025 14:31:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131645
IP address blocks: 2404:63c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4126 (0x101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Validity
Not Before: Feb 10 14:31:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FA0ACE3876B7FE375DA72DC61FC8F85D3252F708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:bf:6e:b3:43:99:d9:71:5a:9d:f8:92:d2:
f1:43:47:42:b9:77:56:f0:d0:92:65:65:5b:9e:67:
90:a7:47:8c:aa:f5:ac:b8:cb:af:b4:d3:62:82:d1:
8e:67:ea:af:b6:21:b9:08:36:f4:42:c4:6b:29:b2:
db:fa:74:ed:2e:d0:5a:4e:c9:7f:39:a0:b6:9b:e6:
d6:b4:6e:43:e0:b1:07:5f:40:b3:c9:7e:80:cc:ef:
56:7f:a7:71:84:2e:91:2b:15:59:fb:f2:ae:7e:27:
bf:21:0f:1a:e5:f1:bd:94:f8:34:38:92:5f:e4:0c:
e8:46:56:2d:9f:2f:87:47:1f:90:a9:85:99:4b:16:
2b:86:23:0f:7c:3c:f0:88:b4:60:92:06:4c:0f:07:
e3:40:73:30:bb:4f:f3:71:cb:2e:a3:c3:82:97:8a:
54:0e:4a:89:87:8d:f6:3d:8c:78:70:6c:8a:c9:82:
3c:b5:f0:54:a1:84:8c:a8:c4:b6:55:27:94:7c:c2:
c8:a5:f4:02:e6:cf:7d:95:c6:3e:e7:84:03:62:79:
95:f7:56:33:69:da:66:a8:01:1f:59:a6:52:1f:66:
4a:07:d2:66:78:16:75:08:f5:58:4d:4f:ef:7b:58:
40:8a:8b:43:19:c9:c8:74:23:7d:a1:0f:57:47:5a:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:CE:38:76:B7:FE:37:5D:A7:2D:C6:1F:C8:F8:5D:32:52:F7:08
X509v3 Authority Key Identifier:
keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/-grOOHa3_jddpy3GH8j4XTJS9wg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:63c0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:99:8a:85:0b:20:f0:06:e2:d8:46:dc:95:49:f7:25:ba:75:
d7:5c:26:aa:3b:10:7f:8c:24:3e:34:5a:99:33:da:94:bd:c7:
bc:4a:62:93:02:ad:4e:9a:07:bd:09:ec:f3:6e:43:79:82:c6:
bd:c8:e9:0c:c9:e1:03:57:07:d4:84:00:ef:e9:0c:2b:98:1a:
8d:60:f9:58:0e:33:db:b3:04:30:dd:b1:f2:5f:26:88:9b:be:
59:1d:3d:18:48:19:1f:54:58:d8:9e:28:09:2c:26:86:0e:92:
b5:94:06:51:96:aa:58:e1:e2:c7:7c:43:55:88:65:3b:9e:47:
4a:98:7a:12:81:0f:b8:5d:dc:12:3e:78:6f:c2:c5:b6:b5:10:
c6:20:22:6b:bd:9c:55:7e:ea:c3:9c:89:53:c5:34:33:3b:ca:
85:c0:b0:ec:27:8f:2d:80:6d:d1:35:11:71:97:d9:34:fa:74:
29:e5:1f:d4:a9:1f:9d:73:1a:0b:29:4e:68:90:23:07:86:31:
0a:36:9b:5b:b2:a3:a0:d6:42:70:66:3f:9e:34:0f:d3:ce:06:
19:f5:6e:39:d1:35:ae:a5:2d:04:02:87:ce:d4:54:df:71:c4:
c9:10:bc:88:84:a3:50:75:3a:01:eb:1b:06:07:0b:dc:07:2d:
e7:b1:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:03 2025 by rpki-client