Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/R8gaY7de0XFBlkhAgnTGvLRkrgc.roa
File: R8gaY7de0XFBlkhAgnTGvLRkrgc.roa (raw, json)
Hash identifier: C6kKNBP8wOaAz4rcHQqPY/GsyJs4qtwvAKcgGEjPCFE=
Subject key identifier: 47:C8:1A:63:B7:5E:D1:71:41:96:48:40:82:74:C6:BC:B4:64:AE:07
Certificate issuer: /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Certificate serial: 0261
Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/R8gaY7de0XFBlkhAgnTGvLRkrgc.roa
Signing time: Mon 10 Feb 2025 14:05:41 +0000
ROA not before: Mon 10 Feb 2025 14:05:41 +0000
ROA not after: Tue 14 Oct 2025 15:30:32 +0000
asID: 18040
IP address blocks: 160.191.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Validity
Not Before: Feb 10 14:05:41 2025 GMT
Not After : Oct 14 15:30:32 2025 GMT
Subject: CN=47C81A63B75ED171419648408274C6BCB464AE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:24:87:4b:69:8b:fb:e1:0b:c0:70:a1:7c:
62:02:d0:63:e3:3b:2c:2d:16:44:d0:4f:8a:eb:c1:
e3:6e:04:84:2c:cf:1d:3e:aa:d0:f1:a1:8f:ce:68:
8a:53:5b:a9:db:cd:12:a5:58:d5:83:bb:ea:08:de:
92:5a:51:2d:70:9c:e4:df:07:2b:1a:73:d3:b5:99:
04:5f:4a:dc:e2:28:2d:11:97:5a:78:09:c7:f6:8e:
17:83:ff:67:ef:d0:14:16:70:5c:ed:3b:53:b1:ab:
7c:5f:aa:4e:d2:b6:d3:0e:ea:bd:39:36:ca:a4:1c:
51:5a:5e:5e:ab:dd:c7:13:b0:7d:e6:59:6a:2a:e7:
7d:d5:bb:17:80:89:af:7e:fb:16:f2:57:ed:66:2b:
82:ad:32:8e:26:42:8e:4a:f0:d7:f0:88:b8:c6:a4:
af:c8:31:94:14:01:a5:22:24:86:ed:bf:c0:13:b9:
bc:92:c4:1b:d5:bf:3f:0d:d0:3a:7e:45:49:7f:a9:
0c:97:b1:53:49:f5:91:c4:39:a6:83:2b:b9:c7:47:
87:09:97:29:51:de:ad:6d:49:9f:d0:d3:0d:17:f8:
0a:53:eb:35:8c:b6:e7:0a:d7:4b:3e:25:99:ee:bd:
db:0f:78:ab:26:b4:6c:13:6b:84:01:b0:5d:8a:d1:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:1A:63:B7:5E:D1:71:41:96:48:40:82:74:C6:BC:B4:64:AE:07
X509v3 Authority Key Identifier:
keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/R8gaY7de0XFBlkhAgnTGvLRkrgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.7.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ee:08:52:84:4f:63:8b:63:a3:1a:5b:a8:15:89:d3:b1:80:
57:25:e2:79:7d:74:29:f1:4e:9a:61:3e:36:f8:c1:3e:bc:f2:
36:ae:53:87:8a:03:b1:67:b7:cf:0c:ec:25:0a:22:a7:9d:b1:
85:df:4f:d3:9d:3a:cf:6c:39:3d:cd:56:2b:af:ea:fa:c3:6d:
da:0e:71:3f:83:08:00:af:6a:67:28:1c:00:e2:a5:46:5f:e5:
f7:57:ea:b2:b9:7b:24:69:9a:46:be:1e:93:7a:69:ee:3f:b4:
79:e4:22:92:1b:53:05:b9:cb:6b:6c:04:e7:fc:84:75:a5:a0:
c9:a9:20:10:e5:9f:27:d5:32:94:b1:23:1a:ee:f5:cb:07:55:
3b:e1:d6:6f:6d:81:af:d1:75:c8:21:cd:fd:cd:44:5b:90:0e:
27:06:e3:c5:50:4f:83:c3:42:8a:d9:e1:08:67:52:2d:09:03:
56:72:1e:8a:58:91:45:f6:85:b1:35:c6:f2:51:8e:ed:36:d3:
eb:7c:8d:f6:84:45:cc:ae:32:40:40:ce:3d:45:75:08:81:c5:
32:56:a0:13:7e:66:ba:cf:1c:2d:50:be:10:31:bd:c0:8f:09:
0f:4e:42:e3:8d:6b:ce:af:91:97:3f:3e:2f:84:ff:3f:22:1a:
5e:6b:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:54 2025 by rpki-client