Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/0rdgKAjmxYY2AW027kv5gMm8enk.roa
File: 0rdgKAjmxYY2AW027kv5gMm8enk.roa (raw, json)
Hash identifier: NkTPH1npFNvgYGmSAtSoUGBXixQ+qHrsBq9cNff96aA=
Subject key identifier: D2:B7:60:28:08:E6:C5:86:36:01:6D:36:EE:4B:F9:80:C9:BC:7A:79
Certificate issuer: /CN=8A57D6F0354EA58A149352BF24330D6630702F9B
Certificate serial: D8
Authority key identifier: 8A:57:D6:F0:35:4E:A5:8A:14:93:52:BF:24:33:0D:66:30:70:2F:9B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ilfW8DVOpYoUk1K_JDMNZjBwL5s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/0rdgKAjmxYY2AW027kv5gMm8enk.roa
Signing time: Mon 10 Feb 2025 14:19:45 +0000
ROA not before: Mon 10 Feb 2025 14:19:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 399624
IP address blocks: 2401:97e0:a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57D6F0354EA58A149352BF24330D6630702F9B
Validity
Not Before: Feb 10 14:19:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D2B7602808E6C58636016D36EE4BF980C9BC7A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:9f:f0:a0:65:2a:ae:23:2d:4d:c3:11:5e:
83:ea:e0:0a:78:f8:b2:d1:03:05:f4:e4:a7:50:dd:
f3:11:be:8a:fe:03:93:c3:e5:12:50:b9:f2:e6:5d:
99:83:47:5a:44:51:42:68:77:31:87:d4:81:47:8f:
fd:a7:b4:3d:ff:c3:2c:aa:e5:8e:f6:8b:98:b0:0b:
73:90:10:17:0e:20:fa:94:e5:5c:ac:bd:6a:61:cd:
8b:11:b8:a0:77:1d:0b:9c:16:4c:ef:a7:d9:b0:2e:
fb:69:b4:b3:69:e1:0e:dd:f0:52:d7:cd:8b:62:b0:
32:89:a6:fc:be:50:cc:d4:ca:51:b7:be:1f:f4:0a:
cb:74:08:12:87:0f:61:9e:a0:88:e4:12:49:f8:fa:
7b:0a:e8:b8:dd:db:01:df:2f:9b:01:90:04:2f:47:
05:ec:ae:70:e1:02:4c:af:58:78:2b:b9:e5:f8:c1:
1b:2a:0d:ea:e8:ec:7a:37:93:88:f1:53:5c:a6:50:
0d:17:94:46:3e:7f:01:1e:61:05:d4:4b:0f:58:7f:
8b:31:cb:b6:75:29:fb:e3:2e:e7:9d:f6:3b:6c:47:
32:c4:ff:d4:d7:ab:67:28:a0:88:10:cd:da:ef:90:
d5:15:e6:4d:e2:33:d3:d3:db:76:13:c9:3a:06:18:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:60:28:08:E6:C5:86:36:01:6D:36:EE:4B:F9:80:C9:BC:7A:79
X509v3 Authority Key Identifier:
keyid:8A:57:D6:F0:35:4E:A5:8A:14:93:52:BF:24:33:0D:66:30:70:2F:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ilfW8DVOpYoUk1K_JDMNZjBwL5s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/0rdgKAjmxYY2AW027kv5gMm8enk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:97e0:a::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e5:90:5d:05:d4:7b:fb:be:4d:fb:92:2f:f9:b7:f1:8f:59:
63:fc:8d:7d:e3:78:f7:cc:fe:ba:61:00:12:f8:ad:0c:bf:91:
96:24:58:eb:15:79:f5:91:fd:1b:df:24:64:a4:cb:6f:17:82:
61:a7:cf:c9:a5:07:e0:14:5e:76:48:a3:95:0f:a3:3c:15:8b:
67:13:70:17:b3:f0:4b:ad:4c:94:fe:e4:85:d8:98:56:01:60:
9a:0d:e2:2a:f7:06:ab:6c:bb:7e:79:68:5b:70:00:14:33:68:
d9:5e:53:42:35:11:23:e1:13:96:c6:58:02:a0:ad:bb:79:16:
a6:08:18:73:75:46:fd:e1:05:e5:38:a2:dd:4b:62:4d:cd:55:
9e:bb:e9:2d:ac:f9:cd:b9:88:a7:d6:3d:d9:e2:f5:b5:5e:f9:
f5:88:43:df:dc:f7:45:b3:af:cf:de:cd:b4:90:cc:38:b4:91:
96:2f:80:ec:97:0f:8c:9d:89:c0:3e:c4:c3:e0:a3:99:2f:c8:
69:4b:77:d8:98:00:0d:4f:da:5c:57:fb:7f:85:bb:87:60:16:
99:01:67:89:0a:2b:a4:83:84:36:e7:8d:d3:b2:88:48:10:55:
21:8f:da:c1:b2:62:be:44:94:35:85:c9:6e:09:34:84:f1:c5:
83:89:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:15 2025 by rpki-client