Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa
File: L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa (raw, json)
Hash identifier: 2/hJ09npkVZsqbRYanV/zl7+X0N3RvEk5RrpsEIVXLU=
Subject key identifier: 2F:C8:35:84:07:66:E3:F3:61:6B:66:12:44:6E:35:84:25:5A:4E:54
Certificate issuer: /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Certificate serial: 07
Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa
Signing time: Wed 26 Feb 2025 03:00:51 +0000
ROA not before: Wed 26 Feb 2025 03:00:51 +0000
ROA not after: Fri 13 Feb 2026 15:30:28 +0000
asID: 131657
IP address blocks: 163.61.124.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Validity
Not Before: Feb 26 03:00:51 2025 GMT
Not After : Feb 13 15:30:28 2026 GMT
Subject: CN=2FC835840766E3F3616B6612446E3584255A4E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:7a:d9:04:b3:85:32:0e:f6:55:fa:16:fb:
36:be:c8:3a:31:a9:13:27:e9:d3:7a:6f:00:3c:85:
47:d3:6e:e0:f2:7a:fb:bd:e9:09:1e:80:61:4f:3f:
62:44:08:5a:d8:b0:47:04:c9:fe:cc:b8:a5:ca:62:
5b:64:37:ea:54:5f:ac:dc:e4:9e:2e:ff:4e:9c:1d:
2b:67:f5:1c:04:98:bd:7a:52:de:be:97:89:5b:51:
97:26:55:09:b2:55:f0:9e:44:86:7f:9d:63:71:36:
53:c6:a3:0d:ba:dc:02:49:f8:e3:a4:fd:97:01:4d:
24:c1:7f:61:62:3b:5d:22:e1:36:64:5c:28:22:03:
ca:0e:08:08:0e:af:15:a5:30:c3:07:b2:7d:d5:f8:
2a:5f:d7:31:b4:71:e7:0a:bd:8d:5c:89:b3:9c:3a:
56:96:1b:75:eb:04:3c:bc:41:d6:f5:be:3a:fd:48:
f2:41:71:80:11:c6:e1:fb:78:af:21:1e:1c:57:a4:
f4:9f:59:6f:aa:9c:99:e4:00:23:2b:b6:dc:c6:c0:
45:3b:b9:f8:8e:f1:5f:d4:53:fb:86:03:a5:b5:ba:
64:5b:55:d2:eb:7a:13:0f:4b:b4:e6:54:7d:b6:8d:
14:73:a8:e6:0e:68:5c:e6:40:76:b9:bf:0b:34:55:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:35:84:07:66:E3:F3:61:6B:66:12:44:6E:35:84:25:5A:4E:54
X509v3 Authority Key Identifier:
keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:db:81:2d:6d:f6:37:e4:b0:f8:07:33:ba:10:b7:b9:d2:40:
18:72:5e:35:f8:d2:42:2a:f4:13:11:c4:c5:0b:f3:9a:a9:9a:
91:99:58:90:0e:e2:93:15:7b:35:ae:85:1b:c8:77:cd:65:05:
b7:52:35:1b:8c:2d:15:4b:8d:16:d1:51:ed:a7:45:5f:ec:ba:
c9:53:b1:c1:7b:e3:41:5b:6f:8b:6b:3c:e3:c6:b1:38:c8:1b:
e7:3c:ee:17:79:8f:a6:d9:7a:f0:6f:8b:0c:af:79:77:d9:e9:
ce:4d:51:d7:07:bb:a8:6e:1a:20:31:a8:93:6e:4e:37:9d:da:
a9:3f:03:d0:55:e4:e7:84:3c:32:ee:9e:f5:ee:25:d4:a9:6f:
e5:0e:3e:c1:1b:9a:2f:34:56:7a:71:55:b1:e3:9b:ad:26:21:
15:55:87:48:32:46:62:c5:83:04:f3:98:3b:de:cd:ef:39:e3:
68:43:13:f7:64:e5:bd:30:0f:f5:86:f5:2d:14:e1:4a:4b:da:
7a:59:9d:2e:83:e1:47:75:c4:c6:d3:9e:a5:42:ab:f7:29:fb:
a6:a4:bf:0e:b7:3d:ba:37:93:53:43:63:8e:8e:8a:d6:8e:9b:
3c:98:f0:eb:08:25:69:24:08:2d:5c:ea:c1:ed:de:97:aa:12:
86:a2:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:19:35 2025 by rpki-client