Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCCC/LWZ3UNSEE_re87hHJ9QHH_244xw.roa
File: LWZ3UNSEE_re87hHJ9QHH_244xw.roa (raw, json)
Hash identifier: duse/YUFb1BFfnjWgHVZHb77kXrA1g5kKi3hCDJ9QZo=
Subject key identifier: 2D:66:77:50:D4:84:13:FA:DE:F3:B8:47:27:D4:07:1F:FD:B8:E3:1C
Certificate issuer: /CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Certificate serial: FA
Authority key identifier: 07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/LWZ3UNSEE_re87hHJ9QHH_244xw.roa
Signing time: Mon 10 Feb 2025 13:45:43 +0000
ROA not before: Mon 10 Feb 2025 13:45:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 157.20.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07E36A3D219A8AFC84F88B30553E638CE6C2CECE
Validity
Not Before: Feb 10 13:45:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D667750D48413FADEF3B84727D4071FFDB8E31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:7a:6e:c0:08:74:46:d2:ac:b6:f2:64:ef:
05:2d:46:d9:bc:17:1e:5e:26:39:d3:b5:fa:02:ac:
d7:6d:52:62:e0:80:e2:f9:28:04:c7:f7:f3:f9:40:
b0:17:dd:e2:71:1e:33:c3:9d:a8:ac:76:09:52:73:
b7:40:08:39:ed:7a:6b:a8:75:01:38:61:a3:f4:ac:
95:35:69:d8:98:a6:9c:77:0c:eb:fb:60:16:4a:94:
6b:a8:65:8b:5e:75:1e:ff:ca:2b:43:d8:ae:aa:37:
da:57:97:94:14:a1:25:d8:fe:2f:e7:50:2c:de:00:
94:10:e8:e3:8f:14:50:0d:34:93:ab:54:4f:94:62:
71:68:ca:27:25:f1:5b:46:c1:69:5b:a7:92:d9:39:
28:6a:a4:41:ba:e2:42:2e:32:f5:fb:d3:7c:4a:e8:
29:ea:35:8d:b3:ae:e6:34:6f:eb:cf:fc:e0:2a:6b:
a8:34:e3:4c:a2:2c:bf:eb:82:4b:22:d1:c0:75:c4:
0c:a8:ca:b1:bb:31:02:43:8f:7c:17:ef:49:67:fb:
0c:a5:1f:23:54:dd:09:de:53:0e:98:e9:a6:a4:57:
68:e4:b3:87:b3:ce:b5:0a:0c:d1:6c:84:f0:30:3e:
61:f2:fc:bc:14:13:08:6b:d0:bd:e0:68:3f:95:5a:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:77:50:D4:84:13:FA:DE:F3:B8:47:27:D4:07:1F:FD:B8:E3:1C
X509v3 Authority Key Identifier:
keyid:07:E3:6A:3D:21:9A:8A:FC:84:F8:8B:30:55:3E:63:8C:E6:C2:CE:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/B-NqPSGaivyE-IswVT5jjObCzs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/B-NqPSGaivyE-IswVT5jjObCzs4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCCC/LWZ3UNSEE_re87hHJ9QHH_244xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.106.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:98:0a:b9:f9:54:3c:57:f2:2f:02:8d:5a:0b:96:ff:4b:5e:
2f:01:31:02:73:57:9e:08:19:1c:fc:7c:d3:13:2e:a1:ec:f6:
82:7c:85:72:94:19:8a:5c:27:f5:bc:79:96:45:48:cb:2e:85:
65:71:56:36:a2:37:fc:07:95:90:fc:11:80:67:f2:4a:55:15:
14:86:28:34:b7:d1:0d:3c:83:37:1f:c5:32:68:73:d1:be:f9:
a3:11:d3:36:b4:a0:49:69:0a:ab:01:0c:0e:7a:2c:c7:84:82:
5f:a9:59:61:1b:84:95:9e:2b:e8:c3:75:31:8a:bd:01:f9:96:
d6:07:ee:19:62:e3:dd:32:b9:38:d7:06:54:78:d5:00:1f:4a:
84:31:d3:e9:15:36:ce:3c:37:0f:f4:b9:d1:84:87:01:6a:39:
62:1b:ac:47:ac:f7:9e:0f:c3:89:06:ce:1f:9e:81:0d:52:bd:
67:ab:51:21:f2:11:7f:bd:a2:2e:67:bd:9b:0a:31:d1:64:46:
8f:ca:a0:a3:d2:f4:e6:ce:2e:07:a9:f7:f0:55:c1:ff:c3:e3:
d0:44:cc:f3:a6:68:30:bd:69:93:2e:a2:96:13:3a:84:97:67:
82:80:f9:28:73:b0:23:aa:fe:58:f6:37:e5:6f:31:a9:ec:61:
bc:38:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:57 2025 by rpki-client