Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/_51Vysz0afqDBU7My891EfhJ4Rw.roa
File: _51Vysz0afqDBU7My891EfhJ4Rw.roa (raw, json)
Hash identifier: Z+64WpMsUNU9K9x+8Kb+Ttd914A+RI1OYjIyQOXRN9M=
Subject key identifier: FF:9D:55:CA:CC:F4:69:FA:83:05:4E:CC:CB:CF:75:11:F8:49:E1:1C
Certificate issuer: /CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Certificate serial: C2
Authority key identifier: B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/_51Vysz0afqDBU7My891EfhJ4Rw.roa
Signing time: Mon 10 Feb 2025 13:58:56 +0000
ROA not before: Mon 10 Feb 2025 13:58:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63898
IP address blocks: 2406:b4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B329DA9268FCFD54D9F38A01ED0CF7092BB6900C
Validity
Not Before: Feb 10 13:58:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FF9D55CACCF469FA83054ECCCBCF7511F849E11C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:28:67:1c:5c:a2:d2:10:c7:12:54:14:90:
d4:d0:d2:a2:84:ce:4b:02:61:23:69:e9:72:56:dc:
6a:6d:90:77:e0:0a:e2:66:34:92:58:6b:b9:31:29:
83:a8:0a:5a:d1:11:b8:27:f9:ca:e5:39:c9:43:a8:
34:d0:ba:f8:0e:d7:e1:d9:c5:8f:c6:78:c0:c3:b3:
53:e6:28:4c:03:35:4f:d9:e5:79:02:90:38:2c:a4:
1d:16:21:79:74:bb:0d:36:75:b1:70:10:64:75:c8:
d0:8d:b0:f1:7c:ab:4e:96:9e:fd:1e:60:79:10:8d:
70:6e:83:a8:79:a0:8a:61:15:4a:03:cd:cc:6d:46:
32:ca:0e:bc:42:0c:4c:51:3b:55:34:b0:84:bc:c2:
9d:1e:5c:7d:82:54:e9:69:66:57:57:50:61:7f:3e:
85:a7:82:e3:08:a6:b6:57:aa:a1:40:95:c5:ed:2a:
52:db:1b:0e:28:d5:6e:ee:a9:37:74:d0:e3:88:c9:
5d:57:f9:8e:f8:97:cf:40:7b:e7:33:77:33:a7:87:
38:36:16:94:c5:7c:4f:cf:04:88:cd:ac:49:4b:27:
ce:c7:d0:45:d0:af:15:45:ca:5b:02:ec:75:7d:5f:
3d:64:1d:95:18:d1:25:de:27:54:5b:8a:9d:36:09:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9D:55:CA:CC:F4:69:FA:83:05:4E:CC:CB:CF:75:11:F8:49:E1:1C
X509v3 Authority Key Identifier:
keyid:B3:29:DA:92:68:FC:FD:54:D9:F3:8A:01:ED:0C:F7:09:2B:B6:90:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/synakmj8_VTZ84oB7Qz3CSu2kAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/synakmj8_VTZ84oB7Qz3CSu2kAw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSSCYBER/_51Vysz0afqDBU7My891EfhJ4Rw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:b4c0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:97:40:a3:6d:67:56:6f:38:2c:5a:8c:63:88:3e:21:86:6b:
e1:c1:bb:07:3b:ec:06:0b:92:35:92:87:22:46:b1:9a:18:2d:
6e:f9:03:59:4d:ff:bd:84:8a:30:46:1d:80:11:4f:1b:e2:17:
4e:0e:df:cd:14:f8:3b:f1:9f:71:39:0f:5b:96:cc:e4:53:9d:
63:0b:a6:b2:c9:e2:8f:17:12:b0:24:fb:55:46:f4:73:20:e6:
1f:11:41:a0:d3:4b:0a:59:1d:ed:a4:2e:9a:40:ef:8a:01:4c:
f0:cb:8c:1b:55:e6:98:ff:ee:8e:6e:c9:c1:7e:85:17:ac:9c:
85:70:f8:af:9d:7b:d0:34:6c:73:bf:c3:fb:c8:1c:72:84:e5:
dd:71:75:c3:2b:9f:dc:00:9c:37:2b:64:83:1d:6f:f3:57:25:
dd:2f:71:c3:14:a3:d7:31:b8:ed:e0:bb:9b:ba:8e:9e:0f:db:
a3:0f:16:ca:c4:93:82:78:82:38:4f:c4:25:11:0c:ed:5f:47:
d8:1a:0f:b4:9b:0c:b7:30:8c:c2:f1:9f:f0:ee:ac:79:f3:22:
40:ac:74:a4:0c:f7:3b:db:2b:c7:45:10:5f:6b:ae:44:bd:1e:
b4:4d:a1:ff:1e:15:c4:22:50:37:f8:79:1f:5e:52:b4:99:6b:
10:9e:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:07 2025 by rpki-client