Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa
File: 8bmRbG2v07iAB9P3F5Wqz4382oo.roa (raw, json)
Hash identifier: AlgQ0a9totefZQHsa1hXMetRXJfxNu0oYtBvEF3cc10=
Subject key identifier: F1:B9:91:6C:6D:AF:D3:B8:80:07:D3:F7:17:95:AA:CF:8D:FC:DA:8A
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0E2D
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa
Signing time: Mon 26 Aug 2024 05:25:06 +0000
ROA not before: Mon 26 Aug 2024 05:25:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 223.27.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3629 (0xe2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Aug 26 05:25:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F1B9916C6DAFD3B88007D3F71795AACF8DFCDA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:80:73:62:2d:a9:03:54:8e:0b:ab:4f:1c:
c0:f9:eb:9f:59:64:3f:5d:58:26:b2:08:dd:5f:20:
b8:8f:79:52:fc:c0:36:88:27:55:d6:bd:0e:b2:f7:
ad:b3:fd:79:8b:2d:77:d5:49:51:ee:4a:fe:f7:40:
43:f2:a4:be:ea:c4:82:d2:ba:7c:67:41:03:9b:73:
b5:2c:49:06:a7:02:58:4d:dc:99:5c:96:e0:b4:5d:
f0:8e:64:4b:f8:c6:8e:3c:86:50:2a:e9:61:de:8b:
0b:83:63:9f:b6:54:af:5f:f7:d2:5a:4b:9f:8a:b9:
48:e5:06:9b:39:53:38:38:61:65:42:89:24:14:a2:
36:88:de:2d:ee:fe:a9:b8:14:50:35:cb:fc:68:e1:
2c:b9:fe:4a:8c:5c:ac:d5:8e:7f:75:fd:42:4c:3d:
12:eb:99:1a:24:6f:5d:7e:93:6b:15:b9:e4:0a:b3:
8a:0c:28:61:14:20:9c:04:f3:ca:ee:83:43:65:3e:
34:db:be:8b:a0:ad:dc:0c:21:b7:a4:d5:3b:59:32:
c9:59:06:bb:a4:65:a6:2f:f8:90:39:eb:f6:78:49:
61:2d:de:bc:f8:c3:75:3c:c7:ca:77:36:84:cf:0a:
1e:13:59:37:69:9a:bc:db:61:09:35:fc:16:ef:50:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:91:6C:6D:AF:D3:B8:80:07:D3:F7:17:95:AA:CF:8D:FC:DA:8A
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a4:dd:e6:e5:74:42:0a:76:c6:86:76:04:f7:2a:1b:d6:18:
47:a3:e2:b3:b2:1f:3a:64:4c:70:3b:81:05:ef:6d:60:08:1e:
15:0b:68:6d:bd:80:d3:d5:c0:d2:47:0f:88:a5:cf:fc:30:67:
df:1e:40:2c:fb:4e:ce:2d:71:ba:ac:c8:b9:29:9f:50:61:b2:
35:ee:cf:05:6a:e2:8b:37:d7:1a:ec:2f:b2:bf:f2:8d:7e:6f:
3b:5e:bd:7a:82:4d:66:d9:82:f3:cf:0c:5d:e9:00:0c:f8:76:
ec:7f:14:0a:6f:1b:0b:68:97:5d:af:c8:68:fd:e5:b4:36:30:
62:55:3e:30:3d:3b:1b:ee:2d:1a:9e:9a:34:8d:6d:ed:37:70:
62:7c:ae:26:b3:e8:15:6d:98:b7:9b:72:77:ae:1a:c8:ee:a5:
a8:26:62:6b:67:e6:e5:b4:db:8b:59:d1:51:81:cf:48:d3:c2:
d2:ab:45:1b:b7:55:47:44:47:52:87:5b:7f:bd:1b:aa:38:dd:
8e:b3:7e:49:8b:44:79:36:02:6e:ca:38:af:b2:2f:c5:99:2f:
25:e8:48:51:93:36:59:6c:b6:bc:ad:61:29:b6:f6:63:c7:44:
06:9a:4d:1f:dd:f8:11:a3:11:a5:d4:fb:5c:a1:10:29:57:33:
a2:5f:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:00:59 2025 by rpki-client