Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/H0iWW83mvUyMFxRbXvhVie6LLp4.roa
File: H0iWW83mvUyMFxRbXvhVie6LLp4.roa (raw, json)
Hash identifier: 7H/nFYxZabi26WLjXD8QfLacFkggDT3d9IIS6fvYkak=
Subject key identifier: 1F:48:96:5B:CD:E6:BD:4C:8C:17:14:5B:5E:F8:55:89:EE:8B:2E:9E
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0C8C
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/H0iWW83mvUyMFxRbXvhVie6LLp4.roa
Signing time: Mon 10 Feb 2025 14:06:19 +0000
ROA not before: Mon 10 Feb 2025 14:06:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131633
IP address blocks: 2403:86c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Feb 10 14:06:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1F48965BCDE6BD4C8C17145B5EF85589EE8B2E9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:79:14:94:fc:b7:96:98:9f:b7:52:6b:17:
09:3b:8d:fb:df:0f:ee:03:fa:09:a5:f4:73:8f:22:
da:91:15:37:fd:ed:59:72:da:e9:53:b1:9c:44:82:
e2:ca:60:80:fa:11:42:d2:76:7d:59:b7:46:14:16:
ac:9c:c7:a4:da:1f:9e:7e:d8:93:10:db:45:77:77:
40:f8:fb:f4:de:76:c7:fa:72:56:0f:40:cd:74:75:
c8:83:87:23:ec:a4:77:1d:4f:23:d0:87:fb:4e:f4:
a9:d3:d8:46:4c:da:b8:10:3b:07:ca:9d:08:59:f1:
f9:52:3d:e8:92:a4:ff:3e:f0:2e:b6:4d:13:50:11:
b1:4c:cf:57:73:fa:91:f8:7a:a1:13:85:1e:fd:1f:
77:18:83:ed:7d:80:ca:34:ba:ef:7b:c3:e3:6d:63:
b0:f9:6a:c3:1e:bd:a8:c3:2a:6d:b2:ff:2f:e6:1f:
b2:80:ad:b7:fe:5d:2f:45:24:92:85:47:36:d6:29:
18:34:33:bc:af:4f:4b:4c:cb:03:59:f3:57:c5:b8:
56:bc:b9:dc:f8:88:0c:58:2f:cc:eb:03:ee:d2:ef:
95:ba:28:ee:08:d0:89:00:54:31:d5:dd:fc:4f:cd:
26:26:ca:3c:36:b8:7a:1c:c5:e7:6e:51:89:6e:50:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:96:5B:CD:E6:BD:4C:8C:17:14:5B:5E:F8:55:89:EE:8B:2E:9E
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/H0iWW83mvUyMFxRbXvhVie6LLp4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:36:b2:78:f2:99:7c:a4:ce:9d:ef:1a:8c:3e:5f:65:34:b9:
92:f9:d0:4f:d1:af:43:5a:2b:16:95:d7:43:05:27:1e:7e:32:
2f:a5:2a:c7:53:1a:da:8f:f5:52:e2:db:3b:6d:24:59:2f:50:
17:51:77:d8:3e:99:8b:f5:82:d6:91:34:7a:98:4f:f3:29:47:
1c:48:22:d8:b8:84:77:ab:f3:47:8f:50:73:63:9b:62:4a:03:
95:a8:d7:c4:29:09:42:83:51:ec:0c:64:2d:c5:eb:e1:e4:4e:
58:d3:1f:22:ab:a1:6f:33:bf:3b:a9:61:cc:45:78:ff:5f:d7:
3e:70:30:17:76:3a:7e:32:5e:8c:6b:71:5e:bb:c6:3d:a1:3f:
c0:f8:11:ce:30:a3:ec:84:a0:4d:91:81:f1:46:1e:4a:f0:e7:
19:29:58:06:78:0c:52:35:97:bb:ba:41:96:63:6b:30:d0:56:
23:2d:b7:50:70:bc:5c:76:83:f2:84:34:37:67:02:d9:d3:19:
8b:5b:fd:f8:7e:01:b9:68:3d:bd:61:25:34:13:e8:6b:28:28:
6f:5e:61:b6:04:b8:47:65:f1:9c:bc:55:8d:1a:fe:0c:4e:c6:
c7:db:80:3e:c1:c1:ab:10:85:8d:c1:da:3f:75:09:75:3b:4c:
f9:a5:f5:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:03 2025 by rpki-client