Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/Hveu-8u3ci9aB6nWancvRaegW2w.roa
File: Hveu-8u3ci9aB6nWancvRaegW2w.roa (raw, json)
Hash identifier: XVWplRu6v1ffh/LPJ6XYNx0MAaTHJQ35xegML5wj2n4=
Subject key identifier: 1E:F7:AE:FB:CB:B7:72:2F:5A:07:A9:D6:6A:77:2F:45:A7:A0:5B:6C
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1197
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Hveu-8u3ci9aB6nWancvRaegW2w.roa
Signing time: Fri 10 Mar 2023 02:19:37 +0000
ROA not before: Fri 10 Mar 2023 02:19:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 202525
IP address blocks: 2403:aac0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4503 (0x1197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Mar 10 02:19:37 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1EF7AEFBCBB7722F5A07A9D66A772F45A7A05B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:91:be:6b:4b:74:10:a5:d6:d6:cd:fa:49:
4e:c0:fa:07:9c:af:c1:37:be:dc:61:f8:af:14:52:
55:a2:51:61:a2:ed:24:1e:e1:cd:80:a7:fb:0d:b8:
50:15:43:85:77:e3:cb:f8:ad:78:ef:8e:49:e0:f4:
48:dd:c7:29:72:84:f3:a2:55:27:5c:4c:60:d9:43:
5c:7a:cc:4d:df:79:ab:85:4e:79:57:22:aa:9e:5b:
23:c8:c9:03:8f:94:c6:15:d8:bf:16:0c:b8:04:07:
37:4f:d3:8d:c3:f8:0e:59:a7:8b:79:c0:40:90:1b:
0e:e8:2a:34:e4:5e:56:82:60:12:32:f6:0e:90:91:
06:6e:aa:b7:73:4f:b2:5c:e9:22:4b:d7:fe:40:f9:
f6:5a:e1:31:a6:76:d9:72:22:9b:5e:2a:20:10:29:
5a:06:62:c6:c0:d7:5c:8f:ae:04:b3:18:ee:3a:7a:
20:86:81:b3:da:47:41:6f:42:16:97:ae:29:a8:9e:
e4:81:4a:ad:e3:47:0b:e7:42:aa:6c:6c:34:e0:41:
eb:90:a9:1d:1e:8c:46:40:b2:c3:82:0b:66:9b:dc:
f9:05:19:36:18:66:15:d6:c5:e2:2d:de:f0:2c:c3:
28:9d:50:20:52:cf:84:e2:f4:a2:47:5b:22:6e:80:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:AE:FB:CB:B7:72:2F:5A:07:A9:D6:6A:77:2F:45:A7:A0:5B:6C
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Hveu-8u3ci9aB6nWancvRaegW2w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
50:51:b0:f7:4a:29:13:ec:37:a0:7e:eb:7b:8b:3c:66:a4:1a:
06:8b:5c:2e:f6:40:9c:71:d8:ff:df:94:0a:52:56:37:25:e7:
25:d8:7d:ee:d4:df:b5:7b:cd:74:7f:cd:97:e3:e1:3d:95:54:
c4:8e:2a:5b:57:42:e7:39:0f:d7:f3:48:80:3d:d8:d8:c1:97:
01:60:7e:04:6f:2d:6b:2c:c8:fb:0b:d4:6b:89:58:4a:d3:86:
f2:cc:8c:09:7f:03:b2:b7:15:12:b2:99:55:78:17:cb:45:53:
49:76:8d:9a:ca:8f:f3:74:77:27:ba:c2:56:fb:bd:90:9b:39:
07:bb:19:10:ba:64:85:bf:9c:ef:2e:2d:07:ea:b5:7e:4f:fb:
f5:d5:21:b3:ac:b7:47:86:14:dc:57:47:16:0e:8c:39:80:2d:
1d:06:81:1b:a4:11:58:a4:24:d3:52:1e:8e:c9:7a:27:bf:53:
b0:13:6f:fb:cd:0d:2f:fc:ec:0f:09:3d:50:13:67:71:a0:b6:
cc:dc:a9:46:bb:87:34:d5:86:81:27:bc:2d:cf:ab:d3:5a:07:
49:db:89:ff:84:2f:bd:2a:a2:1d:99:33:95:01:c8:24:93:15:
54:47:90:7c:34:49:17:0a:71:6b:8f:55:fe:8c:ba:ef:0a:e7:
95:84:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:36 2025 by rpki-client