Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa
File: EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa (raw, json)
Hash identifier: XKhHh2f1OSUhUDxML/5vHcUrg6WjV1N8txmlQq+wTqo=
Subject key identifier: 11:82:4C:1E:8D:46:0D:56:BA:01:69:94:21:48:03:4A:DE:A4:1D:77
Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial: 01A0
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa
Signing time: Mon 10 Feb 2025 13:42:39 +0000
ROA not before: Mon 10 Feb 2025 13:42:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 202.153.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Validity
Not Before: Feb 10 13:42:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=11824C1E8D460D56BA0169942148034ADEA41D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:4a:57:5a:c9:59:e0:95:f2:bb:68:3c:0a:
d8:5d:19:d1:1d:20:4d:47:39:a9:06:44:bb:81:71:
2c:d9:46:60:fd:b3:06:34:6e:b4:21:96:e3:d6:39:
7a:af:62:00:8f:3c:2c:f0:85:1f:88:d5:2c:cf:88:
3d:09:2b:83:55:2a:f8:be:5c:4f:78:58:91:6c:01:
72:ac:72:ba:a5:e0:62:f1:90:0c:e8:d5:f0:9b:2a:
d8:cf:bc:f5:f0:3c:5d:23:5b:b9:3e:85:f7:b3:84:
d0:f5:64:af:ad:ec:79:08:f9:fe:3b:1f:e5:ae:10:
0b:31:91:ea:ae:95:7e:d3:78:c1:84:32:31:75:84:
a0:2a:9c:7b:94:6b:4a:d4:04:16:f0:6b:9b:c8:e6:
b5:25:90:05:ee:ba:17:4e:c4:c2:4f:d3:66:a2:d6:
5f:cb:f2:c0:95:e0:40:7c:ff:fd:4c:3b:a6:2d:f4:
76:a4:6f:42:0a:b6:f9:29:1e:f6:76:5c:74:fb:2f:
8e:d8:d1:af:3d:d4:d1:05:64:2e:9a:9c:df:b1:9b:
43:62:1d:58:c2:ef:bc:7a:eb:73:be:e9:1d:e4:4d:
3c:36:ee:96:5d:94:3c:2d:50:26:40:dd:df:66:5a:
2d:56:f7:1f:fd:90:f6:44:b7:90:67:67:d0:d1:5e:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:4C:1E:8D:46:0D:56:BA:01:69:94:21:48:03:4A:DE:A4:1D:77
X509v3 Authority Key Identifier:
keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/EYJMHo1GDVa6AWmUIUgDSt6kHXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.153.4.0/23
Signature Algorithm: sha256WithRSAEncryption
91:fa:3f:e6:1a:71:b0:e2:ff:06:36:33:c7:b5:c6:b7:e1:6e:
26:bb:f0:83:42:2b:b3:03:75:e7:61:0b:c1:b7:39:6b:98:43:
9e:1a:74:f9:04:06:58:2a:2f:9e:8f:ff:a4:2c:3f:42:48:3a:
f6:41:23:a0:85:36:6b:8d:65:ab:6e:26:09:78:b0:87:31:ac:
2a:55:f1:8e:51:ea:6f:15:cf:9f:81:85:35:15:23:91:b0:df:
a1:ca:1f:1a:f9:7d:92:a7:89:d1:8a:ad:08:5a:79:44:7c:80:
87:e6:cc:5e:12:5b:0f:56:0c:33:27:2c:81:5b:a6:2a:c9:33:
40:07:f6:3d:72:38:14:cf:a0:49:ad:3e:4c:05:a0:21:8a:cc:
fe:06:4a:1d:b3:9e:64:d7:9a:56:45:33:d5:42:3a:70:61:2e:
b1:9b:b4:cf:8c:cc:53:b5:07:b8:3b:cc:88:f3:b0:db:a1:98:
3f:be:fc:ae:01:b3:77:dd:26:6a:15:a2:01:80:84:4c:a5:28:
7b:69:a6:04:0c:b3:3b:6d:c2:d6:3d:3d:03:96:5a:40:03:49:
38:a5:6a:f9:b7:2c:fa:c4:ef:27:07:6f:50:f6:70:24:24:81:
07:a4:90:e7:93:2c:4d:54:d8:12:19:84:47:a2:93:8f:5d:2a:
1a:f7:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:57 2025 by rpki-client