Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa
File: qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa (raw, json)
Hash identifier: Ckg8mFQpR9Q5JmJgnWpeHspgpRNmMikubm5MDwhvX4c=
Subject key identifier: AB:0F:C9:16:80:0E:F8:6C:13:B7:9C:FF:36:4E:CE:61:0F:0D:63:33
Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial: 010D
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa
Signing time: Mon 26 Aug 2024 05:25:37 +0000
ROA not before: Mon 26 Aug 2024 05:25:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 202.153.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Validity
Not Before: Aug 26 05:25:37 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AB0FC916800EF86C13B79CFF364ECE610F0D6333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:9f:03:43:6e:71:7b:94:87:ab:b9:e8:ba:
fa:3d:d9:20:f7:66:e0:d0:ed:74:92:d1:c6:5a:96:
97:d5:8d:ef:df:39:5c:90:c8:7a:78:83:25:f3:f3:
50:c0:be:22:55:26:b4:e9:0a:f3:b5:54:d5:b5:06:
ab:3c:6c:9d:6e:6a:a1:0c:a1:37:79:40:df:ea:e6:
62:0f:d1:ef:97:a7:40:2b:ad:ef:48:dc:11:94:a6:
7f:ce:4b:5e:e1:19:f1:54:71:b8:38:9d:ce:9f:d5:
dd:e3:da:73:a3:bc:20:7e:e8:fc:ce:a0:20:eb:f3:
f7:6d:ca:b5:01:6e:9f:fe:88:b6:c5:e7:9f:a4:26:
5a:96:1c:8e:6c:0e:8b:a5:06:0e:2c:b5:a6:91:f3:
26:e9:41:b7:9c:46:0a:3d:b8:92:30:ca:38:5e:7c:
89:1e:05:8e:f2:97:5f:88:a1:9a:23:5a:c8:25:2d:
62:5c:4c:84:f5:05:47:35:fa:d6:02:dd:6f:a1:60:
83:74:a8:0e:87:fe:77:65:78:e9:85:c4:f3:80:c2:
f7:46:1a:b4:ac:11:0a:23:ed:6e:22:1e:f3:b7:51:
1e:70:7d:44:dc:63:64:a5:aa:aa:cc:7b:ee:56:a8:
ac:a3:aa:c3:46:54:fd:26:51:52:d4:f9:85:18:ee:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0F:C9:16:80:0E:F8:6C:13:B7:9C:FF:36:4E:CE:61:0F:0D:63:33
X509v3 Authority Key Identifier:
keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.153.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:b0:e3:22:53:76:15:f1:09:04:4b:cd:d1:f3:ae:db:c8:4d:
ec:bc:fe:92:0b:4d:ac:4a:e3:e1:8b:ef:38:c4:b6:21:16:1e:
2f:d6:d4:a5:3f:56:9b:09:04:c7:81:9a:a3:43:ae:0a:57:ad:
a4:48:75:88:10:87:44:91:a5:fd:3b:7b:af:d4:fa:77:44:3a:
19:b4:bb:46:a2:38:9f:86:ca:05:17:89:7c:6e:b9:2d:bd:b5:
57:6c:5e:2d:4d:ac:d8:8b:f1:97:43:cd:f3:1c:6d:95:58:20:
5a:f4:12:e7:10:00:df:05:6f:c0:66:b2:ac:89:0d:b7:84:c6:
73:61:3a:3b:42:37:9b:d9:37:2e:17:7b:10:25:4d:a3:68:d4:
f3:0f:d8:94:b7:c3:c7:ea:e2:08:a7:34:3c:76:11:d4:26:1a:
56:03:63:1f:54:9b:67:17:5c:40:b1:cd:dd:bb:ad:1d:69:57:
0e:83:05:41:7a:5a:8d:e5:32:12:b0:ce:8d:13:05:fe:cb:6b:
dd:80:31:e0:12:09:05:63:d2:79:00:19:9d:69:78:7c:0b:62:
0a:ef:4a:ab:35:ea:fa:dd:42:73:7d:d5:b7:83:5d:ce:bd:0d:
54:79:a4:fc:27:43:f0:8a:a9:41:08:e9:bf:79:8d:8d:64:c0:
cf:f5:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:51:25 2025 by rpki-client