Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa
File: MLiWlft-tbD1iAMbjCd3ImZc-mk.roa (raw, json)
Hash identifier: QYg/HN6o8Cx17HE7ArZfI2WtJD4DLtahJ4WMwKAbJGY=
Subject key identifier: 30:B8:96:95:FB:7E:B5:B0:F5:88:03:1B:8C:27:77:22:66:5C:FA:69
Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Certificate serial: 013E
Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa
Signing time: Mon 10 Feb 2025 14:23:57 +0000
ROA not before: Mon 10 Feb 2025 14:23:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 205329
IP address blocks: 2401:5f20::/32 maxlen: 127
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 318 (0x13e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB
Validity
Not Before: Feb 10 14:23:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=30B89695FB7EB5B0F588031B8C277722665CFA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:da:60:b0:08:51:a5:02:d7:3f:e4:6e:0a:
96:ad:e9:ca:20:82:56:8b:38:d0:c2:2d:8b:16:bd:
55:df:12:c7:5d:5b:9f:01:62:0c:a8:44:fd:55:84:
04:51:70:f5:63:f2:5f:4e:3d:e5:f5:0b:4e:ba:c9:
8b:54:96:51:b7:ec:26:4b:79:d6:16:c8:2a:ca:bd:
78:b5:d4:ca:26:01:97:a2:15:fa:d7:32:ce:71:a7:
08:1a:f3:21:20:cd:1b:b9:2d:0b:e4:0d:ed:83:0e:
49:cb:32:2d:8e:b8:6c:5c:1e:77:ff:64:86:07:36:
94:03:22:e9:99:24:e3:05:86:00:a1:f1:76:51:09:
16:65:bc:7a:86:54:5c:6a:b8:c1:c7:fd:2b:b3:3b:
f2:86:4d:41:76:76:10:2b:69:b7:73:df:ee:10:8d:
78:0d:e8:7e:5a:6b:c7:ea:b0:96:b2:de:e9:48:dc:
ee:8a:23:89:54:5d:ef:7d:1d:59:4b:4e:1f:0a:a9:
30:5f:f9:ee:75:92:07:ec:72:dd:0b:8e:63:ff:1d:
f5:32:d4:13:eb:e6:a8:16:f0:47:bc:66:4c:53:d7:
b9:9f:b1:65:b2:57:b1:2a:2e:ea:72:68:89:15:14:
3c:44:ad:b1:d1:c3:5d:b7:6c:d8:9c:49:18:08:b3:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:96:95:FB:7E:B5:B0:F5:88:03:1B:8C:27:77:22:66:5C:FA:69
X509v3 Authority Key Identifier:
keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/MLiWlft-tbD1iAMbjCd3ImZc-mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5f20::/32
Signature Algorithm: sha256WithRSAEncryption
6b:f3:b1:ff:7f:4a:4b:c6:13:17:08:bc:18:40:06:03:60:4b:
50:e3:8c:ca:ea:53:55:fe:27:8d:4e:f9:9c:27:ad:02:7a:27:
79:8c:d2:5f:ac:93:83:07:5d:ce:74:31:81:0e:58:ba:8b:dc:
b0:83:3d:ed:db:4a:81:4b:c6:83:1b:52:17:0a:64:8b:57:74:
0d:e3:c8:98:8b:71:06:ec:5b:21:b7:8d:e1:ca:72:da:53:81:
82:91:6b:39:13:e7:31:b3:f2:ae:b8:7a:de:fa:e8:cb:83:b7:
5a:31:67:4e:17:42:85:94:76:6d:4f:cb:c1:5a:3d:8c:22:0a:
07:aa:d5:bc:03:56:7e:53:46:d4:ff:41:5f:18:a4:cc:08:44:
2a:c4:12:02:08:99:7c:4c:a4:87:b0:ff:8c:88:bb:1e:71:53:
cb:7c:49:f4:34:0d:e0:02:2e:ea:66:4c:dc:24:57:5e:77:38:
55:3a:f5:2c:2f:1a:bd:e1:0c:5a:24:34:4e:b8:00:3c:bc:2c:
81:e7:ff:6c:35:ea:67:17:34:dc:24:41:91:be:57:08:b4:4c:
5b:b9:5e:f1:62:7f:b5:16:e6:36:6e:25:aa:76:20:79:6c:55:
b0:af:63:8f:a4:fd:66:41:b7:aa:ff:53:50:74:53:be:11:74:
c2:07:62:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 3 11:27:13 2025 by rpki-client