Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa
File: -Rd4V0z7RlwN07cKvn6NEOfdjwc.roa (raw, json)
Hash identifier: 4Epb75+fuR5FXLC+ZcDjsj6KQf48N2Gl2xjwF+PDGK0=
Subject key identifier: F9:17:78:57:4C:FB:46:5C:0D:D3:B7:0A:BE:7E:8D:10:E7:DD:8F:07
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D1B
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa
Signing time: Mon 10 Feb 2025 14:02:32 +0000
ROA not before: Mon 10 Feb 2025 14:02:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18182
IP address blocks: 27.105.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F91778574CFB465C0DD3B70ABE7E8D10E7DD8F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:51:0c:82:4d:72:80:1a:60:97:64:be:2d:
1a:86:52:ea:7c:38:49:d5:f6:7e:cc:f7:46:b6:59:
fe:62:a0:d1:89:ac:87:38:fd:0c:ac:32:61:77:66:
c6:96:e7:be:df:7c:45:63:90:24:52:46:57:9c:25:
25:66:c9:30:88:85:92:4a:36:95:c2:dd:96:9e:fd:
75:f2:77:60:3c:c5:7e:a5:89:3c:26:04:8b:17:14:
ca:77:38:06:dc:e5:22:fa:50:d6:41:5e:62:37:50:
04:61:5b:ca:b4:cf:fc:e3:af:63:ca:04:fa:dc:d1:
dd:50:ab:52:3b:33:1e:66:29:8c:1a:d1:00:cf:b2:
60:21:e9:13:3e:53:7b:b8:00:bf:f7:82:79:4f:55:
19:22:d0:f4:bf:f6:48:e1:af:48:63:95:51:fc:24:
91:4c:62:ee:70:ec:12:96:b3:33:9c:45:af:ef:22:
69:f3:7f:81:b4:6c:9a:0b:f0:e8:7a:a0:35:eb:f0:
7a:bc:08:74:23:8e:ea:fe:c8:f2:a8:2e:6d:70:68:
ab:9f:3a:7c:4e:74:e5:49:e0:bf:ad:14:f7:2b:e4:
ee:16:bb:de:e9:c0:4b:25:c7:5f:61:4d:ee:56:bd:
6c:a8:e2:ce:18:2d:d5:6c:9f:0c:7b:11:ad:9a:3a:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:78:57:4C:FB:46:5C:0D:D3:B7:0A:BE:7E:8D:10:E7:DD:8F:07
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-Rd4V0z7RlwN07cKvn6NEOfdjwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:a9:e1:ce:e8:8b:2a:5a:5b:9a:39:40:32:9e:22:c1:74:f4:
5d:c3:ca:30:47:69:b4:2c:fe:a6:b1:24:05:2d:26:e5:f5:20:
82:28:1a:e5:1c:d0:7b:45:0b:fd:e6:5e:28:20:08:33:2f:85:
8e:92:09:55:d4:76:26:40:b3:ca:24:f6:64:91:8f:b8:6e:1e:
6e:47:26:8a:0a:89:b8:98:c2:bd:15:e1:3b:aa:16:04:5f:f9:
d4:b1:2c:e3:de:2f:be:e7:70:17:de:15:89:b0:36:2d:c1:dc:
14:1d:be:9f:ee:9b:e6:51:9e:4f:83:68:82:e6:72:a9:bc:52:
2d:57:9d:6e:57:88:93:ba:c2:e2:d2:ea:79:ee:80:d1:e8:37:
83:3f:ad:19:ff:81:bc:a6:e9:ca:5e:44:0f:32:7e:3c:2f:6d:
c1:2e:c2:31:9f:25:8f:00:0b:bc:06:56:77:a7:93:c7:e0:13:
7d:0e:f1:04:b7:a7:2b:01:49:64:dd:4c:81:09:d3:ef:a0:24:
25:a8:cc:41:da:de:88:58:6b:28:dd:f6:1a:8f:bc:2d:cf:65:
d1:f6:aa:05:16:e7:a4:17:66:46:c9:d6:2d:18:2a:33:69:6e:
66:3f:1e:0f:b1:67:99:36:e4:b9:a9:a6:2e:28:26:0d:bb:b0:
ac:13:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:24 2025 by rpki-client