Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa
File: DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa (raw, json)
Hash identifier: TQC8N28nCNGyA7IfnnCNvinZsBDe/CyFjWZXwdlqIbQ=
Subject key identifier: 0D:C6:08:F1:99:96:D4:2C:6C:1C:0C:72:EF:9A:70:C7:74:B5:71:25
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D18
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa
Signing time: Mon 10 Feb 2025 14:02:31 +0000
ROA not before: Mon 10 Feb 2025 14:02:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18182
IP address blocks: 61.62.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3352 (0xd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0DC608F19996D42C6C1C0C72EF9A70C774B57125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:c2:e5:c2:e8:63:f9:8f:40:a0:74:3f:b0:
7a:79:39:dd:90:92:16:f9:3a:13:d1:08:34:86:13:
1f:73:7d:e7:32:ce:63:93:5d:46:f9:ef:25:10:bd:
cd:75:d8:aa:d5:69:a2:b6:34:67:35:c4:68:7b:fa:
c8:e1:ce:2b:b9:3e:8b:f8:ed:07:11:ba:b6:64:62:
0c:5b:fc:29:fc:c8:f8:5e:71:cd:01:d3:0b:91:83:
c5:57:ba:95:85:e0:e5:9d:b3:57:23:82:f4:07:2b:
19:25:4b:cc:34:4a:e0:eb:08:eb:20:fe:61:47:00:
0d:a0:60:06:a3:8f:9a:fb:f9:78:94:88:6c:96:03:
2c:7f:c4:f0:74:02:87:bc:ad:08:44:2d:c4:70:0f:
13:2a:d8:90:1e:55:1b:dd:bd:dc:bd:d6:6a:24:2a:
08:f6:77:5e:49:5c:bd:a6:a9:77:6f:62:84:62:39:
ce:e5:c9:ed:d8:f4:70:f8:59:b5:67:56:42:02:18:
8c:f9:b5:fd:56:16:73:0e:46:47:f3:e1:8b:1a:28:
89:54:bc:66:ab:4c:a6:f8:9d:cb:c8:b8:f7:44:ab:
6f:00:b3:c4:ab:e9:0f:86:a5:cc:2f:69:f7:2f:ed:
4a:68:cc:fb:67:92:c4:dd:65:bb:62:5f:2a:d5:2c:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:08:F1:99:96:D4:2C:6C:1C:0C:72:EF:9A:70:C7:74:B5:71:25
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:95:81:80:22:7a:a9:44:c5:ed:ad:5b:a4:3d:49:f3:09:70:
77:af:5e:ab:7a:25:46:98:2f:79:cd:64:c5:c9:0f:96:1d:a5:
e4:84:0c:d8:d6:49:90:58:1f:22:97:2f:21:68:5e:5f:10:05:
da:2d:f6:3a:05:ca:0e:7b:fd:f7:0f:dd:9f:98:59:1d:e5:2f:
63:83:2c:f3:50:ca:db:df:b1:83:5e:d7:42:10:1a:61:bb:c8:
70:91:84:da:17:c9:f4:a0:64:11:4e:ea:b1:ae:bf:4d:b7:1b:
a1:b2:27:ce:98:de:c1:c7:35:bf:fe:ff:25:21:47:22:68:0a:
be:e9:7c:c1:c7:27:c7:3e:5a:cc:71:80:a9:06:a0:79:83:24:
58:0f:b7:dd:ed:c0:47:1c:fa:b8:f5:5d:34:ab:a9:1a:37:dc:
5d:4c:87:a0:9a:64:a8:35:4d:a2:4a:18:ca:92:df:9a:f3:4d:
46:16:a6:1b:7e:7a:cd:b5:b4:fb:6f:a2:75:fc:60:1f:9c:63:
5c:62:a3:2c:7d:f2:2e:b3:60:46:9f:7a:d6:3c:3b:b2:5f:75:
bc:84:7c:00:19:d7:3d:1f:a1:a2:be:7e:03:de:e2:6a:83:18:
47:91:1e:b1:c7:df:f7:db:bc:a5:06:5d:96:11:b4:60:39:64:
e7:f9:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:11:17 2025 by rpki-client