Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/fXP7bouqdv9NnDv6CuDzS8VrgVw.roa
File: fXP7bouqdv9NnDv6CuDzS8VrgVw.roa (raw, json)
Hash identifier: SC16dxov4rT5PfohR3xktqp8um9X5rW0tdwLdwDN7ho=
Subject key identifier: 7D:73:FB:6E:8B:AA:76:FF:4D:9C:3B:FA:0A:E0:F3:4B:C5:6B:81:5C
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0CCA
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/fXP7bouqdv9NnDv6CuDzS8VrgVw.roa
Signing time: Mon 10 Feb 2025 14:08:31 +0000
ROA not before: Mon 10 Feb 2025 14:08:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4783
IP address blocks: 202.39.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Feb 10 14:08:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7D73FB6E8BAA76FF4D9C3BFA0AE0F34BC56B815C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:09:f5:15:a5:02:c5:c7:7c:81:bf:29:11:
74:2a:0d:e7:c1:f6:9c:2e:6a:73:07:b1:55:f9:60:
3d:82:a3:19:a6:eb:bd:c8:83:ae:29:b4:61:2b:14:
01:80:30:c8:4c:64:8c:63:16:84:ca:f9:19:a2:fa:
6a:1a:e0:49:77:9e:29:59:81:4d:16:36:d8:f7:29:
a9:55:23:c5:13:c4:e0:ae:5e:1e:9c:cc:c0:68:4c:
ae:84:f4:6f:c4:38:49:88:06:b4:b6:31:90:0d:c6:
0d:68:50:6e:11:40:1e:8f:16:0b:6f:6c:02:dd:03:
c5:74:a0:6a:b6:1d:29:4b:cb:cb:d3:94:45:55:9e:
3d:5c:fc:88:50:30:2e:f8:62:f1:fb:48:a6:10:e6:
b4:be:46:2e:9f:bc:d2:44:1a:7d:8c:cb:be:22:e4:
68:9a:79:d7:3a:8a:80:24:d6:3d:1a:d3:d3:ec:3c:
e5:30:d0:90:04:5a:91:15:76:f6:e4:a4:21:cb:04:
b9:bb:d4:35:3b:e6:9f:6c:5e:51:48:9e:56:36:60:
da:1c:a7:6c:09:39:33:40:d6:d9:af:86:d6:9c:1c:
84:43:74:b3:dd:7b:f8:0e:b6:e2:87:93:fe:0c:e6:
4d:0f:3e:f6:70:80:2f:fb:e4:9b:f0:5d:a5:d9:2d:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:FB:6E:8B:AA:76:FF:4D:9C:3B:FA:0A:E0:F3:4B:C5:6B:81:5C
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/fXP7bouqdv9NnDv6CuDzS8VrgVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
20:73:4d:c8:1b:11:fb:df:33:4e:17:c2:49:4a:86:b7:9c:be:
5e:6e:ca:9d:8f:a3:7a:a9:96:c9:5a:f7:a0:9b:b5:92:5e:7f:
b1:c1:74:f0:b4:02:43:03:5f:b9:4d:b2:a8:bd:72:7e:3a:9d:
d0:e1:19:98:ca:e8:0e:79:a9:e7:80:01:9a:c5:2e:3f:c5:ea:
5e:75:eb:65:ae:42:4c:3c:4f:18:11:e9:c8:6f:0e:cf:15:cd:
0a:88:33:f3:fe:76:29:50:6b:37:cf:fd:e3:b0:d0:49:16:66:
bc:91:0c:49:0d:5a:72:82:55:97:84:eb:e8:1c:b0:f5:9e:eb:
28:fd:fa:6e:61:3e:80:4f:a4:ec:b3:ff:12:d9:0a:8a:6a:ef:
75:62:b0:56:25:0d:ad:11:34:e2:8f:ac:b1:e9:e5:21:26:68:
97:50:58:31:d8:4b:13:23:11:29:a4:82:9b:36:26:81:bf:83:
47:b4:50:0a:04:c5:c7:1b:6a:e7:ca:f0:f4:ff:ca:b7:09:66:
44:bd:f0:43:68:17:08:93:95:64:b0:61:02:ba:cf:5e:d1:c5:
83:3c:fc:81:ad:40:45:fc:05:f3:68:f2:a2:2b:db:9c:70:45:
66:89:f3:34:ab:f1:79:27:7b:bd:da:60:dc:b4:74:17:91:c4:
5d:76:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:33 2025 by rpki-client