Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa
File: D8OpnFkCoLKCci2u8gFGqZkFMQk.roa (raw, json)
Hash identifier: BXnGVj6NxRy1Oj4dYB3uwWJIczhMvDw/ij2sxkYZ8DM=
Subject key identifier: 0F:C3:A9:9C:59:02:A0:B2:82:72:2D:AE:F2:01:46:A9:99:05:31:09
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0E74
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa
Signing time: Mon 10 Feb 2025 14:16:22 +0000
ROA not before: Mon 10 Feb 2025 14:16:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 192.83.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3700 (0xe74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 10 14:16:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0FC3A99C5902A0B282722DAEF20146A999053109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:94:a4:03:d6:8b:9e:3a:3a:66:1d:53:6b:
77:93:fa:08:fe:cd:d9:0d:ef:f2:09:25:a3:94:8d:
82:a5:1b:70:f6:4a:ce:03:ca:00:42:3e:8e:43:3a:
dd:03:17:22:29:ca:d3:f1:fe:fe:b6:e8:df:b7:46:
8c:d0:49:f6:f4:00:4b:96:f2:24:c1:c9:bc:b6:c1:
65:31:18:53:b7:05:a4:89:9f:04:ed:28:3a:8d:97:
7f:90:ad:3f:97:e9:db:86:56:74:c4:6b:09:4d:1e:
4e:d3:04:89:e8:83:60:9c:9b:27:b3:f6:3a:95:8f:
f9:92:e8:9b:ab:09:e6:cd:f0:44:73:66:47:35:01:
03:3e:4e:e7:0e:6d:d1:8f:0a:99:52:e8:10:63:e6:
d6:f3:fc:5c:4a:62:df:dc:b7:e5:0a:f7:a0:59:b1:
2d:fd:50:50:b0:c3:d5:9a:f0:0d:ac:0d:0d:0c:e4:
61:55:1d:e4:48:b5:d2:29:d6:f4:63:3f:84:a4:67:
e6:b5:79:68:44:c3:c8:8f:82:fa:3f:16:46:8f:5a:
47:09:0c:b0:27:a8:26:de:1c:de:d1:20:2e:23:0e:
28:da:19:8e:be:e0:8c:8d:2f:ab:04:41:df:23:a8:
55:66:5b:18:31:d9:b2:88:33:d8:66:61:08:e1:69:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C3:A9:9C:59:02:A0:B2:82:72:2D:AE:F2:01:46:A9:99:05:31:09
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/D8OpnFkCoLKCci2u8gFGqZkFMQk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.168.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:62:23:37:2c:15:a5:2b:93:a1:13:2e:aa:d4:27:08:91:dd:
07:88:2c:7d:6e:6d:4b:37:fd:c7:ed:60:25:69:e1:82:14:0f:
20:c4:e0:d1:d5:af:d5:b1:32:10:3f:48:f4:f3:1b:f9:47:bf:
11:c4:ea:d5:b6:f1:4d:89:92:33:e3:01:10:ce:79:93:b4:eb:
53:92:f5:ce:dd:ca:c2:f0:05:1e:c1:fe:dc:06:f1:5c:56:51:
a2:8d:6e:b8:9c:dc:38:93:d0:40:4d:e9:a3:44:9b:98:6e:96:
be:c7:5f:95:9d:3a:9d:63:6c:07:34:b1:61:d1:b2:8b:ed:f4:
76:58:c6:41:d3:20:a0:19:ce:00:42:4a:b7:97:58:04:0f:a1:
af:42:83:c8:28:4c:77:50:3b:85:0f:15:94:b9:97:b8:53:ed:
96:d4:8f:2b:04:41:13:56:a9:69:f8:2b:40:20:f9:d2:88:97:
7d:9c:33:69:ea:2b:6c:65:48:6e:1c:7e:9c:88:8f:7a:73:6a:
92:ed:63:c1:29:3d:1a:c6:5c:ed:f8:d4:1c:9c:ef:d0:fa:c0:
f4:80:b2:6a:69:49:f5:a9:3c:03:b2:9b:1f:b5:90:8f:af:f3:
d6:fc:43:30:67:1d:25:db:ce:8a:1e:4f:57:e1:f6:47:24:a7:
52:5c:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:11 2025 by rpki-client