Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa
File: J9EkP74q_plSqzzNH0Vt54J-188.roa (raw, json)
Hash identifier: m3Af3gBKc4GACX17zdxHzfuROMWCFkMtNEQTsJ+zRIM=
Subject key identifier: 27:D1:24:3F:BE:2A:FE:99:52:AB:3C:CD:1F:45:6D:E7:82:7E:D7:CF
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0EED
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa
Signing time: Tue 18 Feb 2025 01:50:54 +0000
ROA not before: Tue 18 Feb 2025 01:50:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17712
IP address blocks: 140.125.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3821 (0xeed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 18 01:50:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=27D1243FBE2AFE9952AB3CCD1F456DE7827ED7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:31:15:5f:ee:1e:d3:95:3f:92:7d:55:e2:
4a:89:56:a4:f8:ba:aa:89:00:17:72:76:ae:95:c4:
2b:e9:26:2d:a9:3c:89:be:38:3a:3b:32:79:86:a5:
2c:31:d0:37:d3:77:42:63:58:4c:10:41:1b:69:db:
0d:b3:74:ee:fd:8c:9e:05:2c:80:b6:73:84:27:c2:
c1:78:04:aa:8d:1e:63:a1:0b:10:09:f3:b7:7d:0e:
52:9b:dc:8a:66:75:81:df:fd:c0:b6:c7:78:f8:66:
cd:01:18:05:2c:c4:d0:d3:d7:6f:06:5e:a7:68:f6:
e3:02:00:8e:11:48:1c:a3:ea:6f:03:ae:c9:42:bf:
10:15:ce:b1:1d:24:dc:17:52:e8:9b:2c:4d:44:7b:
d5:05:96:02:c1:8d:85:91:bc:c7:29:3f:2f:6f:aa:
d9:56:fe:ec:61:a7:52:82:78:f4:3a:44:4f:be:90:
cf:e4:ba:50:19:b5:d7:f3:c9:00:61:59:c2:d5:43:
67:01:93:72:99:8f:61:0e:24:f6:2a:34:0e:58:9f:
d1:34:15:71:8f:62:ea:07:e4:5e:7d:75:f4:a8:3b:
12:cd:e5:46:2b:56:39:82:42:9c:74:4a:54:3d:1d:
89:dd:0d:21:21:2d:1d:21:c0:e1:ad:6c:ba:a4:dd:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:24:3F:BE:2A:FE:99:52:AB:3C:CD:1F:45:6D:E7:82:7E:D7:CF
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/J9EkP74q_plSqzzNH0Vt54J-188.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:aa:f6:80:8c:5e:1b:0f:17:69:a1:a6:42:f9:74:58:5e:a4:
00:68:10:74:45:d9:91:2b:89:51:fa:ac:09:1f:3b:68:12:91:
42:cc:34:9f:00:63:b0:f7:aa:00:a9:8c:67:e1:1b:97:f3:6b:
88:61:0e:54:4c:af:87:36:97:62:85:7a:f8:ba:c8:52:af:ed:
13:3b:74:03:48:ef:1e:99:bb:49:db:3d:3b:68:27:83:ea:97:
3b:30:24:cf:0a:6a:a3:61:6e:93:99:f2:5f:ca:1a:a1:59:e0:
ce:79:ee:e1:8a:50:92:e4:84:5a:9b:ca:15:34:9c:fc:53:00:
b8:8c:5e:b1:81:40:f0:de:bd:56:49:2c:f7:8b:75:e8:a3:22:
fe:d8:27:cb:e9:34:33:b4:2f:15:46:bb:ed:0c:e4:df:a1:b7:
f6:3a:18:d1:15:fb:24:b5:0a:df:28:07:f9:a3:e3:a9:bc:6b:
c7:81:63:32:17:52:a5:79:b0:10:86:16:b0:17:80:35:7f:65:
17:a4:bf:26:5c:56:07:12:6b:a7:4a:12:83:71:9c:f3:f0:65:
69:f5:85:fb:cd:8a:e3:ec:3b:dc:a2:ec:3d:70:2b:c1:e1:56:
d2:30:08:08:fe:b1:1a:e3:37:f1:9b:62:69:c4:79:80:d9:ad:
cd:76:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:57 2025 by rpki-client