Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa
File: M8Qn_L2198uW14WeOqGRIttc07A.roa (raw, json)
Hash identifier: ++cGpOkKQ+pTaFF0Sm3oH8p/6SW4BJCn8QV+EeadBKI=
Subject key identifier: 33:C4:27:FC:BD:B5:F7:CB:96:D7:85:9E:3A:A1:91:22:DB:5C:D3:B0
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0DE0
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa
Signing time: Mon 26 Aug 2024 05:27:16 +0000
ROA not before: Mon 26 Aug 2024 05:27:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17716
IP address blocks: 140.112.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Aug 26 05:27:16 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=33C427FCBDB5F7CB96D7859E3AA19122DB5CD3B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:7a:22:ce:eb:a5:9d:77:5a:39:00:06:82:
9b:ba:22:a5:bf:b4:93:d2:5e:59:25:38:5f:ba:2d:
3d:46:02:cb:f3:04:25:19:e1:3b:98:a9:fd:a1:58:
57:8e:73:e8:6b:0f:59:bc:be:1f:33:a6:63:59:a8:
1e:ad:ee:e1:90:ad:1b:af:44:82:75:ca:3d:cf:f8:
15:51:8d:20:c1:be:d9:15:fd:a1:12:c8:0d:b1:23:
00:a7:fe:63:e1:47:47:92:0a:8d:15:6d:e4:90:77:
38:16:62:b7:fd:5a:b3:bc:51:fb:59:c3:50:28:65:
a8:fa:19:d6:3f:4c:04:66:3a:3a:d0:c6:c5:86:3a:
49:c6:ed:1a:58:53:a9:b1:bc:b8:6c:77:89:2e:12:
62:4f:e9:11:52:9d:a1:1c:57:4e:2b:4f:f2:b8:8b:
de:54:06:31:5e:db:5c:d5:df:c6:ae:09:d9:3f:28:
a7:8a:6c:1e:83:d3:8e:01:d8:61:e1:cc:00:51:8c:
96:c9:63:ad:fb:29:ae:53:33:0d:33:77:af:24:42:
02:29:e4:4f:bd:b3:21:2d:e0:df:2f:85:23:cc:b1:
33:34:4f:e5:d6:4d:78:da:dd:7f:00:76:52:58:b9:
68:b8:2a:b0:af:a1:7c:16:b8:5c:8f:4f:2d:17:b0:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C4:27:FC:BD:B5:F7:CB:96:D7:85:9E:3A:A1:91:22:DB:5C:D3:B0
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:7c:c5:5e:11:fe:48:2d:aa:43:62:83:18:9a:c8:5e:b5:f7:
c0:d3:ad:d4:a8:03:8a:68:dd:b7:48:f1:62:0d:8c:11:83:69:
92:b1:80:84:71:a6:b2:40:e9:8f:13:f7:71:f1:f2:5a:5f:64:
1a:3b:59:a7:e9:bd:12:f0:7a:42:f3:59:92:e0:33:c6:dd:91:
f1:bf:80:7a:b6:a8:d0:04:01:58:a7:b2:04:39:20:ad:56:84:
8b:44:93:44:4e:3b:1d:66:3c:45:76:82:95:a9:2e:be:17:ca:
b3:7e:98:4b:84:ed:70:75:30:8a:6f:b9:9a:ee:14:7e:78:ba:
47:6a:c8:c0:3d:f9:5b:72:ed:e2:17:ef:07:83:5d:47:90:2f:
3b:5a:f4:c3:f2:46:60:8e:41:60:d0:28:c7:16:4e:23:f7:c9:
d0:65:64:a8:25:c0:8f:d7:0d:cb:2b:de:ec:a1:83:93:2a:83:
73:82:65:cb:47:fa:d7:f9:75:21:79:ed:4f:1c:3d:cb:57:c5:
45:21:c1:0c:35:7b:3c:60:28:74:96:ea:1c:96:b7:95:bd:ba:
7f:a7:2d:05:cb:a7:33:9c:88:00:55:8d:40:00:da:fe:ce:b8:
f9:09:47:60:16:fa:46:f3:06:f9:f1:d7:6b:7c:c1:06:44:12:
0c:c9:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:12:35 2025 by rpki-client