Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/XC4qwl4fYqwDvxmb3R8wyOqtfqE.roa
File: XC4qwl4fYqwDvxmb3R8wyOqtfqE.roa (raw, json)
Hash identifier: G41DuLl/anhPap7SQ2H4fMlI9NvWvVLbiKcFqTDjXzE=
Subject key identifier: 5C:2E:2A:C2:5E:1F:62:AC:03:BF:19:9B:DD:1F:30:C8:EA:AD:7E:A1
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0E84
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XC4qwl4fYqwDvxmb3R8wyOqtfqE.roa
Signing time: Mon 10 Feb 2025 14:16:27 +0000
ROA not before: Mon 10 Feb 2025 14:16:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17713
IP address blocks: 140.117.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3716 (0xe84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 10 14:16:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5C2E2AC25E1F62AC03BF199BDD1F30C8EAAD7EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:87:d6:a5:b1:60:8b:04:0b:7d:7f:5d:09:
ed:fe:d7:bb:b1:9e:ef:61:b7:1a:68:6d:00:29:6d:
48:1c:b3:12:dc:54:53:1c:c1:ab:c7:73:89:01:8a:
91:95:fe:d1:36:10:77:1a:c5:1d:09:69:8a:c6:4f:
30:d2:23:51:03:87:05:49:6a:ab:de:b1:e3:72:1e:
bd:4b:89:cc:93:f6:66:f0:6f:12:6e:0c:4d:ad:19:
ee:5f:6a:d0:bb:67:a4:96:08:d7:e9:6e:9e:79:66:
5a:5b:4e:9a:09:c0:ce:dc:45:6a:97:32:8e:7b:22:
cd:8c:b9:29:6f:b9:9d:1c:d3:fe:03:ab:33:2f:2d:
6a:2c:fb:9c:f3:c0:95:b9:34:05:5e:ce:aa:77:9d:
a2:da:9d:41:d0:8e:1f:29:a2:62:6b:56:49:aa:ba:
a7:6f:90:22:29:75:fa:7a:e7:81:09:19:cb:4d:ca:
ac:22:75:97:86:77:6d:98:09:12:01:d9:00:9f:d9:
c5:91:d1:b1:11:43:09:e3:8e:06:0e:dc:e6:2d:5a:
2d:68:3c:6d:28:8e:02:88:75:4c:1f:9a:78:37:96:
dd:62:17:e6:a9:d1:92:ff:02:17:f9:b5:54:c3:6e:
15:40:75:03:69:e6:e7:e8:8e:5b:c5:88:bb:20:5f:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2E:2A:C2:5E:1F:62:AC:03:BF:19:9B:DD:1F:30:C8:EA:AD:7E:A1
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/XC4qwl4fYqwDvxmb3R8wyOqtfqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:88:34:6f:2e:06:49:8d:59:79:85:4a:29:5f:e5:2e:88:09:
93:3e:06:e1:be:ca:47:2c:5a:5b:1d:81:b3:93:0b:30:70:e4:
54:0c:3c:cc:d3:66:ef:5d:af:3c:50:7f:e5:bc:eb:6a:8e:14:
d2:24:49:c0:77:44:f6:05:12:c9:b6:65:da:c3:f7:2a:09:2a:
74:2f:4b:e8:ca:ff:05:ee:b6:a0:9f:7f:55:56:4a:db:fd:97:
97:1d:28:5f:c3:ca:bc:87:de:37:82:de:48:58:16:8d:f1:3c:
79:b6:7a:31:e5:ad:6a:c8:db:f1:74:d7:b2:6f:22:ec:02:26:
d4:17:0e:87:76:9d:13:ac:26:12:d9:b1:aa:05:a1:8b:d3:b2:
01:4d:19:7a:06:4e:3b:3e:dd:8f:4a:a7:7f:76:b3:c6:06:bc:
6e:44:9e:c1:a9:d8:b3:37:c3:e1:81:37:70:47:4c:cd:f5:52:
6f:be:5d:b8:b2:01:c2:f9:8c:3e:e0:8c:17:30:85:94:af:bb:
77:0c:79:80:c3:f8:d9:df:5a:42:05:96:c9:1c:5e:fd:65:69:
ca:f5:43:80:a5:76:87:a0:3c:83:e3:71:07:c9:3c:c5:ca:ea:
8b:6d:3c:f9:9b:99:a7:b3:ee:fa:d9:70:33:70:27:77:0c:e3:
f2:36:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:14 2025 by rpki-client