Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fxu6iBs-dOs1aJcoM6YSPNL4A2w.roa
File: fxu6iBs-dOs1aJcoM6YSPNL4A2w.roa (raw, json)
Hash identifier: qh/ATUv54Fz8Ylmz2mb6vNurL2bIB114rKyLGiEUj8c=
Subject key identifier: 7F:1B:BA:88:1B:3E:74:EB:35:68:97:28:33:A6:12:3C:D2:F8:03:6C
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0E88
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fxu6iBs-dOs1aJcoM6YSPNL4A2w.roa
Signing time: Mon 10 Feb 2025 14:16:28 +0000
ROA not before: Mon 10 Feb 2025 14:16:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18047
IP address blocks: 140.114.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3720 (0xe88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 10 14:16:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7F1BBA881B3E74EB3568972833A6123CD2F8036C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:63:49:74:76:52:b2:76:3f:9b:7b:40:03:
92:d5:06:a1:92:fa:6d:87:27:64:f3:e1:67:a7:f4:
1f:96:d9:b7:c2:04:c0:5f:bb:e9:32:83:32:e8:33:
eb:4e:04:b2:fa:b4:7a:e6:27:92:66:6a:3c:41:dc:
8b:12:45:b1:e1:6d:e7:b4:de:df:f7:4d:ef:6f:03:
be:cd:9c:27:06:a4:3c:58:e0:4b:f7:1e:9d:fb:7a:
b9:bb:99:bd:66:6b:82:e6:64:34:95:45:3c:4e:99:
a2:75:1e:a7:79:e8:d5:76:e7:04:53:98:3a:04:24:
15:e1:f4:6c:16:05:5c:ff:c9:43:27:8b:ad:1b:22:
11:f0:91:6b:b1:0f:17:df:c5:56:74:98:95:9e:03:
f7:e7:50:59:cc:d2:32:c8:e6:fe:e0:aa:0b:77:50:
9b:72:33:75:7f:67:09:ae:18:d6:de:ba:d9:75:5a:
24:06:8c:17:a6:18:46:a0:19:60:7f:f6:cf:59:fc:
57:04:fb:50:9a:3f:e5:4d:33:98:dd:ae:9a:d2:1d:
09:04:64:6c:87:aa:90:7f:50:4a:bf:40:49:22:ee:
47:b3:61:3b:fa:67:6f:b1:d2:49:de:8c:68:ad:c2:
1c:95:f0:96:0a:1c:63:94:69:10:e5:09:60:73:a2:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:BA:88:1B:3E:74:EB:35:68:97:28:33:A6:12:3C:D2:F8:03:6C
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fxu6iBs-dOs1aJcoM6YSPNL4A2w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:1d:6a:a4:7f:96:bb:5c:98:9e:25:c2:8e:c4:6e:6c:1a:e6:
44:da:e3:4a:40:2e:4d:2f:40:cf:cb:ad:f6:08:68:5f:8c:b8:
cf:f5:8b:20:6e:c2:5c:b6:b6:97:9d:96:ba:c2:2c:b7:7e:fc:
38:2c:2c:fd:61:9b:db:86:6a:c3:38:31:a3:6e:71:e8:84:b0:
2c:c8:42:1e:2f:40:7d:41:ea:ce:90:98:81:e3:7c:8e:bc:96:
1b:96:28:31:db:81:df:70:7b:5b:c8:0c:c8:c7:fe:a9:c5:12:
1c:19:fd:98:8e:53:af:e8:35:64:67:40:56:b9:eb:05:81:25:
2d:d7:06:54:11:55:fa:b3:8b:41:6e:fb:db:50:47:6e:fe:c1:
73:1d:20:09:0c:1c:8b:8f:44:a2:05:26:5e:87:d1:d5:a1:4d:
ad:25:2c:a0:ca:a3:13:1b:79:b2:bf:36:af:85:29:a4:41:3c:
a5:18:1c:21:60:c3:ef:45:1c:67:f1:c4:f1:cd:c7:94:48:5d:
cd:7d:64:ea:6c:97:eb:8f:d4:93:83:28:67:d0:a2:29:1c:61:
b7:26:86:6a:75:07:c7:7e:d2:e9:eb:79:1f:72:81:08:28:b3:
cf:3a:c1:29:4c:6c:0d:35:7f:a9:3d:ba:eb:56:cc:59:fa:8e:
c3:7b:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:22 2025 by rpki-client