Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rfHS-iSKXit5dXa24dPZHZbCsX0.roa
File: rfHS-iSKXit5dXa24dPZHZbCsX0.roa (raw, json)
Hash identifier: S2DKka+1Y2AWa5UXe/wB9L/yroF0l8aI4NbhBM0LOSE=
Subject key identifier: AD:F1:D2:FA:24:8A:5E:2B:79:75:76:B6:E1:D3:D9:1D:96:C2:B1:7D
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0E71
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rfHS-iSKXit5dXa24dPZHZbCsX0.roa
Signing time: Mon 10 Feb 2025 14:16:22 +0000
ROA not before: Mon 10 Feb 2025 14:16:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38845
IP address blocks: 140.136.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3697 (0xe71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Feb 10 14:16:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ADF1D2FA248A5E2B797576B6E1D3D91D96C2B17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:ef:32:d4:43:47:24:4e:10:87:56:5b:c1:
89:96:14:de:ca:5e:7a:2e:5c:24:ef:27:27:8f:48:
65:98:75:0e:11:42:78:53:60:4d:61:36:d6:30:b5:
1d:0e:8f:2d:13:e5:fe:f1:c7:04:6b:64:de:e6:6e:
ca:46:97:c1:14:23:2f:f5:8a:36:0b:04:be:13:eb:
a5:e8:db:cd:6c:06:8c:34:3a:24:41:54:9d:cb:a0:
aa:4e:d8:23:27:3a:a7:55:d8:2c:a6:42:09:e6:20:
ee:30:21:fa:e3:8b:35:83:5c:5e:ee:25:1e:f6:90:
e3:ab:51:e0:58:28:5b:2e:16:63:b3:a0:59:53:1b:
c1:97:a7:e4:c7:2b:2f:24:0d:f7:45:57:3f:e3:d3:
f0:da:58:5a:ce:87:ce:32:a3:64:e4:fd:74:6b:1b:
01:62:cd:3c:83:73:bd:f5:36:d7:17:b0:c1:54:3f:
20:dd:7e:75:ef:0d:6b:17:68:5a:38:c1:18:a2:0f:
7e:74:58:26:ac:dc:26:0f:24:b2:99:b0:9b:6f:ff:
ca:f6:99:8b:d4:f8:f4:ab:c8:cc:7c:17:10:0b:8f:
de:33:c9:93:b3:a2:18:c5:da:5f:0c:d6:52:55:0a:
52:d1:ca:b3:f3:be:01:24:be:6c:be:82:1f:e1:72:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:D2:FA:24:8A:5E:2B:79:75:76:B6:E1:D3:D9:1D:96:C2:B1:7D
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rfHS-iSKXit5dXa24dPZHZbCsX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:af:7f:88:ce:fe:e9:a1:b0:6d:8e:2f:61:d5:15:b8:f5:78:
64:33:0d:b6:28:49:6e:af:95:76:8a:de:e0:8c:bb:08:6f:a3:
73:4e:40:a9:42:17:86:ca:00:6d:c2:ef:75:2a:0b:fc:15:72:
f2:f5:a7:85:df:43:2f:3e:11:22:aa:d0:19:b5:89:d8:c9:88:
72:6d:a9:36:78:c3:b5:1a:76:fe:78:1b:36:42:88:1b:9f:51:
08:59:f6:0c:9d:59:f9:ff:74:63:c5:dc:5f:52:58:4b:28:89:
97:ba:81:d2:6d:e1:69:a4:0d:5f:1f:64:e5:e1:6c:55:ff:65:
fb:69:96:c1:8b:e9:b6:f5:dd:85:1d:51:bf:1f:47:4c:b0:1e:
8d:4a:47:f3:11:c3:60:2e:96:34:1b:b4:ab:88:ed:d1:9f:6e:
cb:00:2e:af:84:7a:3d:ae:d3:15:62:3c:f1:43:54:48:22:95:
fe:57:3e:d7:19:ef:db:d2:c8:14:7a:27:bb:be:e2:13:d6:64:
d4:69:3c:5a:8b:98:38:bb:d4:1d:41:5c:38:99:65:63:16:43:
1f:5b:ea:0d:bb:b9:90:6f:bc:9e:ae:33:bd:fe:d9:80:fe:99:
6c:eb:e0:7a:fc:2d:59:c6:d5:ab:25:02:8f:c8:c3:3c:f6:91:
88:48:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:00 2025 by rpki-client