Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/tCzbKlRsj4Cr7Q8rEhHenUGYmi0.roa
File: tCzbKlRsj4Cr7Q8rEhHenUGYmi0.roa (raw, json)
Hash identifier: y0dPiSXh/23yjvB0Iy+vRJZSD7vcRbpDFhQ1xHJ+CiQ=
Subject key identifier: B4:2C:DB:2A:54:6C:8F:80:AB:ED:0F:2B:12:11:DE:9D:41:98:9A:2D
Certificate issuer: /CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E
Certificate serial: 05
Authority key identifier: C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/tCzbKlRsj4Cr7Q8rEhHenUGYmi0.roa
Signing time: Thu 19 Dec 2024 15:19:52 +0000
ROA not before: Thu 19 Dec 2024 15:19:52 +0000
ROA not after: Fri 07 Nov 2025 15:30:19 +0000
asID: 63908
IP address blocks: 2401:d620::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E
Validity
Not Before: Dec 19 15:19:52 2024 GMT
Not After : Nov 7 15:30:19 2025 GMT
Subject: CN=B42CDB2A546C8F80ABED0F2B1211DE9D41989A2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:7d:bf:a5:16:08:b1:11:c8:2e:db:84:7b:
c8:30:f3:02:45:7a:67:64:34:75:84:b5:8f:6b:8f:
93:97:c4:d8:7b:17:b5:a1:c7:78:aa:60:59:08:66:
b6:64:05:e1:b0:09:e8:f8:e6:9b:07:7d:ff:31:19:
3b:92:8f:88:b6:4c:e9:25:15:a9:92:ad:f2:98:c6:
f8:94:82:01:35:05:74:fe:50:c2:42:e7:4b:4a:c7:
04:1d:ec:57:3e:a6:eb:7f:31:d7:b0:6f:37:40:2c:
a2:f5:cf:a1:95:6d:56:18:37:bd:62:10:aa:61:2a:
d9:2c:9b:5a:35:b8:b6:80:8b:1e:02:ff:19:8b:b0:
5e:3d:5e:04:8d:f3:ee:98:f7:07:45:c6:25:d9:a9:
67:0e:f0:9c:08:e1:2a:4e:59:8b:bc:39:b7:4a:c9:
47:75:5c:a8:2a:22:98:df:cf:c8:38:fc:b9:1f:af:
b6:41:49:76:fa:ff:83:a4:0b:10:37:67:34:c4:8d:
93:b8:84:4b:b9:6c:c8:06:9b:9b:86:b0:f2:3d:70:
c4:23:b8:e5:84:e9:f5:85:5a:f5:c6:f4:cf:2e:bc:
2d:ce:ab:6f:75:74:a8:b2:ba:7f:bd:fa:9d:79:84:
a9:91:27:84:29:fd:0e:88:ab:f3:b9:40:e2:fa:29:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:DB:2A:54:6C:8F:80:AB:ED:0F:2B:12:11:DE:9D:41:98:9A:2D
X509v3 Authority Key Identifier:
keyid:C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/tCzbKlRsj4Cr7Q8rEhHenUGYmi0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d620::/32
Signature Algorithm: sha256WithRSAEncryption
32:b2:ff:3d:c2:2c:03:b1:2f:37:59:fc:61:b4:6a:0f:c1:7c:
11:4d:24:59:09:fa:da:e9:dc:98:2e:fc:70:3d:73:3e:9d:bc:
69:36:64:72:ca:97:98:76:45:93:51:ee:2f:1c:21:4f:1f:f4:
75:d6:72:14:78:c8:ea:1e:8c:8d:84:14:69:ba:32:5e:5e:96:
25:c3:55:4e:8c:16:a4:62:69:dd:23:ca:30:ab:82:32:19:ac:
c9:11:e7:12:59:e7:d5:47:de:25:3e:e5:94:a7:e3:2d:8c:61:
17:06:ee:34:89:e5:4d:33:7f:36:1c:10:f9:a9:05:b6:c8:cf:
cc:e6:8d:b4:d3:30:46:d1:ef:b9:32:f8:d2:be:fa:39:d7:02:
7b:7b:0c:66:93:69:18:84:e7:63:20:36:92:1f:33:f0:ba:b0:
a6:d7:82:54:d0:15:7a:19:25:f3:17:9d:2d:8d:9f:33:e6:7c:
e6:ed:78:8b:46:bb:71:dd:13:62:03:5e:a8:71:b9:59:c1:b9:
a3:b3:2d:b6:81:32:b1:52:ca:db:cc:dd:02:4e:4b:ea:5d:dd:
99:b4:23:28:f9:93:74:ef:84:04:1e:49:e0:c2:5d:85:8b:7b:
37:a7:e5:58:ba:d0:6d:a0:53:24:58:fd:53:33:d6:b8:1d:1e:
8b:77:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:37:58 2025 by rpki-client