Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TISNET/GQ3_5ModawqOOeY68gMX4E-nvuY.roa
File: GQ3_5ModawqOOeY68gMX4E-nvuY.roa (raw, json)
Hash identifier: 0bhF9oObcgfuasWjuWpxK9oRcdiLK4+4BjF+4URTO08=
Subject key identifier: 19:0D:FF:E4:CA:1D:6B:0A:8E:39:E6:3A:F2:03:17:E0:4F:A7:BE:E6
Certificate issuer: /CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Certificate serial: 0183
Authority key identifier: 06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/GQ3_5ModawqOOeY68gMX4E-nvuY.roa
Signing time: Mon 10 Feb 2025 14:23:10 +0000
ROA not before: Mon 10 Feb 2025 14:23:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7535
IP address blocks: 139.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06AE1480CEFC5CE08029297F4D49CBCABD6CE2F2
Validity
Not Before: Feb 10 14:23:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=190DFFE4CA1D6B0A8E39E63AF20317E04FA7BEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:10:5e:97:0a:16:43:db:25:42:f6:72:f0:
fd:83:f9:ae:ab:f7:6a:da:c2:57:c9:76:ee:fe:ab:
89:85:3b:8a:64:a6:84:7a:d1:e6:19:84:0d:98:1d:
57:95:68:e2:f3:70:d1:ac:7a:e7:9d:fe:99:fa:cd:
e5:00:d9:2e:09:ab:5b:2f:36:74:be:c6:3f:eb:02:
56:64:3b:42:63:c4:e8:5e:b3:1a:9e:3e:60:4d:85:
d8:c7:38:ab:b2:05:c8:ff:05:97:d8:9d:66:86:d5:
37:c3:50:bd:c8:9a:b4:98:99:b8:65:13:eb:2c:49:
e4:0b:d0:37:4f:45:0d:74:73:fb:92:ae:a9:54:f7:
24:6a:58:50:70:8c:8e:a3:e8:91:b9:d9:18:15:63:
a8:de:58:f3:31:f5:01:d7:5d:95:e7:4c:13:e2:3b:
24:dc:78:05:9c:48:20:66:e3:72:16:a5:bf:b0:5f:
7f:ae:d1:0b:db:da:aa:0c:6b:3c:f8:9c:1c:3d:55:
f7:5c:55:93:fa:4f:25:55:82:b8:89:b4:54:b9:94:
72:1e:18:a1:3e:f3:bf:2f:22:53:48:b9:c9:28:4e:
85:b5:a0:a8:27:0a:bd:de:20:a8:60:46:4f:66:c8:
f7:a4:ee:94:f7:14:bc:7d:91:a2:5b:69:5f:4e:89:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:FF:E4:CA:1D:6B:0A:8E:39:E6:3A:F2:03:17:E0:4F:A7:BE:E6
X509v3 Authority Key Identifier:
keyid:06:AE:14:80:CE:FC:5C:E0:80:29:29:7F:4D:49:CB:CA:BD:6C:E2:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/Bq4UgM78XOCAKSl_TUnLyr1s4vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TISNET/GQ3_5ModawqOOeY68gMX4E-nvuY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:7e:ec:bc:e4:0e:b0:5a:ec:b0:14:3f:82:3c:3c:a4:33:bb:
c0:c1:b9:e1:a9:9c:8d:2d:1d:b7:2e:97:e7:26:c2:31:7d:24:
1d:c0:c1:f3:80:b5:3f:7f:c7:7c:9f:79:85:c8:d8:fa:37:49:
d6:40:14:47:0b:de:44:34:8a:81:f5:ad:df:64:67:85:ac:80:
34:5d:95:05:60:b6:65:78:c2:65:c6:41:93:00:95:b7:d4:44:
18:00:bd:9a:80:42:d2:55:12:50:ce:0e:39:44:ea:73:89:13:
cf:c5:2c:2d:f0:64:64:e4:6a:25:0a:23:80:3f:c7:45:aa:db:
a5:2f:22:a7:22:e9:27:41:a8:54:db:b1:0e:94:99:3a:b4:7e:
c7:64:8a:f5:cb:f9:61:4a:88:39:4a:87:88:37:34:39:32:5a:
97:be:28:24:6b:cb:92:1e:b2:fe:c2:31:15:6b:df:37:3d:c9:
41:e0:d1:8c:3f:17:0a:f8:64:35:ab:87:d6:8e:31:9f:05:f6:
a1:06:d4:b5:d9:24:fe:71:6f:df:03:80:18:00:dc:0a:30:3e:
36:47:0b:fd:3f:79:8d:f7:ec:58:49:43:57:9f:1f:53:1b:33:
77:c2:e9:5d:d3:7d:04:4c:c9:91:97:ed:9b:42:d8:b1:09:c7:
ae:a2:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:24:40 2025 by rpki-client