Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/_RQwJ3q-T1rW30HhBCyvNCPsPg4.roa
File: _RQwJ3q-T1rW30HhBCyvNCPsPg4.roa (raw, json)
Hash identifier: oz3S9A3U7mhNGETMOF/4xL2lYmYnEAwk3WvSR16CEAg=
Subject key identifier: FD:14:30:27:7A:BE:4F:5A:D6:DF:41:E1:04:2C:AF:34:23:EC:3E:0E
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 018A
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/_RQwJ3q-T1rW30HhBCyvNCPsPg4.roa
Signing time: Mon 10 Feb 2025 13:44:14 +0000
ROA not before: Mon 10 Feb 2025 13:44:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 398704
IP address blocks: 202.160.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Feb 10 13:44:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FD1430277ABE4F5AD6DF41E1042CAF3423EC3E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:8e:f6:39:c2:83:8c:6e:b6:85:7f:b2:17:
42:ff:f1:0e:56:3f:ac:72:2c:ac:40:01:b3:e6:09:
82:bd:41:59:46:df:d9:78:06:e4:d4:df:13:6b:62:
c6:b5:6f:2e:b4:6b:46:2e:98:1e:56:d2:0e:05:a3:
79:3b:ff:65:4f:f7:a1:62:d3:68:7b:63:da:cf:67:
26:5b:ab:34:7a:e3:9b:93:e7:f2:fb:3f:e1:1c:bd:
6a:83:1a:ca:88:54:9b:ec:8b:b1:51:c0:e5:1f:7c:
6d:6f:f5:f9:f1:31:00:8f:91:bc:a8:92:80:d4:2c:
eb:62:ef:0b:5a:79:ac:95:99:80:3e:0f:a6:23:34:
c5:24:bd:fc:8a:1d:90:60:98:76:ab:b9:e0:26:b1:
3e:a1:46:88:4a:90:6b:25:bd:6f:71:c1:21:8e:6b:
ea:9f:7e:bb:f6:c9:3e:61:ed:d9:86:0d:e4:e6:8b:
20:00:f6:1e:41:6b:07:c7:d0:da:f7:ba:46:50:35:
fe:ef:22:4a:85:61:54:87:cf:8d:2c:d7:52:4c:82:
d4:67:67:20:f2:8e:65:6a:45:31:db:30:05:4b:70:
39:80:ef:a5:27:84:c8:01:6e:40:52:b8:11:5d:fd:
f3:06:30:16:0b:77:37:93:ee:05:16:1f:2e:50:4b:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:30:27:7A:BE:4F:5A:D6:DF:41:E1:04:2C:AF:34:23:EC:3E:0E
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/_RQwJ3q-T1rW30HhBCyvNCPsPg4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:da:5e:56:4a:c5:b8:13:fd:65:96:de:c7:48:94:ef:49:9c:
f5:76:a2:59:50:38:be:e1:48:5d:3d:59:e2:40:16:e0:61:04:
33:34:dd:68:48:89:be:76:c4:18:6b:c8:a9:3e:5c:c5:d3:32:
15:b5:18:b1:da:3b:5f:49:28:b5:8a:d3:0b:ca:05:e2:87:2b:
d2:9c:e6:b8:42:ef:e4:68:97:b2:c2:d6:0a:a4:a1:fd:80:12:
53:ea:be:41:c7:e5:89:a6:78:3d:74:60:48:06:09:03:3d:e4:
80:28:d6:ef:d9:28:bb:5c:ce:82:be:5b:92:76:9b:e8:2d:5e:
de:2e:79:54:7a:b3:d7:61:cc:7d:71:5d:1b:17:9b:52:19:a7:
9a:31:c1:80:a2:a5:69:dd:81:fb:11:19:10:b9:15:4d:fb:b4:
f9:bc:20:63:b4:a8:34:3f:fa:df:de:47:64:02:60:2e:2c:b0:
0e:54:8e:e2:ef:07:14:5a:49:09:a3:e7:52:6c:84:f6:96:ed:
48:56:96:7c:8e:fa:73:10:50:70:17:af:af:63:64:8a:df:a2:
d3:af:26:5f:ca:42:dd:cf:e2:0b:7a:6f:25:da:2f:b1:a8:da:
43:85:90:45:25:3f:23:a7:bd:6a:94:38:d1:84:f0:dc:97:3b:
5b:41:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client