Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTC/VHvpjmma9V9L1G-BHoOfQWx3A-A.roa
File: VHvpjmma9V9L1G-BHoOfQWx3A-A.roa (raw, json)
Hash identifier: sBmIJJodtJ2tQw5Q+EsHp9SyLj+nL2rmacoOmDGmknI=
Subject key identifier: 54:7B:E9:8E:69:9A:F5:5F:4B:D4:6F:81:1E:83:9F:41:6C:77:03:E0
Certificate issuer: /CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
Certificate serial: 0BD4
Authority key identifier: 62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/VHvpjmma9V9L1G-BHoOfQWx3A-A.roa
Signing time: Mon 26 Aug 2024 05:28:17 +0000
ROA not before: Mon 26 Aug 2024 05:28:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63900
IP address blocks: 115.42.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623B7714A03827FDE7D232BD8F4E01A29FB471DE
Validity
Not Before: Aug 26 05:28:17 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=547BE98E699AF55F4BD46F811E839F416C7703E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:b0:1f:32:91:e5:bf:27:77:1f:56:98:f3:
52:cc:0b:e1:d6:e9:ab:06:69:d3:ef:3a:6d:a1:aa:
74:c2:15:d8:c2:01:ff:cb:13:f6:0e:7d:80:da:b6:
2f:1e:04:14:c1:87:7c:a1:f7:d7:9c:81:68:89:74:
8b:64:fe:72:72:8e:c1:3d:f5:6f:4c:c1:42:45:0c:
bb:9a:6f:37:21:f4:26:f4:1b:a6:9b:30:eb:fd:b7:
7d:68:d2:2c:b3:fa:72:58:07:9b:68:04:17:a8:d8:
1f:99:d8:ee:65:12:16:7a:9e:11:cc:f5:ab:dc:e4:
73:ad:69:8a:30:e4:ab:6b:fc:71:ae:8f:95:d1:64:
77:e6:4a:b9:47:45:b9:b0:11:53:23:1b:87:75:ff:
a4:34:c6:56:cd:ed:e1:0d:c0:6b:28:0a:8f:bd:53:
d6:ec:b1:30:38:c1:0a:cc:a2:6f:57:30:15:98:01:
5d:d3:c2:f5:01:72:27:75:76:31:a1:e1:49:17:19:
2e:fd:02:16:44:ba:9a:f0:95:75:8c:43:4f:0e:32:
f1:17:4c:b7:2c:5d:3d:a9:09:bd:a9:df:48:fb:76:
d0:c1:47:65:a6:2e:4e:ab:39:54:e1:b0:a5:0d:51:
fd:e7:9d:34:0b:db:da:ca:16:fe:ab:8a:ee:42:f0:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:E9:8E:69:9A:F5:5F:4B:D4:6F:81:1E:83:9F:41:6C:77:03:E0
X509v3 Authority Key Identifier:
keyid:62:3B:77:14:A0:38:27:FD:E7:D2:32:BD:8F:4E:01:A2:9F:B4:71:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/Yjt3FKA4J_3n0jK9j04Bop-0cd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yjt3FKA4J_3n0jK9j04Bop-0cd4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTC/VHvpjmma9V9L1G-BHoOfQWx3A-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.42.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f4:42:6b:cf:61:ba:7c:5f:9c:27:7e:66:f5:40:4f:27:33:
f9:17:57:f7:1a:c4:dd:b1:e8:3a:f3:78:53:43:be:d9:53:db:
99:ae:7b:65:de:bc:56:20:62:0e:cd:23:3d:ab:b8:2c:9c:01:
ba:27:74:b2:ce:13:af:52:d1:9a:eb:9b:75:cd:11:3f:a4:ac:
0a:52:5e:06:27:df:71:ee:e5:20:9b:41:5b:38:23:cf:0f:14:
d8:4c:c2:d9:a3:22:b1:a2:e6:69:ee:c7:53:6f:ba:20:f1:1a:
fd:ba:24:8e:72:c5:86:f3:17:a0:3f:37:4d:c2:e8:b8:ad:95:
22:22:40:9b:96:43:38:44:f2:18:70:65:e9:ce:be:74:de:2f:
2d:08:57:37:25:4b:35:79:f3:7b:99:56:8e:44:67:26:90:8d:
77:f0:40:2b:0c:19:6b:19:ce:5a:13:e0:49:75:48:1b:70:f6:
03:3e:34:51:c2:1d:34:ee:f3:80:44:56:f3:b3:2e:a2:f4:0e:
a2:db:4e:84:62:21:49:0e:b5:6a:37:18:ce:31:dd:6d:89:7b:
7a:73:12:ca:c0:1f:60:16:9c:2e:6a:6a:63:c6:f7:2b:59:ef:
41:27:64:12:98:65:5b:28:08:e8:fd:74:cb:64:1c:7b:6c:f4:
e1:50:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:03 2025 by rpki-client