Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa
File: XLK2QiHP0DOpko1zqJefV9domko.roa (raw, json)
Hash identifier: /T5ZJQ2U2fHAQS7CMXsHDZMPYXBABqSbP22mV+D3KxM=
Subject key identifier: 5C:B2:B6:42:21:CF:D0:33:A9:92:8D:73:A8:97:9F:57:D7:68:9A:4A
Certificate issuer: /CN=35D63F285426D9D57209D42C46B9125B23A78EC1
Certificate serial: 0174
Authority key identifier: 35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa
Signing time: Mon 26 Aug 2024 05:28:23 +0000
ROA not before: Mon 26 Aug 2024 05:28:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63908
IP address blocks: 2400:ebe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35D63F285426D9D57209D42C46B9125B23A78EC1
Validity
Not Before: Aug 26 05:28:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5CB2B64221CFD033A9928D73A8979F57D7689A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:8f:bc:00:8a:c8:1f:f1:44:06:b8:2e:ff:
37:20:17:e2:32:68:97:c4:af:55:93:32:ce:28:4a:
7b:cb:ea:48:85:bd:48:00:d8:fd:3b:2b:8f:1c:3e:
35:e8:ad:50:75:11:33:02:f1:98:29:e0:3e:c6:8b:
ff:d9:ed:fc:7b:1e:52:52:83:9d:07:48:c2:e1:1f:
37:e9:59:d1:64:8c:02:be:d9:33:62:62:62:1b:c7:
8b:36:0c:22:24:52:51:3f:b1:90:34:82:36:6b:2a:
b8:47:39:1e:62:0e:c5:f9:42:1a:fb:ab:d6:fb:a8:
96:d9:e0:e0:68:9a:c0:06:ec:d7:23:a0:98:87:81:
4e:ed:d4:5f:ec:c8:f4:39:43:ae:70:db:2b:a3:b6:
68:25:17:fe:6a:15:d4:e7:43:86:63:b7:f6:da:52:
84:31:ab:9d:ff:f6:de:2b:ee:58:97:f8:c7:af:9e:
ed:2b:60:01:dc:13:d1:db:df:89:9a:6e:84:59:b3:
8b:ad:7a:2c:ad:15:aa:a4:48:f4:4c:d1:3c:9c:ab:
58:b3:7f:8f:37:89:29:e9:6d:29:d6:e7:84:c4:3d:
b8:32:a7:c7:c1:25:01:97:d8:92:8a:13:f7:bf:11:
8d:5f:3e:7b:d6:6d:4e:c3:c7:3e:64:81:6d:ea:5d:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:B6:42:21:CF:D0:33:A9:92:8D:73:A8:97:9F:57:D7:68:9A:4A
X509v3 Authority Key Identifier:
keyid:35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:ebe0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:89:79:9e:ef:93:80:9e:b3:7e:1e:c8:a1:61:e6:a9:fe:50:
35:f6:f5:c2:7a:a8:dd:d3:3b:05:42:d7:2f:5d:d8:de:7f:af:
7b:50:cd:b5:8c:fd:3e:33:07:ba:01:3b:9d:fa:a0:02:e4:33:
92:b4:56:67:5d:7d:1f:8f:91:d6:5a:a4:83:81:de:7d:ff:36:
93:2f:30:3e:01:04:e6:06:bd:b0:d0:80:66:1b:47:ea:23:d0:
1b:25:65:3e:9f:d2:cc:37:81:e8:78:d3:d8:7c:68:74:3f:20:
12:93:cd:d7:1a:9e:0d:7f:90:fa:8f:e3:53:b9:08:13:09:9e:
b9:72:53:d1:be:70:e8:db:66:5f:11:2e:05:00:7b:0c:cf:ef:
c8:af:5c:41:46:a5:72:fe:33:81:fd:b7:ef:22:97:9d:6a:dd:
92:27:41:f9:dd:ae:f8:2d:d8:8e:1d:80:91:c0:b0:22:1e:3f:
28:b4:04:bf:14:9f:d9:35:ef:dd:38:8c:b4:14:76:95:98:11:
38:55:73:7d:79:68:aa:8b:d7:6c:69:e4:b4:ef:21:fc:8f:a1:
87:12:6c:34:98:61:94:06:ab:59:26:f1:b0:86:62:bc:e0:1a:
dd:43:99:77:b3:8f:bd:ef:1c:6c:b0:1a:d9:32:44:55:d7:fe:
ff:f3:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:50:48 2025 by rpki-client