Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/GZovDGuzkgwGOWPwMcUFJ7mKk0c.roa
File: GZovDGuzkgwGOWPwMcUFJ7mKk0c.roa (raw, json)
Hash identifier: x8mmtMtczdGddGgtVGqPmbMxwoiojjVl69PGL7ZzxSc=
Subject key identifier: 19:9A:2F:0C:6B:B3:92:0C:06:39:63:F0:31:C5:05:27:B9:8A:93:47
Certificate issuer: /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial: 0886
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/GZovDGuzkgwGOWPwMcUFJ7mKk0c.roa
Signing time: Mon 30 Nov 2020 17:46:14 +0000
ROA not before: Mon 30 Nov 2020 17:46:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 2403:a340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Validity
Not Before: Nov 30 17:46:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=199A2F0C6BB3920C063963F031C50527B98A9347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:90:19:26:61:f7:2c:1e:45:30:b4:34:43:
39:86:04:b9:32:31:9d:f5:c8:16:12:68:48:b4:57:
3a:bf:d1:0e:d8:b9:d5:c2:b8:c6:2a:de:e0:2e:88:
fa:0d:3c:47:bf:61:01:98:2a:93:4d:54:e1:82:c3:
ec:15:e8:48:5b:c2:c3:67:dd:32:4a:32:8b:72:f6:
ba:d3:54:1a:93:12:6f:7f:0c:2c:55:31:0f:e2:59:
09:3f:3d:59:20:35:c7:69:fe:84:56:1b:d2:46:66:
0a:6c:a1:17:65:56:b1:45:d0:1a:4b:fc:b1:2d:2c:
87:0b:50:f4:23:47:b1:85:49:1e:5d:c3:e5:44:ac:
95:83:e1:33:5e:28:e1:f2:b8:f8:54:32:2c:b6:66:
99:cb:78:34:6f:47:cd:1b:a0:50:0e:9e:f9:80:fc:
43:a3:98:44:53:15:fd:01:c7:a8:d1:d7:2b:9e:1b:
d9:f5:5a:6f:71:3f:07:2c:e0:ba:6b:b5:18:15:e1:
48:eb:ac:68:88:6d:08:43:46:54:d1:8a:58:a8:5f:
a2:31:53:ba:29:e9:31:5a:d8:8e:6a:f7:4e:91:46:
5c:f4:55:53:11:d2:71:3b:16:cc:04:b3:c2:d1:d9:
12:32:f7:b7:5f:6d:a5:ea:42:70:a7:5c:c0:c8:13:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:2F:0C:6B:B3:92:0C:06:39:63:F0:31:C5:05:27:B9:8A:93:47
X509v3 Authority Key Identifier:
keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/GZovDGuzkgwGOWPwMcUFJ7mKk0c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a340::/32
Signature Algorithm: sha256WithRSAEncryption
23:0b:ed:fc:1b:b6:a9:a6:b8:61:1e:df:04:01:b7:58:bc:38:
64:a9:6e:c0:75:a6:34:66:c5:44:00:b2:c9:5a:d3:c7:59:25:
87:8b:2f:b4:a8:0f:77:79:47:da:1c:d6:01:05:43:92:fc:0d:
ec:07:a5:e5:64:03:a6:2a:dd:ca:ee:61:fd:f6:e2:3e:c2:a5:
46:c8:ce:b3:45:c6:42:ff:10:4d:5c:22:83:9a:1c:40:85:ba:
ca:dc:83:1e:9c:b2:be:ae:fd:a7:43:3d:16:c2:3b:b2:ad:b5:
cb:e2:aa:b7:80:5e:68:df:2e:a2:0d:b1:da:e3:24:a1:c0:5d:
79:b1:e8:f9:3e:89:a2:33:32:02:e9:cd:cf:d4:0e:89:50:81:
1e:61:4f:d8:da:de:1e:e1:46:73:3a:8e:54:fe:e8:98:fe:40:
71:b6:39:ce:c0:ab:ce:f0:e6:01:98:7c:f7:fe:58:65:48:b8:
8a:47:50:31:f6:0d:9b:96:db:85:4e:44:1e:4e:dd:b0:07:54:
1b:e2:5b:41:dd:27:4e:23:63:77:dd:6d:91:2e:92:0b:44:c0:
ce:92:e9:ab:6e:37:7a:31:08:a2:8e:c6:f9:5e:50:9c:60:a1:
89:6c:f9:d5:eb:62:04:ae:40:f2:64:b0:dd:46:2f:ce:d4:6b:
e4:63:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:10 2025 by rpki-client