Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/m--XTl6ODQna1y2GDkzIokNNgMg.roa
File: m--XTl6ODQna1y2GDkzIokNNgMg.roa (raw, json)
Hash identifier: bJSGzBvM3DP1aL5VrOhy0VwGKk0F4h/0rlV81Vgh67I=
Subject key identifier: 9B:EF:97:4E:5E:8E:0D:09:DA:D7:2D:86:0E:4C:C8:A2:43:4D:80:C8
Certificate issuer: /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial: 0C24
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/m--XTl6ODQna1y2GDkzIokNNgMg.roa
Signing time: Mon 26 Aug 2024 05:35:09 +0000
ROA not before: Mon 26 Aug 2024 05:35:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 2403:a340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Validity
Not Before: Aug 26 05:35:09 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9BEF974E5E8E0D09DAD72D860E4CC8A2434D80C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:01:da:7a:d9:37:f6:ac:01:83:f6:b6:b0:
4f:36:38:a4:42:68:55:fd:82:cc:01:24:af:63:58:
9d:a0:4d:b8:cc:f8:54:dd:30:b6:ba:18:26:a3:bd:
cf:6c:2e:a6:12:f7:9e:94:a0:12:4f:dd:b8:cf:99:
c3:1f:55:db:62:d5:cf:64:ce:f1:08:26:4d:4d:f3:
fc:0d:84:77:63:0a:ab:87:f3:e8:20:39:f9:59:2d:
0c:4a:e5:80:c6:7a:6c:84:21:69:c0:43:e3:bd:f0:
be:c3:bb:df:b8:da:f5:aa:c2:56:be:45:af:79:8f:
15:62:ce:d0:35:68:6f:cb:42:90:8d:89:2d:d3:b8:
29:a6:9b:b7:53:0c:c8:0c:8f:bd:d5:47:31:9b:80:
03:81:b5:70:d2:a4:79:04:56:1d:df:b8:88:08:a0:
cc:64:1a:d8:21:ae:fc:3e:9a:5a:22:6d:d1:b5:71:
1b:ef:04:1c:44:c1:0b:ec:3a:39:90:f3:10:da:11:
08:8d:63:14:92:d2:0e:fb:69:37:72:57:32:bd:43:
92:e7:b6:3b:74:54:3d:3f:99:51:90:20:be:b5:39:
5b:f4:a4:e1:06:6c:cc:cc:93:b7:ba:02:95:87:b1:
55:07:c5:d4:85:af:b2:a6:5b:c9:1b:0a:2c:b5:42:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EF:97:4E:5E:8E:0D:09:DA:D7:2D:86:0E:4C:C8:A2:43:4D:80:C8
X509v3 Authority Key Identifier:
keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/m--XTl6ODQna1y2GDkzIokNNgMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a340::/32
Signature Algorithm: sha256WithRSAEncryption
a6:60:de:7d:1b:a3:e3:4a:22:58:87:63:0f:d3:cf:80:76:ce:
c1:9f:25:0f:1a:ec:e9:58:96:5f:2a:d8:f6:05:38:3c:b0:4e:
e7:9e:74:11:e9:cf:45:8b:63:7f:62:c6:31:52:db:a5:3e:da:
41:af:3d:be:c6:6a:d6:a0:66:43:56:59:4d:8b:aa:89:9a:a5:
cd:0b:7b:26:dd:87:c2:c7:8d:ca:0f:d5:9a:b9:a2:71:a5:48:
90:40:8f:84:b1:04:3e:2f:dc:6e:12:7b:44:ec:22:01:b4:a8:
ca:0a:6c:0d:18:16:66:50:ed:a1:d6:0b:58:6b:b3:13:66:cc:
4e:d1:dc:75:23:a2:f6:ba:7f:00:7c:ba:df:0b:e2:97:ea:8a:
00:32:58:9d:f7:93:39:77:1b:66:e2:10:08:7b:1c:51:8c:1e:
79:b1:21:68:5c:47:7a:0b:24:19:49:c3:d5:f7:b1:0b:68:19:
dc:d3:dc:36:a2:0a:d3:b0:d3:95:84:c4:de:74:73:3b:ab:65:
84:6d:dc:77:92:28:33:29:49:b6:cf:db:66:e3:67:66:84:75:
ca:7a:2a:11:53:16:25:b2:6f:5a:b8:c1:bc:2f:c1:8f:34:18:
25:5d:b3:42:61:7b:c5:5f:45:bb:9e:e9:00:84:9d:c3:72:7b:
25:9a:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:28 2025 by rpki-client