Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/yQLgjITh7Zfs6hql7Et6yfpihK0.roa
File: yQLgjITh7Zfs6hql7Et6yfpihK0.roa (raw, json)
Hash identifier: a0GOH7u+mK4KLBOVsqfZ8ks+/KzIssc9FJgoSRG2VcY=
Subject key identifier: C9:02:E0:8C:84:E1:ED:97:EC:EA:1A:A5:EC:4B:7A:C9:FA:62:84:AD
Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial: 03AF
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/yQLgjITh7Zfs6hql7Et6yfpihK0.roa
Signing time: Mon 10 Feb 2025 13:46:06 +0000
ROA not before: Mon 10 Feb 2025 13:46:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38846
IP address blocks: 2407:a0c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Validity
Not Before: Feb 10 13:46:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C902E08C84E1ED97ECEA1AA5EC4B7AC9FA6284AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:83:00:a4:8e:fc:e7:0c:c2:bd:2c:09:3d:
ba:32:0b:7f:7e:a0:44:b8:d6:ca:2e:ba:ba:5f:45:
ad:b0:c6:ff:32:48:ce:82:a7:3b:d9:64:d4:44:e7:
9f:cb:46:c8:7f:ac:c4:90:9e:79:18:1c:7a:0c:3d:
ad:79:e3:de:4c:a9:de:a4:f4:38:f9:d7:50:c1:a4:
28:43:68:8b:82:a3:b7:e7:57:2a:ec:5c:04:d1:5d:
e4:17:2b:f4:8f:8b:cc:37:33:cb:50:7c:1a:b6:52:
df:8f:58:fa:c2:41:ff:21:87:29:cb:ef:9f:c9:30:
ea:e2:a1:d4:c5:c5:e5:68:8c:6c:3e:d4:46:6a:8c:
1d:51:94:1d:c4:33:17:fe:74:a6:fd:c8:b7:9d:f8:
c5:ac:b4:af:82:fc:c4:7e:48:cc:d8:8c:89:5d:f1:
4d:8e:22:1c:7f:d4:f0:4d:f0:6d:cb:d5:1b:cd:f9:
4f:59:10:71:86:f5:6c:d7:d0:13:7c:7b:fc:21:69:
f6:10:2e:ae:14:ed:63:f2:95:72:80:80:06:20:37:
de:79:59:4a:f7:e0:a3:a8:66:03:72:69:ff:cf:af:
93:c8:ab:3b:4e:02:04:78:89:f1:62:29:6a:c3:d1:
d2:f1:88:81:93:31:fb:c0:f7:cd:71:23:84:23:62:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:E0:8C:84:E1:ED:97:EC:EA:1A:A5:EC:4B:7A:C9:FA:62:84:AD
X509v3 Authority Key Identifier:
keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/yQLgjITh7Zfs6hql7Et6yfpihK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
73:4a:33:0e:c1:0f:e4:d0:20:da:7b:b0:27:49:5a:a1:1b:b2:
4a:de:f1:c7:48:ca:90:b7:f9:60:cd:6f:ae:74:74:a4:0b:fe:
3f:08:45:40:41:8b:55:98:77:ee:d7:13:04:04:ff:c3:12:22:
04:8f:1e:51:2c:64:e0:6f:d5:5b:69:83:20:3f:13:ac:c1:01:
fc:83:a6:6d:4b:5b:c8:32:fc:06:76:6c:30:50:c5:8d:8e:cf:
f6:e6:59:a2:5e:ba:6b:27:7f:bb:6d:5e:20:3f:90:1a:b5:bf:
c2:c3:79:59:bd:88:02:37:a2:14:e0:c9:cc:54:93:2d:c3:5c:
ed:20:18:6b:43:ae:a5:cf:bd:84:b3:62:a9:70:17:47:8a:4e:
73:9b:5e:96:b4:3d:44:f8:a9:e8:dd:06:de:d5:7d:6b:66:43:
73:1b:5e:8c:76:a6:7d:d0:62:70:ac:45:ed:99:63:2f:ae:fe:
92:a5:1e:55:53:8b:ac:72:3c:5a:1c:ab:9d:13:c8:1f:22:00:
54:73:d9:1a:ae:e6:b0:1e:b9:2e:a6:fb:c5:df:87:d9:3a:32:
12:2c:ca:19:38:e8:33:ea:e7:2d:f4:a4:11:80:9c:7c:6b:85:
2a:30:f5:e1:d9:84:0a:c2:0d:1a:53:28:73:2c:87:aa:a9:2f:
13:fc:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:34:41 2025 by rpki-client