Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZAT/z2eX_l3sGtM1IxPMsV-mRJ-Cv6I.roa
File: z2eX_l3sGtM1IxPMsV-mRJ-Cv6I.roa (raw, json)
Hash identifier: MhqGQEZlYw60SIxqkHp0WQgzxONt5iMi5p2bE4gJP54=
Subject key identifier: CF:67:97:FE:5D:EC:1A:D3:35:23:13:CC:B1:5F:A6:44:9F:82:BF:A2
Certificate issuer: /CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Certificate serial: 0138
Authority key identifier: 41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/z2eX_l3sGtM1IxPMsV-mRJ-Cv6I.roa
Signing time: Mon 10 Feb 2025 13:45:07 +0000
ROA not before: Mon 10 Feb 2025 13:45:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 210.79.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41D608336CCF0EDFEA4A24614F1D7234884E8991
Validity
Not Before: Feb 10 13:45:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CF6797FE5DEC1AD3352313CCB15FA6449F82BFA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:df:7e:7b:44:a8:9b:1e:42:36:c3:cd:19:
df:af:58:76:24:d7:e4:39:d4:ae:83:45:58:b4:56:
b6:f5:22:38:e9:9a:c0:f0:bf:89:5d:c6:84:d6:86:
bc:00:9d:62:62:7d:c0:ab:72:cf:b6:b8:8f:77:51:
97:6e:c0:e0:50:ff:a6:24:d8:0a:8e:b9:d3:67:dc:
6f:35:3b:e2:e1:1c:d8:3d:d6:61:c3:5e:47:28:89:
10:26:df:f6:4a:9d:f3:f9:91:f0:81:5a:16:c7:48:
b7:26:a2:39:4d:22:48:81:05:b3:60:4a:7a:6c:4c:
08:11:41:11:5c:85:04:d1:27:35:71:f7:0d:1b:f4:
eb:1f:10:e4:12:58:f2:da:1b:c9:74:b2:98:51:ae:
e4:14:bd:ba:13:ba:a1:68:f2:dc:1c:22:42:dd:a9:
75:7f:1f:c3:c7:6e:28:46:c3:35:90:67:5b:0c:40:
9b:9c:bf:f5:d8:34:67:c2:4e:be:f6:66:14:98:5c:
54:3f:77:f2:0a:f0:f3:70:03:b1:9e:92:d2:40:cd:
a8:99:4d:f8:da:00:32:3c:36:c2:5d:23:4d:69:ac:
64:08:28:fe:43:ae:77:c8:ac:47:74:93:71:d6:54:
3d:9d:07:99:37:d8:ad:0d:44:a5:57:07:87:54:b3:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:97:FE:5D:EC:1A:D3:35:23:13:CC:B1:5F:A6:44:9F:82:BF:A2
X509v3 Authority Key Identifier:
keyid:41:D6:08:33:6C:CF:0E:DF:EA:4A:24:61:4F:1D:72:34:88:4E:89:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/QdYIM2zPDt_qSiRhTx1yNIhOiZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QdYIM2zPDt_qSiRhTx1yNIhOiZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZAT/z2eX_l3sGtM1IxPMsV-mRJ-Cv6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:db:35:fe:fe:77:d5:ba:0b:e3:ba:ac:51:17:0a:b6:98:8a:
24:73:41:d9:48:9a:5f:50:f6:09:02:d4:af:23:1b:1b:dc:f1:
4b:60:fa:17:d9:d9:63:a0:32:68:90:f2:20:df:cf:a3:6f:08:
ca:58:ff:2d:f5:b1:7e:e5:9a:6a:3e:1b:e3:b8:e8:fb:42:94:
71:fc:69:81:ef:2b:86:ce:65:ed:a6:48:cb:22:c6:bf:85:88:
ee:4b:03:05:60:2c:6a:3f:10:da:98:bf:59:d4:8c:23:74:ce:
c1:b3:6a:62:4b:8c:0a:f7:74:8a:34:04:ed:ea:30:45:09:bc:
39:36:fe:c0:e9:6f:ef:46:2e:b4:a5:f6:73:ab:3f:6a:46:cf:
9e:aa:63:98:cb:11:7f:40:5c:da:67:cc:05:ea:19:aa:68:ac:
e4:69:6e:ab:d8:14:67:4c:35:a0:f6:79:43:c2:05:a3:ac:08:
d1:4a:2e:be:8c:85:b7:20:52:18:24:c5:fb:e6:25:f5:2c:4c:
5d:0d:8d:db:b4:9f:52:23:fe:e4:3f:f5:36:46:3a:1c:33:13:
b2:2d:7d:bd:f7:b8:ca:98:f8:10:08:fd:49:b5:42:f0:88:e6:
0e:03:a5:6c:f6:13:c2:5d:6a:89:af:11:7e:e6:0d:d2:37:e6:
ee:ce:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:29 2025 by rpki-client