Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/vawKG0EX3DVY5D2oHwRBNDRCcHo.roa
File: vawKG0EX3DVY5D2oHwRBNDRCcHo.roa (raw, json)
Hash identifier: WC6bQ0No+ADihmXnw/HmKkRLsUa6OAO6QD1lFbwnanM=
Subject key identifier: BD:AC:0A:1B:41:17:DC:35:58:E4:3D:A8:1F:04:41:34:34:42:70:7A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 13D1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vawKG0EX3DVY5D2oHwRBNDRCcHo.roa
Signing time: Fri 05 Jan 2024 09:07:10 +0000
ROA not before: Fri 05 Jan 2024 09:07:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Jan 5 09:07:10 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BDAC0A1B4117DC3558E43DA81F0441343442707A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:a6:66:86:86:05:84:4a:40:72:a6:f1:c7:
46:6e:ee:87:39:ae:74:bc:c1:d7:3f:70:14:30:b8:
17:aa:17:f3:52:dc:d5:48:83:3b:50:bb:d5:d2:37:
3f:ee:7e:0b:15:90:0f:26:7d:9f:da:c6:bc:e6:95:
c3:78:5c:68:73:21:5c:68:80:a6:21:d0:21:3f:c9:
80:d8:82:2c:20:c2:6c:ab:71:2b:08:45:1e:ff:50:
db:01:3a:72:13:f7:b2:1f:42:2e:d1:1f:b9:dd:ee:
d4:1d:21:0c:2f:ad:a5:50:bb:fa:09:c5:b9:1a:51:
33:b1:77:69:4f:01:d4:5c:15:15:e2:cd:15:2e:ac:
a9:28:08:fe:29:a8:4d:52:0b:35:31:0a:bc:40:2e:
90:cb:12:ff:c5:7c:a8:a3:57:2c:cb:76:5a:c9:b2:
66:94:f7:03:27:e3:f8:a3:90:07:ca:95:51:7f:0e:
06:1a:43:74:bd:68:a3:81:4d:2f:e5:f2:fd:53:a9:
06:75:dc:eb:9c:4c:6c:4b:e0:c0:6b:8d:47:eb:30:
8a:5c:ae:ac:7f:2b:a5:22:07:e2:ae:db:63:be:bd:
52:a1:8e:f5:20:b9:dc:70:30:14:9f:89:f2:39:ad:
98:dc:c8:ab:72:51:31:c8:b7:0b:9e:19:0f:fc:24:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:0A:1B:41:17:DC:35:58:E4:3D:A8:1F:04:41:34:34:42:70:7A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/vawKG0EX3DVY5D2oHwRBNDRCcHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
04:f1:6c:7f:22:0c:44:e2:26:1a:76:99:97:b0:75:eb:1b:d8:
fa:c2:08:c6:aa:0b:6b:3b:d4:32:cc:ec:b6:07:36:9d:67:7a:
84:a5:3f:7c:37:3e:28:16:dd:10:4f:07:0e:c1:aa:89:7c:b8:
f1:1e:98:fb:5f:71:99:de:10:77:42:3a:29:c2:c4:80:25:1e:
23:24:e5:7a:ca:2c:13:58:31:43:5d:bc:97:49:62:2d:fa:ff:
84:6a:94:8c:9e:53:15:b0:1a:25:3f:64:57:ea:44:40:81:1b:
70:9c:4b:41:c3:7b:db:67:29:18:91:cb:5b:d3:16:68:0c:9a:
ca:66:63:6a:79:da:38:49:5d:fc:b0:e3:ba:07:be:a3:a7:a6:
da:87:c0:58:de:ca:db:f2:db:be:d1:68:72:7e:e5:ad:3e:88:
2d:d6:e5:24:11:ee:fb:e4:36:ac:eb:fe:cb:f3:c7:f6:50:a8:
ee:ba:02:1e:f1:f4:e1:33:07:2a:74:26:ce:22:f2:2e:50:57:
16:3d:7d:ff:dd:db:a6:dc:bd:c2:82:33:d9:5d:b8:04:33:51:
b2:20:ca:30:af:b5:5f:62:fd:e0:12:33:ae:c6:4e:62:1d:a4:
42:4b:9b:3c:ff:6b:d8:c7:11:b8:3e:9e:bc:8b:4e:70:fa:9f:
8a:97:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:04:10 2025 by rpki-client