Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
File: v1i-v_Nqcda4oPXQlwfk6IU88AY.roa (raw, json)
Hash identifier: loDbYEbGKt/gkT3xkbqQdCsx/pc0iOglbr3mNGHk6aA=
Subject key identifier: BF:58:BE:BF:F3:6A:71:D6:B8:A0:F5:D0:97:07:E4:E8:85:3C:F0:06
Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial: 03DE
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
Signing time: Mon 10 Feb 2025 14:00:19 +0000
ROA not before: Mon 10 Feb 2025 14:00:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 174
IP address blocks: 160.30.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Validity
Not Before: Feb 10 14:00:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BF58BEBFF36A71D6B8A0F5D09707E4E8853CF006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:3c:2f:51:a3:2f:09:8f:e3:b9:f3:8e:39:
1b:c9:c6:d5:7d:93:89:08:c1:20:2f:31:d6:96:f0:
48:b8:5e:a6:90:7a:63:f3:40:41:0d:cd:87:be:73:
d4:dd:86:26:b6:e9:d8:c6:f1:29:6e:e9:fd:7b:d0:
52:c5:86:e3:63:bc:07:40:2a:84:61:a5:fd:8b:16:
c4:f9:d3:13:00:87:0d:43:04:4a:8c:fa:2f:22:ed:
3f:d9:f9:3b:de:7a:8d:40:31:8f:8c:a6:6a:a8:d9:
2f:66:c3:e1:fb:20:8b:9d:6a:a8:4e:26:3b:97:af:
2b:3b:74:51:20:d2:b2:b9:e5:9b:c1:d2:b0:2f:6b:
fc:df:3a:de:93:32:6b:9a:fd:f2:37:7a:fb:d6:e6:
c9:91:29:88:08:2c:32:f8:dc:bf:22:e2:24:c3:51:
f6:d3:c5:aa:a7:f4:63:8f:84:a0:d4:70:7c:ea:7e:
c6:b7:e8:03:76:ec:70:04:17:49:5f:a6:eb:7d:33:
8b:bc:dd:3b:06:25:af:5b:0a:bc:0a:23:eb:29:3a:
79:cd:4a:c4:7f:4c:97:5f:9a:6e:c4:cd:ed:b6:68:
91:a9:b5:41:08:54:94:aa:f3:cb:b9:cf:99:03:04:
69:52:24:6f:ce:63:21:b6:c9:e5:ab:2e:dd:71:1c:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:BE:BF:F3:6A:71:D6:B8:A0:F5:D0:97:07:E4:E8:85:3C:F0:06
X509v3 Authority Key Identifier:
keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/v1i-v_Nqcda4oPXQlwfk6IU88AY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.78.0/23
Signature Algorithm: sha256WithRSAEncryption
31:a2:c9:59:8e:0f:62:bd:7b:1d:08:fa:c4:06:7c:ba:05:57:
f9:70:0d:24:cd:68:e9:86:e0:25:4d:a3:6e:d8:cb:e0:b2:75:
d2:f4:ba:31:fb:d5:8f:31:62:8d:cf:33:c6:8d:b4:36:41:e8:
6a:93:26:ec:36:9b:a4:ea:69:52:8d:04:0a:05:df:cd:65:33:
a3:cb:ee:d8:64:54:1a:15:a2:4b:a3:12:fe:09:85:14:8a:e0:
8a:08:78:45:51:79:d2:86:16:ac:97:d3:c6:c1:c0:f6:ea:dc:
a1:10:9a:9f:53:e7:fe:6d:53:19:be:de:f8:84:0c:b7:dd:1a:
59:f7:85:b5:8d:eb:c7:91:24:2b:c0:7f:73:7e:03:b3:e1:8b:
19:e7:29:ee:06:a1:c0:fc:5d:83:b7:a9:2d:55:7e:d6:6b:d3:
dd:b8:4e:b3:64:36:1d:16:d7:9e:88:4e:22:fe:ac:8d:8c:1e:
9a:7d:ba:eb:91:0c:bb:ec:d4:1d:4f:b1:26:3c:94:de:30:fe:
36:fc:92:35:26:15:f4:31:09:33:ed:1f:87:14:63:c0:48:37:
7a:5c:78:1a:8e:3b:9d:0d:44:0e:04:55:79:9a:1a:e5:90:30:
66:8f:d3:b9:0f:e7:f0:95:82:90:69:8f:ec:6b:59:95:ae:ce:
57:fb:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:14:29 2025 by rpki-client