Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa
File: hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa (raw, json)
Hash identifier: SXrTw/xvHAZUP6cAgF+KrzAh4vw/ZQP7TRnxlDeJ02Q=
Subject key identifier: 84:A4:B2:77:AB:20:A7:18:88:C3:01:C6:1E:8D:34:9D:60:EE:45:94
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0D72
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa
Signing time: Mon 10 Feb 2025 13:50:02 +0000
ROA not before: Mon 10 Feb 2025 13:50:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 10 13:50:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=84A4B277AB20A71888C301C61E8D349D60EE4594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:bd:06:69:fd:25:b0:46:8c:cf:37:23:6b:
dd:73:bd:96:50:3a:ff:80:52:a4:a7:2e:ef:59:4c:
58:91:da:6f:ea:6e:81:a2:97:dc:7b:5d:77:b6:6c:
d2:04:f5:39:b6:e6:fe:e1:44:0d:b0:fe:9c:07:3e:
c1:c5:58:2f:5c:0d:57:b0:59:4a:5d:d4:32:4a:86:
d2:b6:e6:6e:bd:4d:dd:b6:98:19:ef:6b:9e:41:29:
0d:11:5a:aa:92:dc:9d:9c:8f:74:22:d0:33:6f:cf:
4c:6f:88:6b:37:53:d3:14:52:bf:5d:74:c0:b3:d6:
fa:b9:08:a7:e9:dc:46:84:67:6f:1d:02:d3:fd:f7:
0a:30:c9:38:00:17:6e:a8:f3:1c:31:bc:b4:d2:4d:
6a:be:de:e0:c0:41:ec:70:24:fd:c4:da:dc:57:5c:
c7:52:3f:b5:ca:56:ad:3f:c2:9a:56:dd:d2:b5:08:
4a:36:96:db:5d:4a:09:6d:34:5b:5e:20:24:07:ae:
55:8a:bc:45:95:60:82:77:92:9e:6a:c5:72:15:8a:
14:7b:e7:61:e7:82:f5:3a:c3:f2:c0:50:73:27:61:
93:a4:7f:f5:b1:7b:9e:15:2a:af:4b:d4:c7:73:f7:
ee:34:9e:df:cb:23:7d:eb:6a:f3:52:c0:f0:37:dc:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:B2:77:AB:20:A7:18:88:C3:01:C6:1E:8D:34:9D:60:EE:45:94
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/hKSyd6sgpxiIwwHGHo00nWDuRZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:ff:b4:9d:5c:e5:e9:2e:b3:ff:1d:a8:3b:af:47:59:23:
4f:6b:86:17:59:e6:2a:d5:b2:e3:5b:39:1d:70:0a:00:04:41:
8b:48:30:03:87:c2:e3:67:d7:87:97:cd:d8:f5:a3:02:cd:f3:
0f:93:f9:83:d4:1c:3d:7a:a1:7e:f5:d1:21:2d:ab:2a:3b:fe:
ae:6b:f0:f3:da:f9:02:cb:67:9b:1e:e1:ab:f7:40:10:08:b0:
1c:a6:43:95:8b:b7:41:40:77:a1:45:87:a7:61:42:ee:9a:98:
2f:19:25:cd:b3:e2:96:98:ef:3b:1c:6d:14:52:cf:04:9c:a6:
08:aa:9f:4b:3a:99:e1:c4:ec:38:b5:0a:cc:dc:c5:ab:5a:b9:
e8:49:50:a3:8f:ec:cd:cc:8d:7f:3d:e5:0c:a3:e0:f4:41:a8:
d0:bf:ef:37:2e:28:20:a7:c9:a2:86:7f:81:2a:05:64:23:f6:
4c:c3:d6:85:ef:d8:48:e8:3c:8e:9f:1c:de:d0:66:f1:ad:9c:
5c:72:0d:e9:83:91:a6:48:ed:50:41:ab:12:c8:96:e9:e2:75:
f4:b8:27:a5:e8:9d:66:0e:d7:70:ad:55:c2:4b:8e:fd:29:37:
6c:2f:65:e2:cc:8b:a0:46:53:68:ca:44:ea:56:c4:1f:23:17:
63:2b:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:06:29 2025 by rpki-client