Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa
File: 5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa (raw, json)
Hash identifier: FJD2mQnY+I0ZK4rHJS53+PX7U8IQxazyrPbXtYXVkDM=
Subject key identifier: E6:43:81:0E:9F:63:7D:7B:83:16:F7:C0:D5:6F:E5:60:4A:12:D9:D6
Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial: 017C
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa
Signing time: Mon 24 Feb 2025 01:03:15 +0000
ROA not before: Mon 24 Feb 2025 01:03:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 19551
IP address blocks: 180.94.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Validity
Not Before: Feb 24 01:03:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E643810E9F637D7B8316F7C0D56FE5604A12D9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:82:ed:0b:b9:62:df:c0:48:71:25:38:21:
20:61:6b:72:19:bb:76:25:dc:a4:12:2a:cd:88:2c:
a4:ca:1a:24:ee:08:7c:af:0e:a8:8a:9e:b9:f9:b3:
b0:42:6c:d4:85:18:68:c4:31:93:44:81:b8:a6:bb:
d6:eb:e4:39:04:ea:e9:dd:1e:ac:2a:c0:38:70:05:
07:b4:8d:30:89:c0:ec:8a:06:f1:62:e7:44:bb:a3:
1d:d0:70:6d:38:9a:ff:a3:cc:4e:7d:c9:d4:2f:ea:
e0:ce:fe:9e:27:fa:2d:0a:c8:2c:76:8c:c8:7c:da:
aa:fc:79:f0:77:20:94:45:42:e9:85:7e:83:07:29:
29:5b:25:bd:b8:b4:e2:f1:44:95:88:62:0c:c5:3d:
6e:41:a8:cc:09:2c:db:27:d8:fe:5a:8c:e6:c9:90:
a8:01:43:ec:c6:57:10:4b:16:1c:1c:40:f0:30:0a:
99:4d:4a:4d:d9:64:ab:69:d2:83:fc:eb:67:8b:15:
b0:8d:b2:9d:de:2a:3f:69:41:a9:b1:7f:14:51:62:
6a:d5:ba:14:ae:ca:ac:7c:15:37:17:ee:ae:b0:a6:
fd:20:5b:2f:7c:e9:c5:8e:1e:35:93:1c:79:39:c7:
c3:f1:ab:1f:37:8a:af:f6:8f:ce:af:ab:c7:81:30:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:81:0E:9F:63:7D:7B:83:16:F7:C0:D5:6F:E5:60:4A:12:D9:D6
X509v3 Authority Key Identifier:
keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/5kOBDp9jfXuDFvfA1W_lYEoS2dY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.30.0/23
Signature Algorithm: sha256WithRSAEncryption
12:4f:8a:40:2a:e4:c0:c8:18:ac:9b:89:0f:02:20:94:24:0a:
e1:dd:34:60:05:4b:9b:fe:88:9d:60:5f:12:bc:41:48:64:15:
db:b7:ae:a8:dd:10:7e:e6:78:ac:60:60:f1:37:c6:e3:41:e6:
47:a7:6b:29:78:18:c0:80:c1:5a:17:69:b0:56:6b:c7:39:d6:
39:ee:4d:a1:14:9f:e7:17:a4:3b:84:35:32:c7:7d:a7:0c:77:
d9:2e:6e:fa:0c:ba:ed:3d:5d:a7:51:50:d5:6e:5a:52:0a:ca:
4c:ea:80:85:1c:d8:de:32:53:51:70:86:63:2c:e2:f3:a1:1b:
c0:68:10:51:12:d7:c2:4a:42:56:e8:d4:e4:31:33:96:70:a4:
2a:3c:36:8d:3e:85:6c:35:70:e4:12:2f:8b:89:e7:2e:d0:74:
da:eb:6d:97:03:bd:15:f4:39:4e:e7:9d:b4:83:2e:29:12:b6:
cd:9e:80:65:8d:bd:1d:c2:c3:87:bf:6a:c7:f7:e2:9c:dc:ba:
e6:32:e7:de:07:46:35:f0:2c:23:dd:12:d9:af:75:47:e2:c0:
89:ee:3a:fb:3f:72:de:c2:99:92:76:79:c6:dc:8e:d3:e9:42:
7e:11:41:b8:d5:c9:90:b2:b4:41:27:a9:c2:97:39:56:4d:85:
22:01:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:24:14 2025 by rpki-client