Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa
File: cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa (raw, json)
Hash identifier: MRbSBzjrJIEl4FUSKBgsZ+2gFsZlWT2y0TzPf5wpW/0=
Subject key identifier: 70:7C:2B:54:1A:64:CE:15:34:04:C2:56:02:00:9E:30:C7:15:0E:AE
Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial: 01D1
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa
Signing time: Mon 10 Feb 2025 14:26:25 +0000
ROA not before: Mon 10 Feb 2025 14:26:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 8075
IP address blocks: 2400:f520::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Validity
Not Before: Feb 10 14:26:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=707C2B541A64CE153404C25602009E30C7150EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:d4:72:3d:8c:2c:24:ed:bd:82:cf:e3:41:
12:a1:47:02:ea:3b:b4:77:77:9a:32:b9:c0:31:bd:
79:9c:6a:22:b6:21:4a:40:ab:21:e4:2b:bc:87:28:
38:a0:3b:2a:61:71:13:59:71:17:ec:bc:c6:54:69:
49:66:8e:83:ab:1a:6e:44:e3:98:66:58:aa:82:d8:
49:65:4a:35:ec:c1:e1:31:a7:e7:f2:73:8d:a1:f7:
cd:9a:6f:d0:2b:10:12:fa:54:f8:13:fc:ad:a6:87:
34:a0:ec:12:8e:5e:4a:61:0e:6d:f9:51:e0:23:09:
80:aa:3e:9a:c6:87:b1:8b:1b:60:17:5c:a3:80:8b:
db:39:61:8a:dd:e7:09:d4:b0:71:b2:68:97:84:01:
b8:ff:50:0c:91:bd:88:86:91:38:1d:7f:0b:6e:fe:
8d:28:f3:c0:f5:f9:be:f2:fa:d2:25:14:41:f9:fa:
1b:cf:02:7b:74:4e:19:ac:b9:0a:79:da:a7:6d:9d:
dc:f1:74:6d:e9:84:1d:10:04:fd:2c:36:bd:a4:ad:
d1:e1:3b:42:a0:14:1f:27:65:d0:7e:20:e0:1b:5f:
f8:25:27:2b:45:8a:11:3c:12:36:d6:11:6b:fe:d3:
2f:99:1e:0d:90:43:31:17:8f:1c:88:fb:3b:8f:39:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7C:2B:54:1A:64:CE:15:34:04:C2:56:02:00:9E:30:C7:15:0E:AE
X509v3 Authority Key Identifier:
keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/cHwrVBpkzhU0BMJWAgCeMMcVDq4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:f520::/32
Signature Algorithm: sha256WithRSAEncryption
17:cf:f9:d0:a0:89:98:d7:42:cb:10:56:36:8c:12:61:a2:44:
79:67:08:95:b4:54:b6:5f:f9:1d:01:8c:0e:85:5d:4d:96:9e:
6a:df:db:fd:6d:3b:ea:81:37:7b:94:5a:6c:ed:9e:31:fa:41:
e7:8e:24:48:16:05:eb:1a:3a:5b:fc:fd:6c:9b:57:bb:27:8b:
27:fd:a9:6c:47:56:4c:05:09:e0:32:ee:a2:7f:c4:03:bb:eb:
73:2b:25:11:30:3b:98:aa:79:69:e8:e5:f4:87:cf:8a:65:ed:
2a:ca:6b:32:02:9b:84:00:66:14:75:ef:8e:89:f0:18:89:c4:
10:32:96:b8:77:59:df:55:84:56:1b:5e:69:44:fe:8d:08:23:
e5:16:fb:60:ec:78:73:d3:e5:17:6f:5b:ed:82:0a:4d:6b:ba:
65:55:2d:58:89:1f:73:54:a2:6b:88:64:39:a7:5c:7d:cc:c0:
f2:e0:b5:f0:1d:df:a3:95:20:a6:8f:a8:d4:1e:5d:0d:a6:b2:
36:40:dc:14:4a:11:93:4e:a6:3f:d6:ef:a9:2d:bf:42:e1:83:
53:ac:cc:ca:da:be:0c:e1:c7:e1:fe:14:bb:c5:2d:86:76:db:
02:1d:b6:78:0c:b1:a9:ac:58:b5:05:b3:b3:61:be:e7:43:38:
91:b1:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:58:17 2025 by rpki-client