Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/lzWNhyd8XholmqsAbiYE0BWZ0hM.roa
File: lzWNhyd8XholmqsAbiYE0BWZ0hM.roa (raw, json)
Hash identifier: 85NoxaUF3APyB58yusEFBNgEKXYj8LHSmmmgZ8tgyEs=
Subject key identifier: 97:35:8D:87:27:7C:5E:1A:25:9A:AB:00:6E:26:04:D0:15:99:D2:13
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0D55
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/lzWNhyd8XholmqsAbiYE0BWZ0hM.roa
Signing time: Mon 10 Feb 2025 14:12:16 +0000
ROA not before: Mon 10 Feb 2025 14:12:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 150.129.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Feb 10 14:12:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=97358D87277C5E1A259AAB006E2604D01599D213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:c7:22:14:eb:81:39:93:97:b1:e0:1a:5c:
b3:94:00:d4:1f:50:44:97:40:76:5f:46:77:74:4b:
cf:87:74:8c:aa:bb:a9:d4:b5:21:89:2c:19:8e:ca:
77:d6:8b:50:3d:ff:01:5d:04:72:20:7a:17:44:77:
ed:70:28:16:60:09:7c:19:50:92:fe:f4:5f:a5:70:
27:2b:f6:5c:51:75:13:6e:64:14:6b:04:2b:a2:20:
f3:83:84:b7:53:6f:34:48:e1:38:d8:9a:f3:aa:38:
b7:b5:80:ac:53:1a:6e:f9:4a:40:97:ce:4d:c5:a3:
ef:d5:65:7d:4c:bf:e7:1a:47:05:b8:b8:d9:6b:cb:
47:a3:72:20:33:4a:b8:0b:61:2a:5b:97:32:85:ea:
b2:7d:6e:a5:5e:90:77:b8:0b:2d:7f:09:c6:59:5d:
15:a4:69:f1:e2:64:57:81:6e:a6:20:fb:31:da:0b:
28:37:a4:36:c1:67:54:51:43:81:97:d8:a0:4f:78:
25:a1:3b:b8:f8:d4:5a:aa:f3:0d:6d:b4:df:12:db:
58:d9:1c:8d:d8:59:41:b0:3b:7a:45:d1:79:6a:58:
e9:a8:6a:1a:a9:23:8c:e0:12:57:38:55:ed:bf:df:
54:c9:c2:d4:fc:67:7d:69:2e:2b:bc:b6:2b:80:7e:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:8D:87:27:7C:5E:1A:25:9A:AB:00:6E:26:04:D0:15:99:D2:13
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/lzWNhyd8XholmqsAbiYE0BWZ0hM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.72.0/22
Signature Algorithm: sha256WithRSAEncryption
01:dd:20:56:07:55:fb:18:86:4e:77:fb:62:22:7c:b6:8b:7b:
38:8f:14:30:f6:b9:69:a2:a4:8c:ec:a5:55:07:32:97:01:aa:
27:d4:35:2d:be:ea:a3:35:e6:07:29:e4:a2:a7:0a:4e:8e:cc:
fe:f7:00:2c:27:c7:9d:a1:a2:ff:29:c2:6f:68:e6:18:51:38:
92:c1:5b:93:63:36:70:15:fa:f4:4a:35:21:8e:98:17:fb:8d:
1c:5d:7a:3f:b2:85:16:dc:22:ca:72:eb:3f:67:05:01:ed:45:
d0:f4:54:46:b2:d2:ef:c3:55:bf:de:16:44:43:29:b7:c1:e6:
ff:1c:bb:63:6c:11:fd:e1:e0:f1:b8:dd:c4:8a:17:f3:5a:fc:
ca:dd:d3:f9:4c:4f:05:ba:12:d2:d8:bd:fc:73:f5:9b:b8:1d:
d6:fd:c8:64:e0:61:f8:42:77:f1:7f:04:1b:57:41:0b:eb:21:
fb:7f:ef:16:e2:fe:49:b1:7c:87:05:14:46:21:99:a2:b2:a7:
39:79:06:27:72:b2:b2:37:3c:4d:6f:d7:01:8e:cd:6d:89:1e:
89:6d:d8:c0:ce:9b:72:d0:ac:43:ca:e6:42:53:d9:21:0b:6d:
5e:dd:74:0f:b5:ea:f9:79:5b:bc:9b:67:27:7a:2b:dd:b9:30:
b8:56:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 14:25:30 2025 by rpki-client