Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa
File: Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa (raw, json)
Hash identifier: 9RAexxuUZYsSnrt87JeD/sSElMma3hNBdbr1i8dpymU=
Subject key identifier: 1E:CD:AC:15:AB:0C:78:BA:87:C9:54:8F:FA:5E:EC:8D:36:D3:F5:29
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0D19
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa
Signing time: Mon 10 Feb 2025 14:23:27 +0000
ROA not before: Mon 10 Feb 2025 14:23:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 101.3.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Feb 10 14:23:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1ECDAC15AB0C78BA87C9548FFA5EEC8D36D3F529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:fd:2e:34:d4:d3:ae:af:2f:cd:44:6c:6d:
93:c2:21:e1:f0:34:18:e8:c8:3c:b7:dd:4f:f4:0b:
87:fd:b1:90:7b:4c:8a:bb:55:9a:51:e3:e8:1c:70:
03:16:61:e7:cf:2b:ab:d4:a3:63:bc:10:93:fa:74:
4b:31:4e:2e:20:5b:f3:92:57:2c:47:56:a9:56:c3:
1a:a2:ba:7d:9a:6d:f4:c6:ab:97:0e:b6:98:8b:3c:
ba:fb:a8:42:26:2d:de:de:36:4f:db:fb:68:54:14:
11:bf:0e:b7:9f:90:d0:62:d8:04:37:1f:17:38:2b:
0f:cd:94:05:91:06:df:3d:5b:f3:37:13:38:76:f5:
03:e9:e4:8b:ce:4d:16:61:3b:89:7a:a2:fc:df:ec:
3e:06:ae:15:ee:83:27:c4:5b:8f:ff:ca:64:49:3e:
98:5a:36:c1:64:61:62:18:52:2f:28:f9:1f:75:71:
f6:54:58:a1:b7:33:d9:fe:8c:52:bb:aa:7a:de:9f:
c4:ef:d0:f7:7c:fa:22:52:d7:0d:d8:4d:6c:5f:83:
79:2e:15:ca:65:b5:f8:63:bd:52:30:0a:80:8d:90:
08:f6:1c:c6:8e:f7:7d:39:d0:27:67:3c:d5:25:be:
9f:10:61:44:33:8c:85:d3:c0:0c:ea:16:85:75:da:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:AC:15:AB:0C:78:BA:87:C9:54:8F:FA:5E:EC:8D:36:D3:F5:29
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Hs2sFasMeLqHyVSP-l7sjTbT9Sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:0f:8b:a9:f4:c8:49:77:6b:f4:e2:a4:d9:08:8d:11:b7:fd:
ae:de:ba:5e:8b:6f:24:49:34:38:c6:fc:d2:ff:33:8f:1b:79:
e1:26:3e:58:e8:ea:e0:87:4f:cc:fa:1b:fd:45:61:20:04:45:
76:cb:b0:d9:2e:5d:ab:d2:b3:de:92:70:b5:36:46:92:ac:0d:
e1:d0:7e:2b:69:0e:43:af:6a:d3:a8:9f:55:2c:bb:ee:36:14:
1a:50:06:75:f3:9d:89:3f:04:c4:4a:fa:45:a1:bc:df:12:59:
bb:3c:78:a8:23:1c:e5:fe:d1:df:62:aa:2d:59:1c:d1:49:5a:
1c:9c:7a:ce:18:77:4d:16:1f:0b:af:e5:d7:5d:04:15:7f:e2:
b6:59:29:cb:b2:ba:3d:32:7b:35:87:ee:ee:b5:89:33:a1:66:
1c:be:25:2e:fa:3a:f9:74:4c:74:9c:e7:8c:ad:f9:c3:5a:f6:
62:6e:67:fc:05:74:9f:37:fa:41:9a:ef:02:3b:c1:e6:2f:ef:
a5:7e:19:55:be:f4:ab:98:11:ae:fc:56:e6:18:42:fb:f5:b4:
0d:93:74:9d:d3:af:d1:56:11:a3:f5:d3:cd:3f:2e:52:1e:54:
25:3a:f8:e0:e0:ff:2c:cd:b8:40:91:52:fe:80:ea:e3:51:bf:
81:8f:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 16:48:20 2025 by rpki-client