Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa
File: zZd4tI2U3He9WtcWBC15ig9_010.roa (raw, json)
Hash identifier: DsNYAuSrAlGON8ZglDhMAfqrZ28BCvZgG46AmzbS4fc=
Subject key identifier: CD:97:78:B4:8D:94:DC:77:BD:5A:D7:16:04:2D:79:8A:0F:7F:D3:5D
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0D4D
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa
Signing time: Mon 10 Feb 2025 14:05:25 +0000
ROA not before: Mon 10 Feb 2025 14:05:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.58.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Feb 10 14:05:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CD9778B48D94DC77BD5AD716042D798A0F7FD35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:68:72:cf:ef:96:12:d6:54:a6:53:82:b4:
f8:e8:29:2f:3c:27:c4:f4:7a:73:55:14:5f:38:ec:
19:cf:0a:37:d1:31:5e:55:70:c6:a3:86:0a:99:42:
f2:97:a0:22:d8:7d:ef:f6:17:a2:3e:5e:16:39:bd:
20:06:93:a9:52:96:57:d7:4d:b1:14:d2:e2:48:84:
ce:fe:c5:61:cc:e3:52:14:18:24:a9:c9:5c:cf:a0:
ae:d7:56:55:8b:54:ab:14:7b:f0:51:08:22:b3:fb:
e7:13:5c:17:9f:df:1b:91:24:e6:86:98:60:6d:60:
24:4c:50:83:b0:54:8d:f0:7b:53:32:04:4f:75:43:
ae:03:a2:5d:9f:27:87:00:63:3e:01:a3:90:82:35:
e0:60:3e:6d:7b:9a:d9:2d:62:36:23:37:ed:e7:7a:
ff:a9:9c:00:4f:4d:7e:e0:6c:6c:78:c0:64:6f:74:
7d:8c:93:e5:37:17:e9:65:9e:eb:db:56:5c:66:0b:
7d:18:0d:d7:35:2b:a3:5e:e8:2a:00:a2:9f:0e:10:
6d:d7:1a:8a:69:23:92:59:04:18:c1:a6:56:44:ef:
58:6e:ae:88:45:d4:fa:1a:0a:cc:d4:d1:66:70:d9:
b9:77:60:5d:dc:32:55:66:9c:4e:53:5b:04:e1:39:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:78:B4:8D:94:DC:77:BD:5A:D7:16:04:2D:79:8A:0F:7F:D3:5D
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/zZd4tI2U3He9WtcWBC15ig9_010.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.159.0/24
Signature Algorithm: sha256WithRSAEncryption
44:76:be:0f:63:4d:82:54:92:e2:7a:a7:5b:37:88:54:e6:11:
bc:40:25:29:59:d9:8f:e2:78:f6:b2:d9:f8:92:4a:51:65:c0:
b0:69:34:89:c3:9d:14:be:ff:79:b1:6a:e7:14:f2:6a:20:0f:
26:c1:7c:b9:a3:db:a8:05:52:25:2b:11:9e:5f:96:5e:04:1c:
13:d5:04:68:6f:66:bb:20:aa:a1:66:a2:87:2a:44:bd:1b:be:
9a:e5:f4:b6:fc:d7:6f:b6:99:d6:26:e4:68:58:64:44:e2:2b:
07:da:55:56:58:e0:81:b6:7c:76:c5:20:45:87:1b:b1:52:e0:
3a:cd:a5:c8:67:6e:36:60:65:d0:5a:bc:d5:06:12:07:88:ed:
bf:d4:2c:36:21:9e:0b:14:86:c6:dd:13:83:63:82:ae:d8:33:
42:7d:3b:61:6d:2e:9b:00:36:84:c6:b2:1e:80:a2:f8:79:22:
73:85:d8:69:ac:b7:18:ae:e4:ee:1a:86:c9:da:55:9d:66:d8:
1a:5c:5f:b2:0e:94:8d:6c:14:31:15:96:15:63:a4:e7:d7:5b:
4e:f3:4d:a9:c8:0f:5c:11:f2:a5:d1:4e:f9:2d:75:bb:bb:24:
82:dd:ee:1b:08:86:e3:15:f8:06:2a:96:05:ee:e6:5a:c6:6b:
e2:d3:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:02:27 2025 by rpki-client