Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa
File: tdkYnDh4vwODT5EMGd-S21gtdzg.roa (raw, json)
Hash identifier: rQx7QyKNuDkKMETxOqWkwFkZ8VSDv7pJ3ku9aDuFa1A=
Subject key identifier: B5:D9:18:9C:38:78:BF:03:83:4F:91:0C:19:DF:92:DB:58:2D:77:38
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0D87
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa
Signing time: Mon 10 Feb 2025 13:50:06 +0000
ROA not before: Mon 10 Feb 2025 13:50:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 61.56.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3463 (0xd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 10 13:50:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B5D9189C3878BF03834F910C19DF92DB582D7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:1b:f0:95:e9:de:52:97:1f:9b:a0:cd:cf:
03:3b:22:2b:f9:94:dd:b5:b8:61:5e:7f:c0:57:e2:
b7:de:2d:0b:35:89:9a:52:b6:ca:f4:cd:c0:b4:89:
d6:33:3c:93:60:e6:c6:0c:46:ca:fe:fd:bb:da:c9:
78:b9:d9:96:af:39:db:45:98:63:18:49:7c:c4:e4:
d8:81:fc:f2:01:04:ae:74:ce:e8:7f:1e:ca:59:e8:
b4:3a:7e:0c:1b:61:75:b5:9c:f9:04:66:7a:84:f6:
55:33:30:33:4a:a4:b7:86:a1:e6:ba:62:43:69:b7:
84:fd:6a:25:5d:2a:13:34:55:1f:06:49:32:20:c6:
31:e5:bd:1d:a6:3b:15:b1:20:17:08:f1:64:84:6c:
5a:77:31:fd:cb:4d:7c:4e:7b:b2:be:5e:17:05:b4:
6a:fd:55:2e:54:28:dd:cd:7f:66:cc:50:53:ee:1d:
fd:9e:1d:f8:ad:18:82:18:d9:72:ef:9e:74:ad:22:
a0:49:43:24:35:53:30:8d:68:56:b1:42:25:85:21:
75:37:2a:72:b6:c4:b3:5b:92:9b:e3:ce:b2:92:86:
8c:2f:e9:f3:4f:0d:d3:98:b4:9b:3c:c5:de:64:43:
aa:36:bd:82:3c:b8:da:d4:98:18:f4:30:e8:de:c4:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:18:9C:38:78:BF:03:83:4F:91:0C:19:DF:92:DB:58:2D:77:38
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/tdkYnDh4vwODT5EMGd-S21gtdzg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.88.0/21
Signature Algorithm: sha256WithRSAEncryption
51:fb:2c:0f:bd:07:5e:b9:6a:2c:2b:a2:ee:32:c1:61:c8:b8:
f4:2d:8e:48:a5:bb:3b:28:0e:4d:f9:aa:1b:df:9a:13:fd:d8:
df:94:06:84:55:e1:11:4c:a9:3b:fb:1b:5a:0e:81:58:1f:bf:
44:99:3d:5d:1c:49:95:63:ff:01:c3:83:9d:00:d5:1f:9f:69:
dd:13:ef:0e:d7:c6:e2:24:88:ab:71:c7:36:f9:5a:dd:20:8e:
08:94:f9:89:9f:18:a1:a6:c9:b5:94:df:29:1c:3b:17:f0:d1:
37:b3:8b:e6:65:e6:20:1f:f8:92:e4:fa:5e:7c:c5:60:0a:30:
1a:97:5a:4d:9e:78:e7:07:c3:84:91:32:8a:ae:f0:ec:75:e6:
2f:2f:34:df:5b:12:49:98:15:a4:7e:cc:67:de:10:c8:5e:1c:
c1:1a:80:9c:4b:b5:86:27:40:c7:1b:af:89:66:84:25:7c:3d:
bb:42:63:8a:95:b8:48:b6:d3:1c:b4:4e:b4:2f:9e:c0:f3:23:
d1:a0:90:83:33:28:54:5d:e3:9a:b2:27:f4:34:dc:24:d9:35:
3a:45:3e:a3:be:dd:bf:5d:7d:05:04:7c:4a:17:84:5b:df:dd:
6c:9f:0d:d8:05:98:ff:0d:f7:71:a7:46:84:64:78:7d:1e:0f:
32:18:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:19:23 2025 by rpki-client