Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa
File: veUaXwCBCTUBE8d8Rws-wz1S0Io.roa (raw, json)
Hash identifier: Dg+nBeSKCPmeLzldhKpSkqURKnQze6Ja3EAc8Vs/bMY=
Subject key identifier: BD:E5:1A:5F:00:81:09:35:01:13:C7:7C:47:0B:3E:C3:3D:52:D0:8A
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0D83
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa
Signing time: Mon 10 Feb 2025 13:50:05 +0000
ROA not before: Mon 10 Feb 2025 13:50:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9244
IP address blocks: 210.67.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459 (0xd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Feb 10 13:50:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BDE51A5F008109350113C77C470B3EC33D52D08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:38:ac:86:f5:18:c9:46:61:3f:6d:c5:16:
31:f3:13:3d:d3:e1:a9:50:0e:7f:e3:e0:80:00:b8:
e8:76:58:88:14:29:a9:4f:55:e0:1b:94:d4:d7:d8:
cb:5b:a2:bb:5a:8d:79:6f:5b:73:37:d9:83:c3:1b:
6c:f1:46:72:93:a3:0e:f7:29:21:91:81:13:7a:79:
32:4e:0f:56:0f:80:9c:d4:7f:c7:a4:b9:c3:3f:6f:
77:8b:86:c2:fc:10:ba:84:f4:f0:e9:e9:53:68:aa:
77:85:2b:39:82:2f:0c:57:79:14:c6:af:cc:c1:6f:
22:dc:6c:ba:3a:0e:9d:78:6a:57:51:f3:74:52:09:
5d:a6:15:47:cd:db:47:26:cd:c0:a8:b2:6d:b1:0d:
1d:08:3b:75:b9:1e:92:55:1f:7b:6c:33:ba:ef:2b:
b8:89:e8:d8:54:17:1c:62:35:f0:40:1e:f5:98:9b:
d1:68:0f:e6:cc:e9:b7:15:1b:6e:0a:55:28:14:8d:
4d:dd:50:6c:bf:5b:88:e6:a0:f5:67:e4:92:e2:73:
d9:5b:9a:59:46:5d:5d:1a:9e:86:a9:0b:2f:68:b6:
47:3f:27:44:b9:a2:92:d2:03:ba:95:36:fa:a7:86:
30:00:fc:65:74:78:ef:dc:13:06:65:6e:f1:65:e6:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:1A:5F:00:81:09:35:01:13:C7:7C:47:0B:3E:C3:3D:52:D0:8A
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/veUaXwCBCTUBE8d8Rws-wz1S0Io.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.96.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:d3:1e:21:cc:97:bf:ca:6d:02:dd:fe:88:3a:c6:95:37:ca:
56:f1:d9:3f:07:0b:16:50:20:e0:08:ab:d4:20:81:2c:a8:fb:
f9:4c:81:9c:6a:cd:cf:53:70:6a:cf:ad:c4:6e:57:e8:f1:3f:
2e:7e:3c:7e:b8:ed:79:03:01:fb:24:fa:4c:16:5e:b3:83:ed:
27:07:cd:07:09:12:1e:8e:0a:21:42:2b:6b:45:f7:6d:8d:02:
80:10:40:de:b3:04:08:ab:78:be:f1:01:df:9f:16:a3:ce:cb:
e6:3f:37:f0:57:1a:37:28:ce:65:98:79:df:5e:4d:e4:6a:1d:
a3:48:c8:95:f0:66:97:e2:74:a0:dd:0a:57:80:ba:49:22:33:
ff:f0:c0:cd:66:ef:c9:5e:ea:43:bc:76:ba:ed:b5:4b:54:95:
1a:2d:57:f2:43:af:73:41:ce:31:0b:34:de:52:8d:6a:d7:86:
89:b7:df:57:8b:4a:93:2d:8d:71:69:97:f7:ec:5b:c3:a1:88:
cc:99:50:a3:ab:44:09:c2:d3:e5:d3:92:b3:a8:db:9c:67:ca:
51:22:87:be:ab:54:ed:c5:9c:85:78:f4:75:e6:dd:aa:51:13:
7d:f9:05:6a:91:7a:25:b3:a4:f1:04:25:79:e4:26:a4:bc:6b:
67:3b:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:21:36 2025 by rpki-client