Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa
File: BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa (raw, json)
Hash identifier: M5pBJfOr29rV2JKTCR/1L8D4q8Hn4kBw/7osyaF83Pw=
Subject key identifier: 04:B2:87:A4:F1:F9:47:1E:D7:B5:08:C0:C4:13:13:F1:2F:E4:57:3D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1175
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa
Signing time: Mon 10 Feb 2025 14:27:22 +0000
ROA not before: Mon 10 Feb 2025 14:27:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7482
IP address blocks: 222.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4469 (0x1175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=04B287A4F1F9471ED7B508C0C41313F12FE4573D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:04:2d:2b:64:95:ce:b7:bd:99:10:9b:d3:
ce:cc:da:b9:bc:12:9e:db:21:57:3e:f9:3b:b0:01:
c7:94:12:9d:19:f2:0c:4b:ec:32:09:6c:a6:09:62:
a2:95:8f:66:54:f7:78:8e:db:30:54:38:0c:aa:f1:
5b:e8:f5:f7:c5:6c:fd:10:88:e7:79:a6:8c:71:83:
a9:6b:a4:60:ee:da:da:dd:38:d5:d3:c8:4d:61:14:
18:c8:9f:6a:35:7b:72:fe:0f:73:ab:e5:77:d4:f4:
41:7d:5a:f3:15:bc:44:48:b1:19:d9:ca:90:a3:a7:
f1:bf:74:41:ce:cc:8d:be:97:95:a1:a9:86:d2:23:
f4:ec:f8:34:41:71:ad:de:59:8a:27:67:6b:af:23:
56:dc:7d:9e:7d:77:d5:9d:5b:7a:42:34:e5:37:19:
53:c4:66:79:34:4a:7e:38:8e:45:a6:47:28:15:6f:
50:8e:85:24:d6:57:ca:e4:be:7e:c3:e9:b0:f4:a0:
64:fb:35:7a:ee:aa:9d:c3:19:2a:8e:42:1e:d7:58:
e8:47:52:d5:1f:5d:c4:5f:c6:04:00:0a:97:63:f8:
e0:3d:56:d7:e5:83:78:47:a7:49:2e:fb:54:5c:ec:
28:21:e5:26:b5:55:72:f1:e8:85:bc:ca:fa:4a:b7:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:87:A4:F1:F9:47:1E:D7:B5:08:C0:C4:13:13:F1:2F:E4:57:3D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BLKHpPH5Rx7XtQjAxBMT8S_kVz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:73:59:57:4b:51:64:d2:10:6c:f5:84:f8:1a:a5:f0:14:ee:
d7:1b:24:08:01:c4:51:a1:75:72:bc:d5:85:10:ac:ed:d8:f5:
03:dc:11:ed:fc:ae:49:1e:f9:e0:83:ff:58:f3:61:3b:25:0e:
c2:41:e8:4d:b7:ae:24:a7:96:2f:1b:fb:b7:3c:16:a1:c2:a0:
b4:c9:ea:0c:fb:17:dd:ea:23:a8:ee:23:8b:8c:ca:39:09:65:
29:aa:47:c8:d5:3f:2e:ca:c2:d2:5f:1b:a8:9e:84:c6:f8:2b:
0c:97:ad:4a:83:f8:f9:6e:70:22:f6:91:2b:92:6e:b9:6a:c3:
96:4a:15:73:c2:91:39:5b:91:f3:fc:b1:a5:b8:5c:16:1b:39:
ca:23:64:bb:7d:81:b1:00:ea:0f:c3:74:0c:1c:79:df:d3:cf:
98:ea:9c:a9:31:0c:1e:08:85:87:e5:be:45:3e:9d:dd:5d:2a:
73:fe:7a:7b:54:62:5c:97:08:ee:c6:8b:e4:33:5c:06:2c:1e:
77:5e:33:c2:d6:a9:ff:34:1a:bf:bb:26:72:f8:6c:62:11:ed:
8b:28:b9:56:eb:3e:28:c5:b9:5a:ba:ae:2d:5e:ab:fe:aa:de:
8f:f1:b3:0c:70:56:33:0a:e9:11:f6:bd:70:50:09:91:f9:e7:
0c:fa:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:42:12 2025 by rpki-client