Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa
File: d5D7Go8q4Qdx06VdURVyEc4HzNY.roa (raw, json)
Hash identifier: aNWAuC/temxMq1rcVcjBYJRVf8Dac3Yf21kE7mXKYuM=
Subject key identifier: 77:90:FB:1A:8F:2A:E1:07:71:D3:A5:5D:51:15:72:11:CE:07:CC:D6
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0D0F
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa
Signing time: Mon 10 Feb 2025 14:08:18 +0000
ROA not before: Mon 10 Feb 2025 14:08:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4782
IP address blocks: 61.57.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3343 (0xd0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 10 14:08:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7790FB1A8F2AE10771D3A55D51157211CE07CCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:46:c1:6f:75:37:70:2c:0c:04:e8:f1:3d:
38:37:eb:c4:c6:d4:64:44:e9:d1:8b:ac:e3:30:8e:
9b:00:96:aa:3f:f4:a3:94:ec:8e:29:37:eb:d1:3c:
2a:5b:5b:88:b1:f9:47:f5:28:f4:d1:36:a3:91:58:
9e:bf:0c:84:9c:ba:45:50:78:5b:1e:b9:41:f8:7d:
08:e2:35:ca:15:8b:3e:b4:a8:a3:90:a4:65:a0:cf:
fd:00:35:e8:ec:40:1d:37:34:5c:2d:8f:39:80:86:
05:f4:21:9b:92:98:00:40:e6:3d:99:be:c0:0a:54:
77:98:5e:cc:5a:c7:81:e7:36:29:01:96:b8:e4:5a:
ef:4e:d6:05:b3:2e:e7:6c:9f:4f:f3:f5:90:4d:27:
b7:f6:35:f1:a3:a6:21:52:88:ab:1c:58:13:ce:4e:
4b:b3:44:89:eb:e9:18:ee:28:6f:6b:39:cd:2d:3e:
73:f8:6e:6f:5f:23:1e:8c:d9:32:5b:c5:4c:d8:9d:
b5:82:12:b7:86:88:81:be:4f:3c:3a:b0:82:b5:31:
57:a1:d2:a9:0b:49:31:d1:ac:ae:06:04:17:06:1f:
22:aa:ad:10:b8:6e:6d:c0:a9:94:66:31:fe:25:10:
4b:0c:c4:88:da:f7:5e:c3:51:66:c6:da:bc:7b:d3:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:FB:1A:8F:2A:E1:07:71:D3:A5:5D:51:15:72:11:CE:07:CC:D6
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/d5D7Go8q4Qdx06VdURVyEc4HzNY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:41:d0:eb:4b:6f:45:27:1e:79:13:8a:50:92:c6:61:ff:ed:
a0:73:f0:c0:91:f3:98:c5:46:b8:ab:2e:89:dc:32:ca:bb:1b:
a4:d2:94:38:3b:b5:32:1f:04:84:94:f3:2e:f7:4f:59:a8:44:
3a:c0:78:f3:db:dd:d9:4c:2a:d6:26:08:c3:9c:f5:e5:73:e8:
6f:bc:20:b9:d8:53:d3:ca:99:c8:59:79:bf:d2:a2:a6:03:98:
52:0f:53:68:b7:fe:83:88:b6:ac:2b:f1:ec:f3:c2:ed:2d:1f:
98:60:31:dc:e4:02:49:d5:01:04:b6:94:66:55:2f:26:9a:39:
4f:0f:94:ad:bf:25:be:5e:fc:d8:2b:88:dc:80:66:68:4f:e0:
32:aa:81:25:74:86:4b:32:13:d2:1e:fa:9d:a7:55:2a:80:d1:
eb:86:26:1a:42:75:8c:70:a1:be:08:9e:24:80:7f:b3:bd:27:
47:81:04:7e:fe:5e:79:1f:8a:fa:6c:55:02:cb:48:d0:c8:10:
64:45:e7:79:c4:a3:73:70:f5:ca:82:11:e0:1b:1a:74:33:42:
44:51:94:f2:77:06:a3:af:bb:7f:78:1f:a9:b4:de:27:d3:68:
16:21:7c:09:78:e2:c8:f8:84:a5:b8:85:38:f7:1f:56:a7:a9:
60:27:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:41:38 2025 by rpki-client