Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa
File: wwSuuTijJPUuAIec0dMVKF0FRqE.roa (raw, json)
Hash identifier: lUBNgdtuBu3na04yEHl8B0G+n/Og50gV34u89KMCqy0=
Subject key identifier: C3:04:AE:B9:38:A3:24:F5:2E:00:87:9C:D1:D3:15:28:5D:05:46:A1
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0D1A
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa
Signing time: Mon 10 Feb 2025 14:08:20 +0000
ROA not before: Mon 10 Feb 2025 14:08:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4782
IP address blocks: 2001:4420::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Feb 10 14:08:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C304AEB938A324F52E00879CD1D315285D0546A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:2f:df:f9:7e:f7:a9:b8:42:99:0b:f8:ff:
ef:f1:df:02:71:5f:6c:f1:57:c1:cf:40:81:14:c3:
5c:a4:dd:a5:7c:9d:54:5e:e2:93:98:cc:72:8f:bf:
0f:a6:3c:14:9f:3d:c4:b9:10:cb:4b:d4:33:b4:03:
aa:e5:0f:e7:b8:3d:6a:6e:75:30:eb:55:64:e7:4b:
a0:dd:c3:08:3f:92:72:04:e3:a0:ee:37:2a:4f:51:
81:d3:91:14:18:03:4f:d7:e9:9c:99:4d:ef:28:67:
82:fd:9d:dc:e4:b6:3a:77:97:3a:71:19:12:fc:9f:
07:43:bd:bd:53:3d:40:3f:e3:9a:e1:1d:37:11:03:
79:f2:2e:0b:d6:e0:0d:73:25:de:54:89:dd:fe:08:
e0:05:3c:a3:07:0a:88:d5:41:06:4a:50:4e:02:c0:
57:50:09:d5:10:61:0c:4b:3a:d8:96:71:57:ba:45:
75:6a:6c:34:17:3e:06:1b:25:7b:c3:d5:b8:0d:b5:
4f:39:c4:94:e3:a9:d3:5b:0c:fb:8c:8b:b1:4a:03:
e3:26:54:48:f9:96:56:df:0d:6b:8a:aa:0f:6e:fa:
29:9e:69:a9:98:8a:c8:3f:b2:53:07:1e:2b:3c:ea:
a2:fe:46:c9:88:68:a6:48:dd:77:e5:8a:4d:f6:75:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:AE:B9:38:A3:24:F5:2E:00:87:9C:D1:D3:15:28:5D:05:46:A1
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/wwSuuTijJPUuAIec0dMVKF0FRqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4420::/32
Signature Algorithm: sha256WithRSAEncryption
7f:4b:5a:e7:b6:3e:8a:85:6c:4c:55:87:56:0e:4b:6b:33:15:
ca:05:7c:3b:39:79:cf:63:b9:94:8f:3b:e1:3b:8e:23:10:91:
11:b6:45:17:dc:30:64:4e:f1:be:91:f7:bf:50:f0:dd:c8:65:
5f:0c:3f:cc:6a:1f:bf:25:61:7b:3e:77:a3:14:aa:93:71:d8:
90:0e:eb:99:9f:69:99:4a:25:f0:38:11:69:75:47:65:40:9e:
0d:f9:b9:ec:5e:87:ab:8c:5b:ee:74:86:b8:c0:eb:51:10:df:
e2:dd:01:2f:9f:1e:53:76:03:37:3a:ec:0e:9d:26:77:b5:42:
fd:8b:4a:e9:d0:91:b7:20:65:86:a7:a1:f3:0c:cb:54:41:14:
0e:ee:32:b2:a5:f4:7a:a6:09:64:83:55:f1:61:43:e1:09:b1:
a2:9a:5b:c6:90:9d:db:5a:4d:9f:cf:24:e0:6b:a2:1c:2f:8e:
11:f6:ad:41:ec:e1:dd:8b:b6:a7:6b:16:b0:c7:5c:88:8b:db:
c5:5f:50:68:25:e4:ef:3c:f7:d8:c6:92:92:90:c1:b6:24:94:
10:1c:d2:57:f7:b2:66:55:f4:80:dc:c2:7f:ec:61:f9:56:1a:
6d:73:26:30:44:ad:5e:73:86:2f:ba:c9:f0:a7:d2:b6:32:01:
58:7a:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:43:43 2025 by rpki-client