Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa
File: -fDkZXqt3dAc4fMnouKy3INXr4A.roa (raw, json)
Hash identifier: 6bfVqJPkJqV01udiYnpa8uz+Fk3aDyCbx/lJj/V2V5M=
Subject key identifier: F9:F0:E4:65:7A:AD:DD:D0:1C:E1:F3:27:A2:E2:B2:DC:83:57:AF:80
Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Certificate serial: 0A13
Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa
Signing time: Mon 10 Feb 2025 14:09:49 +0000
ROA not before: Mon 10 Feb 2025 14:09:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131674
IP address blocks: 2405:b8c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96
Validity
Not Before: Feb 10 14:09:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F9F0E4657AADDDD01CE1F327A2E2B2DC8357AF80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:2c:12:61:7b:60:f1:e3:87:43:00:40:67:
4f:c8:8c:d6:99:3d:ec:f4:95:9c:4e:3d:90:ae:4d:
10:a5:25:19:3c:16:f1:dc:50:51:d3:23:53:16:c2:
49:dd:e2:ac:e1:93:26:ea:58:31:94:33:73:b0:ac:
f2:8f:37:8e:35:46:d6:62:9d:84:fa:1c:b0:0a:c1:
27:71:74:10:19:7a:72:87:47:5b:48:1d:6e:c5:d0:
1b:4b:9c:99:c2:7a:99:6a:9f:81:fd:5e:e7:da:a3:
be:00:b3:0f:92:6b:86:ff:25:33:ba:70:2b:d2:14:
19:cf:26:34:d2:a9:4d:6f:25:fa:56:dd:70:40:07:
2b:57:ab:01:48:ee:59:75:01:6b:9f:87:42:54:24:
b8:df:d9:c8:90:d9:6d:6c:cb:99:8f:9e:09:39:d4:
e6:da:e7:e5:1c:98:34:44:90:fb:17:b2:00:94:c3:
08:ec:a6:9e:77:b5:b4:8d:ce:e8:7b:f8:8c:07:76:
57:b2:78:49:cb:79:95:92:5d:da:6d:cb:96:73:7c:
d0:09:a9:67:b0:aa:36:b2:45:93:40:58:48:21:8f:
ae:05:e1:f6:cf:ea:36:31:9d:db:a6:22:a7:fe:df:
ac:43:5b:66:41:7c:82:dc:17:d9:6d:37:59:3e:0d:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:E4:65:7A:AD:DD:D0:1C:E1:F3:27:A2:E2:B2:DC:83:57:AF:80
X509v3 Authority Key Identifier:
keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/-fDkZXqt3dAc4fMnouKy3INXr4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:b8c0::/32
Signature Algorithm: sha256WithRSAEncryption
88:66:65:53:c7:ed:5b:0d:03:13:f2:65:0b:c2:b2:f3:15:20:
12:75:fa:83:f4:8c:45:39:3b:67:85:e6:dd:bb:51:3a:e2:98:
4c:24:a4:52:54:c0:8f:88:0c:23:ec:3d:94:67:d7:90:03:6f:
9e:9d:06:8f:69:d2:6d:6b:b9:59:e0:65:ef:ad:ec:a0:aa:0b:
21:49:a1:7d:2f:49:dc:33:d8:61:d4:46:fd:5b:c0:8d:76:4b:
b9:75:be:be:7d:c7:32:8e:f9:1e:1f:7e:16:c0:1c:6d:5d:44:
6d:a2:2d:9c:f8:1c:74:56:5b:a0:06:e2:6a:1e:c6:0c:08:7c:
34:2a:d7:48:bc:8d:41:b3:9a:d3:a5:c9:af:d1:97:43:d2:70:
5d:e1:cc:41:be:45:97:c6:ad:0a:d7:7d:a1:99:3e:57:a1:fa:
93:bb:91:39:f3:96:7f:1b:1d:ab:6f:3d:f3:a8:f5:ba:3e:7f:
30:50:59:c5:1d:8c:6e:50:58:3e:1e:94:d7:09:ab:06:16:9b:
f4:93:c5:fc:61:6e:22:31:38:7e:b4:c2:6f:00:6a:e4:57:45:
f9:b6:1d:2e:1e:9f:5c:ae:db:b3:f2:be:bf:6b:68:c6:38:a3:
3f:4d:2f:0b:53:44:11:7f:e6:e5:90:2a:67:ca:75:53:09:80:
fb:3c:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:58:00 2025 by rpki-client