Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa
File: w8xdOGZrEKe1FTioerEbgxzTB3U.roa (raw, json)
Hash identifier: zE5XUS07FBghHN5BNLpoQkPKn/e6zvgcoUP9xmgZc1o=
Subject key identifier: C3:CC:5D:38:66:6B:10:A7:B5:15:38:A8:7A:B1:1B:83:1C:D3:07:75
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0CDB
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa
Signing time: Mon 10 Feb 2025 14:02:56 +0000
ROA not before: Mon 10 Feb 2025 14:02:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131593
IP address blocks: 43.251.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3291 (0xcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Feb 10 14:02:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C3CC5D38666B10A7B51538A87AB11B831CD30775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:6b:94:50:2d:c2:2d:ee:b3:05:ad:de:2a:
de:24:2e:b4:2b:de:68:98:fb:92:5d:6e:c3:7b:41:
f4:b4:ac:f0:d5:35:26:16:ab:30:82:f4:eb:5d:7d:
db:5e:04:80:c9:8c:7c:7f:ca:60:fd:f9:bb:5a:3f:
75:a1:5b:c5:bc:80:c9:d1:db:68:81:69:cd:ad:74:
18:ff:74:a8:c4:43:61:09:c4:f9:1f:de:db:14:66:
9e:cf:67:a7:22:ec:e5:78:57:2b:b9:87:7a:6d:d8:
12:20:a1:26:d4:d1:43:f6:bf:2d:4f:5d:85:2a:75:
b8:f8:c2:c8:05:bf:ec:05:58:9f:f8:42:85:9d:70:
57:94:c9:b6:2d:88:29:35:c3:cb:f0:9c:e6:8e:83:
52:d5:1f:60:47:f1:8a:e9:8b:65:f9:05:11:36:40:
af:8f:eb:4e:07:5d:8e:bb:79:65:10:a4:5f:4d:df:
0b:8d:41:b6:69:d3:45:8e:c1:1d:f9:15:2a:fc:a2:
13:fb:ef:da:63:d6:96:fa:fe:94:77:22:38:7c:5c:
2b:a8:b9:a2:f3:77:01:b0:a7:a4:d7:ca:ab:c8:62:
ed:11:14:66:c4:ac:64:25:3a:6c:a6:83:b3:fb:36:
05:53:7e:1c:7a:f3:1e:27:46:22:42:ff:0a:f6:83:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CC:5D:38:66:6B:10:A7:B5:15:38:A8:7A:B1:1B:83:1C:D3:07:75
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/w8xdOGZrEKe1FTioerEbgxzTB3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4e:48:e1:94:d4:81:f9:99:04:51:5d:a3:42:f2:a1:47:76:
9f:48:8f:1b:54:8d:4f:60:ba:41:f7:88:80:b6:87:40:3b:3c:
2b:63:17:be:f8:8b:32:95:57:c7:37:e9:9d:7c:3c:31:ac:37:
2a:70:eb:bd:ad:a1:aa:11:a4:57:38:e2:83:ff:2f:59:b3:16:
c4:7e:13:38:c6:07:c1:6d:98:6d:13:10:26:2b:76:c7:86:e9:
f4:9f:56:e0:e0:02:00:3b:ab:57:75:ca:0e:7c:c7:0c:96:bb:
5f:31:ee:2a:a6:2a:85:67:ab:dc:0a:ab:95:c5:b0:35:be:c5:
bf:ef:8c:aa:0d:86:4f:d5:48:5d:e9:0c:31:99:49:e6:64:b1:
da:67:a7:02:a4:e3:e3:26:23:ae:51:7b:f9:63:81:d0:77:2a:
f6:bb:21:84:52:11:92:6d:d4:4f:05:c4:08:2c:a7:ba:56:e8:
80:39:7b:c7:07:7e:27:93:bc:4d:1a:e4:d0:f3:2e:d1:f4:e7:
5e:05:f9:4d:3c:ae:89:33:8f:63:74:f4:0f:70:59:4e:25:74:
6a:44:29:95:69:69:6e:77:b3:d2:8a:47:9e:7f:0a:e4:e5:df:
70:49:92:e4:43:88:0b:e0:01:7f:fb:78:e9:7f:63:39:fa:be:
9b:b3:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:36:39 2025 by rpki-client