Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa
File: XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa (raw, json)
Hash identifier: g7890zWfIvd8By3eVMR5MGg0QCsLhv+AyZ02JyKezdI=
Subject key identifier: 5C:D0:83:59:5D:D9:57:3E:51:94:BD:C3:C8:9D:E7:CA:F3:DA:AA:11
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0D23
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa
Signing time: Mon 10 Feb 2025 14:23:29 +0000
ROA not before: Mon 10 Feb 2025 14:23:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 111.235.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3363 (0xd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Feb 10 14:23:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5CD083595DD9573E5194BDC3C89DE7CAF3DAAA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:6f:4e:6d:ab:ce:bb:3f:04:bb:56:00:3e:
1d:bb:62:4e:9b:88:d5:f3:3b:98:21:30:a9:ed:c9:
92:84:a3:29:c5:27:74:da:a5:15:c0:b4:85:98:c3:
57:d3:4e:f1:05:6a:31:02:60:c3:de:3e:6d:b6:2e:
5d:92:bd:4e:62:b4:d4:d9:65:65:e7:4d:da:7d:58:
69:fb:59:fd:4c:a3:ff:3b:66:3f:87:aa:49:ed:80:
22:17:3a:c5:36:d9:7c:a4:4c:ad:f9:85:ee:bd:d6:
ef:24:a0:42:a5:58:37:10:b8:12:20:6a:cf:df:1a:
51:41:64:4e:be:92:06:f8:9f:31:ee:2c:e3:5b:aa:
5e:af:e9:8a:cc:10:73:15:c1:3d:db:e7:b1:93:79:
7e:71:78:8f:fa:13:e3:fe:04:3a:53:6e:de:b4:4b:
10:43:e7:25:46:e8:d5:fe:a2:29:55:4e:d0:2e:f4:
49:d3:bf:e2:4f:6f:25:49:3f:d1:72:e5:c9:6c:64:
fe:a6:fd:1f:9b:b1:b3:54:6b:8f:57:ad:ea:e1:8d:
4d:1a:50:25:30:ae:d5:00:95:61:2c:6d:7e:f1:7f:
91:5d:92:a9:97:c2:d2:45:f2:9f:51:53:47:86:f2:
29:fd:88:af:29:3a:bf:00:f0:01:6b:44:9b:ab:6f:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D0:83:59:5D:D9:57:3E:51:94:BD:C3:C8:9D:E7:CA:F3:DA:AA:11
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/XNCDWV3ZVz5RlL3DyJ3nyvPaqhE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.235.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:da:f6:63:12:36:ec:6b:d0:5a:dc:25:df:2d:9e:c5:b3:ad:
ff:2c:76:73:09:1e:5d:e1:34:4b:8c:1e:cc:b0:86:62:0a:e1:
7a:5c:61:4c:e3:c6:3f:d0:cb:b0:da:95:35:dd:f4:ef:da:45:
28:b1:4c:05:51:3a:e9:68:5f:95:a9:d6:47:0e:d7:64:fa:8d:
8f:97:51:39:d6:3e:17:75:70:3c:5a:31:83:12:fa:fa:8a:27:
68:b7:2f:1b:fc:c9:1a:fe:b6:a4:90:0e:b7:87:73:ec:cb:57:
81:0e:4a:13:4f:f5:33:c6:53:95:2a:25:2d:e9:59:22:5f:3b:
86:e3:0f:bf:77:1f:3f:6c:6c:48:a4:03:f0:c7:11:d0:6a:c3:
9c:94:28:28:13:2d:5e:eb:f3:8c:fc:3c:93:d7:fa:7c:75:c9:
36:b2:3c:f7:31:a9:a0:be:e3:d3:a3:b3:c1:a9:e0:50:af:2d:
1e:43:08:3b:ae:3f:83:36:d8:6a:58:d3:5e:af:96:8f:b2:74:
9b:ea:25:f4:ae:c1:ee:1c:07:7f:a1:2b:69:3f:cf:fd:68:ec:
3b:f3:05:ec:bc:93:10:2f:83:2c:4d:d3:92:74:7b:9f:22:24:
70:ac:47:b4:88:b7:fc:de:9e:7c:88:ca:85:6e:59:01:5f:9d:
41:42:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 14:01:57 2025 by rpki-client