Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa
File: MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa (raw, json)
Hash identifier: HHyBcPkWrv/s4BAPXcka/XOk74nTviZhJ+Pn7QHT6+E=
Subject key identifier: 31:37:F2:1F:C2:A3:ED:82:0A:9A:DA:38:58:6F:DB:16:51:05:EE:A3
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 018B
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa
Signing time: Mon 10 Feb 2025 13:44:14 +0000
ROA not before: Mon 10 Feb 2025 13:44:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 2914
IP address blocks: 202.160.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Feb 10 13:44:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3137F21FC2A3ED820A9ADA38586FDB165105EEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:ca:15:b1:63:55:8c:a7:9a:85:91:af:26:
5a:f4:86:9e:9c:04:0f:5c:31:51:57:0f:66:63:66:
5d:d7:38:a7:d5:04:a5:5c:44:16:a0:b7:ec:d7:64:
46:e9:10:e1:2d:14:c5:1e:89:16:87:92:bc:5c:b8:
a9:d2:c2:cf:56:89:a3:05:e8:cb:d3:55:35:c7:9a:
7b:28:68:fd:ab:1d:6a:9e:31:b2:a4:5b:6c:fd:dd:
f3:7a:2c:4b:7b:8a:8b:f4:9b:57:19:55:07:86:62:
2a:70:1b:92:d2:25:fa:ed:2d:b5:a0:56:23:2a:8a:
6c:bb:01:08:03:ec:76:66:14:f8:ff:d1:48:7d:94:
b9:7f:25:49:06:b7:93:8c:a9:ec:77:7f:75:b8:b2:
f5:cc:e7:1f:f6:f4:58:31:1d:a2:00:fb:4d:71:d0:
ab:d7:98:aa:73:eb:72:68:3b:5d:9e:e7:97:7b:6b:
30:66:2a:b5:d1:db:80:8f:85:f6:b7:d3:82:d8:61:
d6:1a:c9:84:03:c6:f9:b5:97:5b:ef:f2:0b:ee:04:
49:af:0d:de:92:5a:84:72:16:5d:a6:c5:3d:c0:92:
8a:ba:63:74:c6:ab:6a:07:a5:08:d4:86:a0:a9:d4:
3c:83:20:f2:18:1c:77:d9:59:d7:58:99:4d:58:6e:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:F2:1F:C2:A3:ED:82:0A:9A:DA:38:58:6F:DB:16:51:05:EE:A3
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/MTfyH8Kj7YIKmto4WG_bFlEF7qM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.64.0/21
Signature Algorithm: sha256WithRSAEncryption
09:43:8f:56:f0:5c:2c:2f:a6:2e:f3:43:41:42:66:aa:35:69:
0f:5e:35:d3:34:0e:ac:45:1c:c2:ba:95:04:11:a1:d1:c4:84:
83:b8:13:65:88:4c:6a:07:a5:02:77:05:b1:40:c3:e1:e2:1b:
81:84:31:08:ce:28:22:c2:58:2a:ca:f8:b3:62:f0:98:35:bc:
98:6d:35:0b:6f:1b:4e:bd:a3:25:48:94:cb:29:e2:07:54:b4:
06:ba:58:4f:55:7d:87:64:b0:ec:51:7b:b0:98:1f:0e:31:ad:
fd:4b:2a:cb:40:00:02:44:0a:b8:1c:72:1d:70:18:a7:c4:6e:
4f:89:e1:e1:de:eb:00:52:6d:ab:86:5b:d6:65:21:1b:e4:4a:
73:bc:08:be:a4:d0:e8:2d:75:4a:00:c4:18:1a:32:58:6f:a9:
9f:e0:84:96:20:b4:b1:d7:d7:84:f0:f5:da:4d:6c:ad:00:6a:
15:26:23:d4:ad:69:61:d6:dc:fb:04:b7:63:57:c3:ff:e7:d9:
0a:70:9a:07:50:9f:6e:9d:a6:a7:30:09:e6:62:38:f9:19:21:
91:df:f8:1e:4b:b9:5c:ae:29:21:0f:e4:ca:1e:f4:34:92:36:
fb:68:15:fa:a4:54:44:d0:b7:2c:57:84:c7:8a:3a:3e:7d:ab:
f7:c1:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:22 2025 by rpki-client