Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa
File: gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa (raw, json)
Hash identifier: Y15YZakQCxu5EXbQHRSXAR4Dmbp2CSXLuzPJPrJfz5w=
Subject key identifier: 80:06:75:83:D3:3C:E5:03:DC:1B:30:92:79:18:59:3A:43:EA:74:62
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 0C70
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa
Signing time: Mon 10 Feb 2025 14:02:11 +0000
ROA not before: Mon 10 Feb 2025 14:02:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18185
IP address blocks: 211.76.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: Feb 10 14:02:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=80067583D33CE503DC1B30927918593A43EA7462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:ea:61:b9:30:20:c3:8c:f2:f4:85:1a:da:
83:98:4a:cb:de:26:6b:70:9b:00:0e:0c:74:44:ac:
4a:96:fa:3f:7d:63:75:b0:28:37:4f:9c:35:a3:9f:
3d:e0:cc:36:5d:45:e7:df:43:13:25:ce:95:65:51:
26:a3:b4:a8:db:c0:f3:f2:c7:f8:b4:b9:d8:6e:14:
55:a8:8e:69:e4:57:ef:52:33:da:30:f8:73:f4:75:
f8:77:73:82:ea:86:09:52:97:96:50:e8:74:c9:e8:
5e:ff:03:4e:d2:de:cf:d4:9d:9b:a9:ff:ff:d4:2d:
e6:f7:50:14:18:64:60:f0:b9:f0:0e:dc:9c:87:eb:
06:e9:fe:eb:91:f0:46:24:60:f9:6e:e9:1c:63:db:
b5:60:43:e8:2f:d2:0c:3a:f6:22:e1:df:62:ba:af:
53:e3:e1:b5:e6:be:04:6c:dd:7a:c8:23:d3:b2:b0:
99:b2:42:b0:7a:1a:1a:5e:a6:f2:7f:47:d2:b1:1c:
4f:39:b8:b4:06:45:26:7a:11:54:8f:b0:99:d1:ce:
40:d0:02:67:79:72:6b:c5:f1:64:02:be:f9:5a:8f:
69:a6:90:1a:e9:da:a6:70:3d:bf:76:94:d8:31:f9:
91:6b:d3:01:82:f3:9e:e8:67:fc:53:a2:d0:53:7c:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:75:83:D3:3C:E5:03:DC:1B:30:92:79:18:59:3A:43:EA:74:62
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/gAZ1g9M85QPcGzCSeRhZOkPqdGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:f7:fb:85:ac:e7:86:8c:75:de:c9:a7:fa:04:cb:5d:96:57:
aa:06:a5:3c:7e:87:be:c1:a0:85:a1:a3:5d:c1:fe:e4:23:8e:
3e:4f:21:5c:97:8f:74:b0:8e:b1:c6:18:28:6d:95:5d:91:8c:
ce:e2:90:de:8d:9b:91:47:01:dd:07:32:54:a7:1b:83:db:68:
31:06:fb:79:b9:8f:8d:1b:dc:03:70:6d:e5:cc:33:b7:dd:c9:
6e:2e:a3:96:8d:7b:8d:93:6a:7b:e4:1e:39:22:fc:ec:27:f9:
23:a5:43:e2:76:ee:68:17:08:9f:ce:93:da:15:44:fb:c9:65:
fd:cd:6d:49:4e:86:b1:9d:c9:f5:9e:a6:02:d1:92:87:62:af:
04:1f:26:e2:f6:27:f3:0e:1b:a5:46:3e:57:e6:05:e4:0d:ef:
5b:27:58:8e:3b:e5:a3:fb:27:7a:a0:e1:54:9b:fa:97:87:f3:
70:36:5d:71:b6:28:0c:3d:c8:b9:3b:ae:1c:b8:e9:aa:be:7d:
4c:0f:e3:48:45:ac:97:51:28:73:f7:02:d8:3a:56:50:6f:33:
a9:49:3e:d8:52:f8:4c:4d:56:27:a4:c6:25:e8:85:ea:b2:12:
ad:5d:db:ce:47:6a:b8:e3:c7:b2:3f:e5:db:3a:1a:ab:08:c1:
79:c1:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:55:37 2025 by rpki-client