Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa
File: se7FJWD_woURmKPXQawb96dUemw.roa (raw, json)
Hash identifier: emadz6fOTyJp9nw7Ndopx0Zm4+LVYoYR1Q3HY/KcwF4=
Subject key identifier: B1:EE:C5:25:60:FF:C2:85:11:98:A3:D7:41:AC:1B:F7:A7:54:7A:6C
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1358
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa
Signing time: Mon 10 Feb 2025 14:03:38 +0000
ROA not before: Mon 10 Feb 2025 14:03:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 16509
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4952 (0x1358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Feb 10 14:03:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B1EEC52560FFC2851198A3D741AC1BF7A7547A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:74:6b:05:bc:68:a1:d1:42:5d:16:d6:80:
ee:b5:78:87:78:a9:e4:d5:af:24:0d:d1:ba:da:a8:
7b:68:a3:81:d6:27:25:18:05:ae:19:b9:fb:06:5a:
0f:8e:be:e8:a4:06:2b:8e:31:9e:d5:a0:4e:69:64:
ec:33:81:b4:e9:c7:f0:48:8d:c7:76:70:2c:ac:6c:
c2:d5:0e:b3:b4:8f:f0:dd:17:a9:da:4e:28:25:75:
53:bd:da:86:eb:0d:a4:a4:64:dd:20:74:ac:53:6c:
fc:ca:76:c4:59:e5:51:14:9d:51:74:1b:eb:61:7e:
ff:2b:73:d0:9d:11:90:72:47:a0:dd:e5:30:7f:82:
79:c1:89:bb:2e:e9:37:87:d4:48:86:5e:1c:51:fd:
47:61:1e:b1:3c:9d:b5:1b:75:34:23:07:de:07:c8:
bf:62:a7:a6:bc:82:83:9f:d7:e9:20:b7:05:5a:ff:
2f:54:b1:c4:d9:cc:43:ad:39:18:21:70:23:91:70:
06:72:d7:e6:b1:e6:db:a2:5d:f7:5b:1c:4c:e3:59:
9a:11:2f:64:47:8c:8f:48:85:70:5e:ab:ef:f1:e9:
98:0a:af:29:f4:09:82:28:de:25:29:94:7f:1e:21:
03:27:7f:30:29:ca:06:b1:db:20:b4:81:56:50:56:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EE:C5:25:60:FF:C2:85:11:98:A3:D7:41:AC:1B:F7:A7:54:7A:6C
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/se7FJWD_woURmKPXQawb96dUemw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
75:f7:33:76:23:da:fe:ff:ec:3f:09:ee:23:4e:f7:70:48:7f:
76:50:6c:1a:4e:eb:74:01:cc:8e:5a:5f:a2:f0:60:5e:0b:82:
19:c5:47:13:b8:96:e7:12:a4:cb:93:2a:1c:91:94:76:c6:16:
ae:98:f3:9c:05:30:64:22:f2:40:1b:5a:7d:46:fa:ec:0d:1a:
5a:d3:1f:79:5c:d4:39:d9:9f:5a:10:6e:78:4a:8a:ef:87:aa:
71:ac:b9:81:3c:f6:d1:90:d1:30:d9:dd:6e:fb:4c:33:86:b4:
e1:f8:21:f4:63:ec:28:6c:3f:02:a2:cb:30:68:6c:e2:c8:5e:
64:78:12:da:c5:43:a2:e7:e8:47:a1:f6:23:ce:70:12:13:c0:
77:fc:35:5e:06:e3:6d:53:52:76:a3:ce:7b:f3:62:df:65:5c:
52:cc:d3:7b:16:c7:80:84:ed:97:08:f9:ef:fb:ae:92:f6:5b:
c8:bd:e9:9f:ca:a0:f5:8c:55:7c:ff:40:80:32:f9:c6:d5:90:
9e:8e:07:04:e5:84:96:32:41:10:4d:96:c7:10:d4:32:ab:06:
7e:4b:2b:a7:58:cb:93:0c:77:e3:53:1c:1a:0c:1f:bb:18:f3:
de:56:35:e0:b7:da:33:c3:97:db:da:d8:41:75:96:a5:c5:6b:
0e:3f:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:05 2025 by rpki-client