Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
File: 6U2F1T0apyKE_s6KjVTtn1ngCPM.roa (raw, json)
Hash identifier: T6Wekowtjx5HTVqLi5LQgaYJZqcoVmMpZasCEkrrxIw=
Subject key identifier: E9:4D:85:D5:3D:1A:A7:22:84:FE:CE:8A:8D:54:ED:9F:59:E0:08:F3
Certificate issuer: /CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Certificate serial: DA
Authority key identifier: 1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
Signing time: Mon 10 Feb 2025 14:22:29 +0000
ROA not before: Mon 10 Feb 2025 14:22:29 +0000
ROA not after: Fri 26 Dec 2025 15:30:27 +0000
asID: 152619
IP address blocks: 2401:e3e0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F7D627FE36A2EBF69809BC847B5433BF43E37E8
Validity
Not Before: Feb 10 14:22:29 2025 GMT
Not After : Dec 26 15:30:27 2025 GMT
Subject: CN=E94D85D53D1AA72284FECE8A8D54ED9F59E008F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:ff:e8:5b:5d:39:90:ad:b5:05:a2:b3:77:
55:55:4f:ad:3a:af:20:7f:c4:04:18:35:ac:18:41:
bf:22:6b:5f:b8:67:d9:31:d7:5d:59:29:45:ce:25:
fc:f2:75:19:2e:76:d0:25:93:7d:8e:91:de:31:24:
f7:41:10:86:d5:ec:cd:9f:3a:cc:27:10:90:8b:91:
81:69:f7:17:95:12:07:0a:dc:f3:9b:15:77:43:f0:
8a:4e:86:bc:be:d4:4b:51:dd:ea:a4:a1:1c:32:fb:
3d:1f:ea:1b:7d:92:20:e1:c4:a3:05:25:28:90:de:
84:6a:44:44:3e:c2:12:ba:f9:ed:87:5a:45:ac:98:
25:fc:2f:8f:8d:14:bb:56:61:0e:de:78:01:8a:f9:
8b:94:9c:e2:96:9d:db:57:4c:79:23:7c:70:97:36:
85:54:6a:7a:cb:c6:34:92:40:7f:9b:9d:85:47:a3:
22:93:24:0a:75:dc:e3:ce:41:ae:ee:98:70:34:c9:
fa:0b:6b:97:6d:35:9b:1e:a3:7e:1d:eb:1c:10:48:
ba:5e:a8:5d:08:40:5e:a9:37:7c:99:1a:37:82:0f:
e5:f4:b6:86:df:e7:d9:eb:17:94:f5:e8:80:08:42:
d2:0f:e3:13:a0:0f:25:9f:fb:d9:e4:72:d1:d1:05:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4D:85:D5:3D:1A:A7:22:84:FE:CE:8A:8D:54:ED:9F:59:E0:08:F3
X509v3 Authority Key Identifier:
keyid:1F:7D:62:7F:E3:6A:2E:BF:69:80:9B:C8:47:B5:43:3B:F4:3E:37:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/H31if-NqLr9pgJvIR7VDO_Q-N-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H31if-NqLr9pgJvIR7VDO_Q-N-g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VERYFAST/6U2F1T0apyKE_s6KjVTtn1ngCPM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e3e0:1::/48
Signature Algorithm: sha256WithRSAEncryption
90:97:75:1f:38:4b:f3:76:41:c5:1a:7d:53:a1:56:54:64:28:
bd:bd:1b:c2:7f:c3:70:dc:ed:47:53:27:71:2f:92:a9:c6:cb:
32:7f:06:2a:7f:8d:cf:54:37:b8:81:12:de:fb:e4:7c:c3:3a:
d0:9f:47:31:77:2c:70:de:e2:08:60:82:7d:68:f3:64:66:f6:
91:ff:1e:36:49:04:af:a9:75:11:27:01:44:86:c8:e3:89:0f:
7b:bf:60:f2:cb:0d:10:96:80:d4:63:8c:bd:aa:cd:6a:2a:ed:
4d:39:81:ad:fe:61:69:5d:76:06:97:11:a1:6e:da:24:7b:c5:
91:c0:80:3b:95:9e:03:f8:9f:6c:eb:32:86:d0:3e:c8:5d:36:
b9:e6:59:6c:91:85:d0:17:c5:d3:ce:55:c2:d6:aa:fd:70:98:
44:36:44:76:ee:47:98:67:a1:e9:b4:0b:80:f0:33:dc:d0:b9:
69:eb:a0:1e:96:aa:09:0f:59:41:f7:75:89:97:cd:76:a3:4d:
3e:aa:8b:28:10:69:41:d1:ec:5d:3a:cd:aa:fe:66:b6:63:0e:
03:46:e2:d6:a8:12:db:b2:47:0a:cf:3a:00:87:c3:7c:ac:d0:
77:df:06:fd:5e:b9:99:11:9c:5b:b5:93:37:02:1e:6e:5d:d7:
ea:5a:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:43:43 2025 by rpki-client