Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa
File: XuAEk7ccPfKGbG0pii_rmDn-1mk.roa (raw, json)
Hash identifier: z7NY5CLnow6dVjDWYuft/2GjFA/6RQig7rGfAc64sWQ=
Subject key identifier: 5E:E0:04:93:B7:1C:3D:F2:86:6C:6D:29:8A:2F:EB:98:39:FE:D6:69
Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Certificate serial: 0102
Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa
Signing time: Fri 27 Sep 2024 03:46:22 +0000
ROA not before: Fri 27 Sep 2024 03:46:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10133
IP address blocks: 160.30.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D
Validity
Not Before: Sep 27 03:46:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5EE00493B71C3DF2866C6D298A2FEB9839FED669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:a3:74:88:5c:7b:0c:aa:ee:22:b5:01:30:
4c:44:eb:2c:04:9b:a5:77:69:da:9c:61:e0:20:3c:
92:99:e6:28:d9:11:33:f5:d8:91:0e:8b:26:71:de:
fe:d1:9a:85:ca:9b:70:4f:d2:85:85:eb:8a:0d:fd:
4a:a8:65:65:0d:87:db:be:81:12:9d:80:75:66:22:
12:bd:3b:9f:ed:90:a2:59:72:b1:d0:be:19:25:51:
d3:19:85:18:ab:22:58:ae:10:41:7f:86:5b:55:50:
ca:24:13:66:68:57:8c:91:05:de:ba:12:fb:23:4b:
ca:de:8d:e9:7f:50:73:36:f4:1f:84:5e:37:2b:13:
e8:70:c7:75:0a:21:12:a5:85:8b:10:4d:e3:67:d7:
b9:32:22:9d:8b:46:14:ff:bb:f8:03:7a:98:42:91:
53:0b:ca:d6:51:b5:f6:e8:b8:34:e0:68:e7:92:6e:
b5:8a:93:9c:af:05:8d:86:0a:60:a5:c5:06:74:d3:
f7:0c:1b:0f:ea:07:6f:ef:fb:3e:56:d2:58:3e:f2:
07:ad:9c:41:a7:5a:77:f2:48:b4:f8:3a:6e:77:3f:
a3:c8:8a:27:65:8a:1d:8b:2e:ce:c1:eb:25:da:33:
9a:ae:b2:8e:10:04:84:97:3b:9b:33:d7:72:43:1a:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E0:04:93:B7:1C:3D:F2:86:6C:6D:29:8A:2F:EB:98:39:FE:D6:69
X509v3 Authority Key Identifier:
keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.78.0/23
Signature Algorithm: sha256WithRSAEncryption
85:0e:7a:7f:dc:aa:80:f5:37:4f:63:21:fa:16:e0:d8:2a:c2:
24:ce:bf:a8:47:62:93:a2:83:bf:b4:17:82:27:bc:b8:50:3c:
69:95:b6:3f:c0:c4:60:db:d9:53:8c:db:24:62:c9:d7:ba:19:
ac:1c:e3:cf:f0:79:2e:36:bd:a6:82:67:10:71:4b:82:d9:d6:
59:2d:93:fc:84:6e:dd:b3:f3:1d:9f:95:23:03:61:88:67:3f:
10:f5:9c:2c:b7:f1:ba:7e:de:09:3a:81:02:5b:47:dd:99:40:
e4:87:cd:c3:c6:29:77:27:13:62:cc:c3:0c:a1:19:14:c9:eb:
26:c5:5d:06:22:45:83:7b:51:1c:91:fc:3f:f7:79:62:c4:5f:
2c:21:ee:1e:9a:fa:ce:bf:a7:64:2f:32:23:6a:69:77:75:3e:
df:9e:19:95:73:c1:57:a9:1b:01:1c:cb:b1:6f:71:46:3a:2c:
d8:27:fc:02:f0:3f:76:ff:a6:7f:44:30:51:99:88:49:4f:ef:
d6:b4:f1:cb:0c:93:6f:fe:5c:15:e3:b9:c1:66:7a:e1:40:d9:
15:d7:84:04:fc:5e:f3:af:85:0e:9e:22:fc:7c:15:19:4b:df:
a2:88:53:19:d9:a1:a2:cf:92:56:95:02:c7:36:49:af:fb:5d:
dd:91:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:05:11 2025 by rpki-client