Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/7IxPfTiIBiXk2f6wg_mfQuUwsCU.roa
File: 7IxPfTiIBiXk2f6wg_mfQuUwsCU.roa (raw, json)
Hash identifier: D2r58lXJiIIGPYO1nfsNFBg2eQ8AAEfVJBRu4yLM7HE=
Subject key identifier: EC:8C:4F:7D:38:88:06:25:E4:D9:FE:B0:83:F9:9F:42:E5:30:B0:25
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0C9C
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/7IxPfTiIBiXk2f6wg_mfQuUwsCU.roa
Signing time: Tue 03 Dec 2024 08:50:50 +0000
ROA not before: Tue 03 Dec 2024 08:50:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 136173
IP address blocks: 43.224.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Dec 3 08:50:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EC8C4F7D38880625E4D9FEB083F99F42E530B025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:6e:e7:8c:df:6a:27:2e:f2:cf:ce:75:be:
4f:7a:bb:78:5f:a9:85:4a:ed:98:42:92:b9:62:3f:
f4:a1:f4:2d:80:39:eb:7d:da:cb:40:65:89:3f:74:
78:1c:4b:71:30:61:78:4c:95:28:1d:d1:cb:b8:62:
2a:c4:67:c3:e5:87:86:bf:32:a9:31:c1:dc:12:9d:
40:e2:1f:8b:e1:f6:67:ff:28:39:03:cf:8b:bc:b6:
3a:f1:2c:21:6a:17:2a:a3:ff:46:07:14:8f:16:56:
3d:32:10:d5:34:08:94:49:24:80:33:c0:47:0c:fc:
f9:9e:2a:b6:e8:f9:1e:0a:6b:14:0b:f6:38:0f:56:
7a:9d:56:19:a7:4d:8e:12:41:24:e0:64:5f:f1:9c:
33:d5:0b:9c:e3:c3:8b:00:46:6b:27:19:55:31:25:
ac:53:52:48:83:2f:ef:7f:78:4b:4a:4d:ee:b2:47:
ec:8d:16:29:c4:c6:0a:22:0a:2e:6e:07:0e:44:db:
4c:d5:06:9c:6c:a2:46:e5:45:96:af:1d:df:da:5f:
7c:2b:61:6c:bb:f5:ea:e3:3e:a2:b6:ba:21:31:d7:
04:54:a2:e7:04:b8:a8:e6:9f:6d:eb:36:00:78:e4:
f8:ac:36:0e:d8:3b:17:3d:53:7d:80:81:64:66:0b:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8C:4F:7D:38:88:06:25:E4:D9:FE:B0:83:F9:9F:42:E5:30:B0:25
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/7IxPfTiIBiXk2f6wg_mfQuUwsCU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2b:c0:0c:c9:22:a6:7f:e0:2e:11:5b:e4:7e:bd:e5:b0:f9:
ee:0d:4e:94:5b:29:aa:bf:65:91:9d:20:41:e1:79:3e:7f:b4:
6a:47:04:29:75:97:56:b9:37:d4:38:ef:c0:83:af:21:4e:d5:
ae:e3:84:15:85:84:b8:a5:23:78:22:e1:62:b0:4a:5f:1d:4e:
cf:68:15:44:5e:32:b0:11:c3:b0:4f:55:e0:6b:89:45:9c:d8:
c1:83:91:64:ed:c7:99:3a:8f:21:fb:d5:94:4f:72:69:4b:79:
3f:e0:63:e0:6f:f2:2e:8a:94:d7:58:6c:15:ed:7a:d7:0a:d4:
4c:44:1b:b7:85:67:38:4c:d4:1c:5d:03:14:5e:7d:bb:ca:62:
db:72:6c:2a:e5:1d:d8:39:52:9b:76:ef:67:31:50:aa:72:d7:
c7:73:3f:38:7e:aa:9d:34:db:ec:73:48:02:10:ea:f2:9b:c0:
f4:54:e8:a1:46:b0:96:4c:f2:05:c0:f9:75:94:50:22:7d:2d:
0f:c1:d3:0e:85:bc:18:2b:7c:a5:47:fe:1b:df:ef:b7:20:1d:
21:2b:99:a0:9a:c5:9e:d5:86:b1:9f:bd:43:20:46:5a:83:16:
b0:ea:5a:35:73:4c:44:25:fa:28:5a:e5:0a:e6:41:2e:3c:ce:
7a:fb:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:24 2025 by rpki-client