Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa
File: McWrn1P_AhEzX1qj_jddr-Y2BKg.roa (raw, json)
Hash identifier: qiWx8pf7qG0Ym3xCDWcYm+GgWAbQgiKFkar6Tge9N/E=
Subject key identifier: 31:C5:AB:9F:53:FF:02:11:33:5F:5A:A3:FE:37:5D:AF:E6:36:04:A8
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0C81
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa
Signing time: Mon 26 Aug 2024 05:26:35 +0000
ROA not before: Mon 26 Aug 2024 05:26:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Aug 26 05:26:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=31C5AB9F53FF0211335F5AA3FE375DAFE63604A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:88:c0:ed:41:11:9b:74:73:96:dc:49:64:
e2:54:20:78:12:f8:b2:82:96:da:39:ff:4d:02:0a:
0a:88:22:e6:b8:f2:a4:de:29:d9:af:d9:23:31:e5:
08:9e:ec:eb:ca:6e:c6:a8:9c:1e:37:fa:66:c7:a1:
0e:7b:b0:ef:7d:01:12:82:c7:0b:bf:16:6c:25:b6:
d4:2f:a6:a0:88:47:58:0a:c0:30:30:da:fa:85:86:
c8:43:6f:b0:40:2c:77:c1:59:08:6f:1a:84:9c:40:
40:2d:0b:bc:51:d0:1e:a0:cb:9d:81:1e:d9:bd:2f:
70:3d:a2:9e:13:b6:19:19:79:b3:81:e9:a9:22:bb:
24:24:32:f5:78:c5:c2:e1:12:d5:32:3a:6e:24:07:
7a:a0:0e:69:6b:2d:62:e0:18:ee:96:da:c2:0a:2a:
16:43:6f:d6:16:f8:2c:f1:0d:4a:53:79:89:16:2b:
83:44:db:e9:60:4c:72:be:4f:23:f0:70:ad:c3:aa:
e6:30:d9:a8:84:64:ff:11:5f:51:14:3e:eb:91:d2:
1b:1f:73:07:12:d3:f3:ec:f3:1b:bf:e1:11:e7:cd:
eb:ac:e5:fa:66:41:b0:41:89:10:39:5b:b7:39:1d:
8b:32:86:ae:82:b9:07:9a:e1:e2:30:d7:b6:9d:d5:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:AB:9F:53:FF:02:11:33:5F:5A:A3:FE:37:5D:AF:E6:36:04:A8
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:fe:ba:78:ca:e8:01:d0:8f:d2:c8:1e:a9:b3:5f:b0:8a:29:
64:32:4a:35:59:94:e2:0f:23:54:82:e2:5d:8a:f2:23:ea:71:
93:88:26:a9:24:e0:71:e3:fc:fd:d7:2e:f8:39:80:dd:10:c3:
3a:c5:37:39:06:3b:7e:ce:8a:57:99:53:75:3e:d3:95:f1:64:
5c:eb:33:c4:62:35:8f:b0:59:42:f4:8a:39:48:f1:78:a6:2c:
64:cd:bb:22:c0:c7:d0:12:4d:95:35:34:c7:0f:82:7f:9d:af:
35:73:fc:cf:fd:31:b7:36:db:53:60:43:e7:21:8e:29:be:9d:
26:77:87:73:c5:b3:18:1e:81:bd:7b:52:d5:b5:9f:90:94:f5:
98:eb:27:0e:4c:da:1e:68:dc:5c:db:f0:c1:c1:77:0e:1f:85:
cf:8e:ce:9d:cf:1f:7b:e8:83:ac:e9:b1:d3:9d:89:12:e0:55:
4f:28:7f:3c:b1:b6:88:2a:42:11:e0:af:f4:29:f4:c5:53:9a:
8e:c4:31:3a:80:c1:80:2a:15:9a:00:48:7f:6a:9c:08:87:63:
42:c9:4d:83:59:56:31:8c:f6:c4:08:26:b9:5b:81:dd:d5:6f:
eb:30:fe:2a:75:33:ba:4d:65:72:48:09:f4:4c:37:0b:93:b0:
61:2f:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:32:05 2025 by rpki-client