Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa
File: 4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa (raw, json)
Hash identifier: lFfU3HOa847j4pIHh8R3O/nsA9GU6goYPdJuHZyCW3o=
Subject key identifier: E2:47:66:DD:AA:07:6F:A5:C4:32:35:79:C2:CA:A1:92:90:52:C5:78
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0C58
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa
Signing time: Mon 26 Aug 2024 05:26:49 +0000
ROA not before: Mon 26 Aug 2024 05:26:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4783
IP address blocks: 202.39.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Aug 26 05:26:49 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E24766DDAA076FA5C4323579C2CAA1929052C578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:86:e9:8c:17:82:fe:25:7c:6f:82:9a:0b:
a2:32:83:5e:9f:5a:22:a1:40:70:34:76:13:3f:b9:
83:77:1d:4e:4e:3d:5b:6d:79:91:74:fa:4c:84:e4:
96:b1:a2:d2:dd:e1:8b:a8:35:2b:03:e9:5b:ed:4b:
d1:e2:06:2c:9d:5a:86:99:09:4c:4e:7f:19:ce:2b:
01:4c:a2:66:67:39:81:c7:fb:5f:29:61:89:03:b1:
1e:75:66:69:06:d7:13:16:4e:64:c5:21:9b:fa:23:
da:f8:12:1d:41:36:48:a4:b9:35:82:fe:24:e6:18:
f8:5c:94:e3:83:88:fd:96:86:ea:8c:95:de:a3:0c:
3b:98:6d:15:f7:4c:cc:c9:a3:59:18:fd:5d:40:68:
ba:56:ba:7c:8e:00:5f:07:3a:15:80:ca:6c:57:69:
c6:93:23:62:16:c4:12:7e:06:5d:66:ec:fb:5c:77:
92:d5:09:b5:94:4b:3c:1d:6d:09:4d:28:8a:ed:6c:
32:9c:cc:1a:98:98:29:6e:04:d7:1e:fb:e6:8d:4b:
d6:cc:a2:aa:d4:c6:d9:ec:50:08:3d:45:8d:c4:4e:
05:6d:93:b6:61:79:6f:dc:76:75:d8:05:84:04:dc:
b5:de:37:7e:a8:13:8b:e5:6b:86:79:a4:87:25:55:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:66:DD:AA:07:6F:A5:C4:32:35:79:C2:CA:A1:92:90:52:C5:78
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:13:d8:61:4e:48:13:28:c9:33:58:78:46:6f:f3:50:b5:f1:
02:97:18:51:a3:6d:32:47:c1:fe:dd:04:08:b1:14:ff:6c:c5:
67:6a:74:89:36:b5:3d:9d:42:f1:bb:73:8e:6d:61:ea:a7:97:
60:4b:d2:94:cc:4c:47:3c:12:83:ee:a3:1a:0a:63:d2:c7:95:
af:9f:5e:61:54:cf:79:fd:90:5a:00:ab:a8:f0:5f:6c:62:93:
f2:e7:fd:d5:5d:94:e7:aa:fa:79:48:6c:29:f4:5d:99:e2:f8:
de:2d:1e:30:9d:d8:2a:4b:35:f2:0d:64:89:5e:2e:c0:a4:0b:
cc:7f:35:93:c7:e6:3d:14:cf:6d:c5:3d:3d:df:35:15:93:bd:
ba:b2:7c:f3:4e:55:1d:5f:66:f5:c4:0b:dd:53:0d:9e:b2:c3:
09:aa:37:56:6a:83:40:4c:3e:fb:de:f5:73:7d:66:5a:44:5c:
5a:62:55:65:7a:f5:26:3c:f1:de:19:f2:75:4b:97:90:1d:ce:
a9:36:5c:c6:dd:6d:0b:73:78:bc:48:f4:2f:28:a5:af:c1:dd:
4d:90:05:91:3f:c1:a6:50:fe:76:b8:45:18:62:bc:8e:14:d7:
d1:cb:26:ef:79:00:9d:95:4c:67:12:97:b4:e8:a6:9e:8b:70:
b1:6b:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:55:39 2025 by rpki-client