Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa
File: yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa (raw, json)
Hash identifier: wPN6JXc48uHrRVem9B5cv5QmSQSB9WaEHq9ae/9Ocnw=
Subject key identifier: CA:E3:53:01:53:CF:34:90:71:EA:C6:29:E2:4D:71:16:20:63:81:21
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0C75
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa
Signing time: Mon 26 Aug 2024 05:32:40 +0000
ROA not before: Mon 26 Aug 2024 05:32:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18018
IP address blocks: 122.255.94.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Aug 26 05:32:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CAE3530153CF349071EAC629E24D711620638121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:0b:62:4a:e8:e7:9a:f7:1d:d1:e4:b3:d6:
36:ce:89:8c:aa:a0:96:57:fd:f3:cd:d6:82:27:8e:
5a:3d:4f:1e:7d:b3:04:6f:0e:ed:db:96:17:78:4d:
29:6d:3d:99:22:df:fa:2d:eb:26:07:d8:2b:51:c9:
64:d7:22:4d:15:c2:6a:1a:20:e7:a5:90:f7:12:6d:
1b:57:54:09:c5:a2:27:b8:0c:12:4c:49:af:3f:6c:
0e:64:34:e6:ef:84:48:70:73:5d:b6:55:71:9f:bf:
79:1c:b3:32:fd:72:1d:c3:46:64:00:5b:2a:74:23:
52:94:7d:1e:52:5e:c6:af:1c:6f:7f:25:db:6b:aa:
67:65:41:51:68:a1:ec:25:78:66:c8:7b:19:18:23:
93:84:2c:1e:e5:03:11:07:f1:a4:60:e9:d2:da:b0:
88:77:27:08:e1:8d:47:ca:ef:e9:19:91:b5:10:aa:
92:be:8d:95:f3:d6:6b:a2:d3:8c:4e:97:e4:bb:0c:
19:64:7a:a1:91:e6:2e:a0:ec:1f:10:b9:d4:2d:6d:
7b:6e:4b:4e:66:1c:83:41:2f:e7:51:75:e6:db:bd:
cb:a4:b2:8d:17:ce:fd:df:50:a3:df:fb:9b:d6:42:
22:d1:60:08:3d:27:f0:01:19:3a:6a:76:72:f1:4a:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:53:01:53:CF:34:90:71:EA:C6:29:E2:4D:71:16:20:63:81:21
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.64/26
Signature Algorithm: sha256WithRSAEncryption
53:50:5f:f6:57:d3:c8:78:4e:41:d8:b6:07:cc:0e:bf:bf:ce:
95:5c:4d:32:eb:7b:3b:92:39:16:69:bd:bb:3b:28:82:68:04:
9b:3a:d5:62:a1:00:36:75:80:b3:37:1e:01:8b:4e:7f:15:59:
b8:6e:ac:ef:28:01:9d:2b:31:5d:72:3b:0e:4a:f6:d2:f1:05:
6d:38:8f:af:43:60:35:68:7d:67:4c:4a:0f:8d:fb:fa:27:eb:
f4:37:87:28:06:77:fe:7e:25:41:92:64:d6:65:aa:2f:c5:94:
6c:dc:29:6c:6c:78:c9:b9:39:f8:c5:1a:06:6c:8b:ec:8d:44:
48:12:67:ce:cd:31:f2:cd:d1:42:b8:41:a5:04:a7:5b:4e:ff:
d8:74:be:d6:59:b8:f9:ca:1f:f5:1c:f0:a7:27:cd:8b:dc:71:
dd:83:f6:8b:13:be:46:aa:da:38:a4:35:de:43:c6:92:88:25:
ab:18:93:6a:0c:4d:6a:02:fd:4c:78:f9:96:28:fc:e2:ff:e1:
3c:09:56:36:32:eb:cf:fb:24:0c:6f:59:36:4f:d4:0c:8c:68:
c9:d1:0b:c1:89:c2:76:6d:2f:b4:70:fc:88:b0:1a:fa:0d:ba:
ab:2b:95:d3:84:32:5a:d5:49:22:f1:4b:49:2f:5f:65:e3:9c:
6c:c1:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:42:11 2025 by rpki-client