Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa
File: 0yH6gMacB1tXPfgZCoUIS7Z49vA.roa (raw, json)
Hash identifier: HkCYqhGR9QQmcL+c+93wG+FxcVDsJqI9gh0hQAvVgEk=
Subject key identifier: D3:21:FA:80:C6:9C:07:5B:57:3D:F8:19:0A:85:08:4B:B6:78:F6:F0
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0E4F
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa
Signing time: Mon 26 Aug 2024 05:27:13 +0000
ROA not before: Mon 26 Aug 2024 05:27:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 163.16.0.0/13 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3663 (0xe4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Aug 26 05:27:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D321FA80C69C075B573DF8190A85084BB678F6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:b4:fa:92:e5:70:7d:87:4a:5a:1b:43:bc:
b8:9a:4c:a3:6f:de:47:25:d6:df:ba:39:28:bd:a5:
0e:23:e9:bc:52:b8:88:51:4b:96:83:d4:70:32:cd:
19:92:60:7b:de:94:3c:c0:96:08:ff:8b:bd:05:36:
db:68:0d:29:61:dc:12:cd:6e:0e:cf:c6:f7:7b:b6:
73:87:92:dd:59:63:38:b2:1a:e0:65:83:29:a6:6e:
51:cc:e8:1b:5b:59:8e:70:42:35:6d:0c:f2:e5:f1:
ef:d6:6f:79:87:0b:17:56:4b:78:45:4a:81:77:3c:
a0:6a:5f:11:82:9a:db:ce:d9:09:d7:3c:72:a9:c4:
cd:85:55:ea:f8:f7:9c:e9:99:33:b4:3e:f9:d9:75:
df:28:e8:e3:60:48:bd:11:ed:1d:de:18:f2:b8:7d:
87:99:45:35:18:95:fc:db:f1:4f:69:ee:0d:9d:01:
04:c9:a7:60:82:59:d9:d1:f2:50:6c:5b:f5:e8:a2:
8e:79:0e:6f:90:41:30:fe:57:87:d8:a1:e5:6a:b0:
01:b8:fd:b4:96:2f:c1:13:38:f0:ff:6b:09:3f:07:
b7:9b:fa:e7:5f:88:5a:9f:ed:cb:ff:05:30:64:60:
6a:d1:30:16:2a:ef:ed:01:d7:35:ec:c1:95:23:e6:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:21:FA:80:C6:9C:07:5B:57:3D:F8:19:0A:85:08:4B:B6:78:F6:F0
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.16.0.0/13
Signature Algorithm: sha256WithRSAEncryption
a9:bc:f2:91:02:ac:a4:89:97:51:73:f4:3c:7f:b3:82:9c:3f:
67:84:1e:8d:19:ce:2c:d4:00:01:ee:f1:eb:ea:ee:30:df:af:
70:66:e4:41:cd:a1:45:a2:9a:84:7a:6d:8e:08:1a:c0:5c:4b:
ae:fd:b3:19:52:1c:41:5e:43:d7:5a:db:d0:54:9c:27:3c:37:
44:b9:eb:35:ca:55:c2:14:03:e2:81:62:68:ff:c8:1e:c1:6a:
a7:9d:ca:3f:11:97:ad:15:4f:b0:9a:4c:47:d2:5c:7a:2e:6d:
0c:37:8a:14:37:24:50:f6:9d:a0:57:6c:2e:66:ac:9a:7a:22:
17:09:5f:18:ca:55:ad:bd:23:56:63:da:d8:f0:68:be:57:8d:
16:6f:fa:98:78:a8:0d:52:95:7b:85:41:64:56:4b:e8:bf:d4:
16:14:da:b5:18:9d:8f:e6:1c:38:88:fa:fd:3b:29:00:d2:a7:
6d:d6:55:af:b2:45:03:0d:a0:87:11:87:52:7b:c9:92:d4:51:
bd:86:f9:bf:40:15:36:10:19:2d:38:e5:8d:31:60:4a:8e:2f:
67:b4:b4:71:6d:8d:97:27:43:da:88:8f:2d:9b:9f:49:e4:a6:
d0:8d:34:c6:6b:cb:9f:da:cf:bd:fc:89:b7:01:46:2b:78:44:
d1:53:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:12:33 2025 by rpki-client