Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa
File: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (raw, json)
Hash identifier: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0=
Subject key identifier: D6:DA:BC:30:6B:30:AF:B6:71:34:F3:E9:66:1F:31:BC:F0:EA:5E:D4
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F78
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa
Signing time: Tue 18 Feb 2025 01:43:32 +0000
ROA not before: Tue 18 Feb 2025 01:43:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 120.125.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3960 (0xf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:43:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D6DABC306B30AFB67134F3E9661F31BCF0EA5ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:36:86:04:09:c7:d4:f5:14:4d:f3:6e:83:
b3:bf:c2:35:45:53:ee:82:b6:3c:7f:32:8f:9c:76:
1c:e9:de:86:7d:d6:34:1a:75:44:fb:7d:22:87:39:
08:f9:95:05:31:80:c0:89:f9:9d:35:0d:87:bf:6f:
a6:1c:49:4b:2c:23:a1:d8:f6:3c:e8:e6:0e:c0:b3:
b0:09:b7:40:d4:06:a6:06:e1:f5:2a:72:7c:b3:9d:
ce:f7:e3:4d:84:ba:53:1f:b8:4f:a2:8e:2e:bc:da:
c6:e2:c2:ef:d4:17:c3:3c:37:ff:3d:71:c9:20:7d:
54:6f:96:34:34:25:38:f6:d6:5f:64:18:4f:a1:a0:
83:ab:f4:4d:ef:c9:3f:f5:78:a9:6c:c7:17:7c:42:
3b:42:96:fb:77:be:ba:e2:ef:16:4a:6b:f2:d5:cd:
23:ff:ac:23:09:23:5a:3e:bc:cf:18:21:c3:71:9f:
38:4d:99:66:dd:10:33:ea:32:c0:41:69:a4:e7:30:
d8:c5:ea:29:ba:14:38:2f:89:73:79:ac:f4:33:60:
0b:62:62:41:ae:c5:9a:10:b6:a1:fe:8e:50:24:5f:
fd:b8:47:e4:3d:03:ff:86:0c:be:da:54:1e:6c:a6:
32:d8:9c:6c:f4:35:ee:9b:c7:1f:44:bb:57:52:ed:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:BC:30:6B:30:AF:B6:71:34:F3:E9:66:1F:31:BC:F0:EA:5E:D4
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:58:f8:1d:27:39:8d:e1:1b:18:50:0a:a8:96:9c:24:68:80:
0f:33:36:c4:7b:2d:a1:93:b1:22:3a:47:45:d7:2e:43:41:3e:
9c:98:dc:d7:50:08:64:9e:15:42:01:0f:08:b4:5b:8f:79:18:
cb:39:bd:d7:6d:8c:68:42:94:2e:3b:a7:7b:64:de:c3:89:8e:
79:ca:97:61:76:3e:82:01:c8:52:29:0e:4c:66:b6:dd:65:f7:
ee:54:d9:4e:92:5d:91:f7:ed:30:21:9a:40:9c:3a:52:94:7f:
6e:91:65:83:f6:a8:00:2e:9b:25:87:00:c8:89:2d:80:34:c0:
da:8f:f6:9b:14:e5:19:46:d6:61:06:8e:65:5b:99:62:5f:37:
65:fd:6b:a2:8a:9a:b3:80:0d:53:c9:c3:ea:76:cd:6b:6e:e7:
e5:7b:7a:5b:43:09:67:77:d2:43:5a:52:96:aa:ba:2d:68:8c:
ce:d7:a5:35:67:d4:5f:eb:b0:c9:e1:b6:1f:5c:0d:9f:65:7f:
c9:a5:79:15:e6:32:2f:8c:e4:1d:72:91:67:a8:ee:f8:b5:4b:
e9:5f:e6:e7:e9:53:31:d8:59:6c:42:ad:87:67:d9:bb:97:6f:
08:1b:e6:3d:77:d2:e8:86:4b:21:46:bd:e5:da:03:6d:57:94:
6f:89:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:50:48 2025 by rpki-client