Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa
File: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (raw, json)
Hash identifier: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc=
Subject key identifier: DC:45:17:E8:BC:25:C2:89:B1:E2:BE:81:49:AB:81:7A:A3:4F:79:37
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F8E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa
Signing time: Wed 19 Feb 2025 02:07:09 +0000
ROA not before: Wed 19 Feb 2025 02:07:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9916
IP address blocks: 163.19.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3982 (0xf8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 19 02:07:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DC4517E8BC25C289B1E2BE8149AB817AA34F7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:cb:f9:e4:c7:1c:53:0c:18:47:30:c3:a5:
e7:31:45:95:4f:09:de:7c:9c:94:7d:76:9d:bc:6c:
94:de:cc:7a:bc:61:74:55:d7:4c:f1:75:51:79:8c:
3f:5d:7a:0b:7a:37:1b:0f:95:00:6c:b7:54:a8:22:
60:50:c1:77:4b:d1:26:f9:b1:45:3e:13:db:e3:df:
a1:cf:3e:b3:d4:21:f4:36:b3:0f:0b:17:16:14:b0:
ad:64:ea:02:d2:0b:26:49:28:72:50:c7:68:65:4d:
31:86:c3:9b:4e:49:cd:58:93:1f:bc:09:4e:21:95:
8a:52:6d:5a:21:d4:40:be:e2:37:2b:b1:1b:4a:24:
fa:3b:9a:66:7b:60:65:6e:56:99:f0:79:0e:10:08:
cf:68:eb:7a:62:ef:63:e1:81:9b:37:e5:c6:0f:f3:
39:d5:0a:a1:c2:98:97:38:34:78:fd:ce:36:f5:d0:
f4:c1:ee:96:38:5e:6d:f2:96:7c:e5:fc:56:23:95:
91:5f:84:07:fd:94:5c:74:90:ea:20:01:a1:40:1b:
2d:08:a1:ed:b6:fb:76:71:ef:88:0a:bd:e0:6d:92:
ca:72:b4:85:75:2f:1b:85:c3:98:8e:e0:f2:ec:8b:
5f:31:05:a9:93:42:ce:6b:f1:ce:09:c7:2d:4c:1c:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:17:E8:BC:25:C2:89:B1:E2:BE:81:49:AB:81:7A:A3:4F:79:37
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3EUX6Lwlwomx4r6BSauBeqNPeTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:65:fc:75:1a:b5:31:dc:63:b4:72:a8:84:f6:83:12:b9:31:
4c:54:51:bf:d6:9d:48:7b:3e:86:1c:41:04:53:aa:23:48:2a:
cc:b2:c2:7c:98:f7:86:bd:e7:dc:87:2b:72:03:8e:f8:65:6e:
e5:cf:be:26:3c:d8:8b:1f:d8:4a:c9:54:78:95:e4:b6:48:2d:
bd:ec:82:cf:42:76:91:30:82:2d:42:d3:4b:93:5c:45:f0:5c:
d1:97:fd:91:3f:0a:e8:d4:06:1b:c9:d4:02:c8:a0:d0:98:f3:
aa:03:a0:fd:c0:77:ce:28:89:4a:a8:e2:19:ef:bc:3f:44:0c:
d6:25:5c:aa:02:7c:40:97:07:24:51:86:cb:fb:60:7d:c9:8f:
df:ea:f3:46:a8:b9:9a:48:14:58:97:0b:e1:f3:69:2e:37:fb:
31:09:1e:6b:83:2c:34:d8:a9:23:7a:40:5f:3d:19:83:7d:1e:
e0:76:7e:43:ab:37:da:b4:14:bd:e5:e5:89:c6:74:3b:87:e6:
ae:9a:bb:a2:70:2f:29:94:ef:6b:88:70:bc:b6:d2:2b:b0:ec:
01:5a:6f:3c:b0:82:09:53:07:35:a3:d6:29:0f:16:50:0c:91:
68:32:a6:a1:af:9e:54:d0:a8:d7:f6:dd:77:a3:fa:26:eb:42:
5f:90:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:41 2025 by rpki-client