Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3l_j3IgsdvXJIzhowIb3Kc47GR8.roa
File: 3l_j3IgsdvXJIzhowIb3Kc47GR8.roa (raw, json)
Hash identifier: SXwRVcOSwUrO40EUKAZwmuBU7zagiM17+RGRyFjW3pI=
Subject key identifier: DE:5F:E3:DC:88:2C:76:F5:C9:23:38:68:C0:86:F7:29:CE:3B:19:1F
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EF2
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3l_j3IgsdvXJIzhowIb3Kc47GR8.roa
Signing time: Mon 10 Feb 2025 14:16:14 +0000
ROA not before: Mon 10 Feb 2025 14:16:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 163.30.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3826 (0xef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DE5FE3DC882C76F5C9233868C086F729CE3B191F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:1f:d2:a2:e3:09:f6:17:2f:ba:21:45:38:
28:e4:28:f0:9c:02:47:3b:69:89:a8:91:f3:0b:dd:
07:36:c2:d7:29:0e:ed:8a:5c:2e:f3:d8:6c:05:69:
b0:27:aa:32:82:29:6f:c3:ef:49:43:1d:5d:ab:92:
f7:a4:c9:12:13:bb:f2:a4:73:73:cd:fc:bc:e1:3e:
0c:54:09:26:2d:fe:5f:7a:fb:bb:aa:2d:83:6e:60:
90:3b:78:62:20:60:18:49:57:93:6d:98:11:6c:e1:
83:1b:b3:7d:8f:71:89:d9:46:97:26:09:2c:72:28:
73:06:76:06:72:8e:2b:ba:dd:74:61:ab:15:a0:9f:
e4:ad:67:ea:47:23:67:61:3f:d5:d7:85:dc:2c:3b:
2f:53:df:3b:dc:aa:a7:49:cb:2a:d6:3b:10:0b:99:
e0:2a:cb:33:9a:01:b0:70:65:76:e3:72:ca:50:d5:
08:24:66:b8:9e:41:9d:b9:a4:3d:de:31:fd:e3:bf:
fb:ac:4a:f4:f4:9b:c4:91:e5:96:f9:74:91:9f:36:
88:b5:e0:55:59:0e:c8:b7:c2:e2:e0:33:a9:b1:65:
8d:e1:7c:8e:cd:15:04:37:cf:dc:c5:ca:5c:62:56:
44:fd:d7:51:77:2d:59:75:a8:1d:da:07:52:65:14:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:E3:DC:88:2C:76:F5:C9:23:38:68:C0:86:F7:29:CE:3B:19:1F
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3l_j3IgsdvXJIzhowIb3Kc47GR8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.30.0.0/15
Signature Algorithm: sha256WithRSAEncryption
04:8b:95:42:55:60:04:81:7d:0f:9f:10:ed:bb:ce:1d:3e:e9:
a6:00:b3:38:d1:ad:f7:ab:d2:7c:ef:a9:ed:6a:c9:43:03:be:
a0:a9:be:d0:8d:6d:69:f8:0d:60:fd:5a:ef:26:96:34:53:cc:
68:34:66:8e:4c:48:94:50:b0:ca:74:e3:62:9f:63:39:6d:9d:
a4:1b:f7:4b:1e:44:d2:4b:45:54:c2:4a:e8:3e:bb:43:80:57:
94:ba:cb:bd:11:11:a6:dc:48:16:a4:65:af:34:ae:0d:b9:d6:
21:15:df:b3:43:17:27:50:05:a1:b9:52:5d:2f:68:15:b1:d6:
17:fa:f8:ae:5e:92:f8:c3:ed:72:8d:cf:89:f7:a0:d4:38:b9:
83:a9:73:44:3e:8a:3c:83:66:97:b4:d6:07:3f:b6:97:e0:74:
7a:61:cf:93:2b:8a:15:e9:47:6a:77:b9:e1:a7:2d:3b:0d:01:
ad:c1:d7:1f:8a:57:aa:20:11:a1:0f:ff:92:54:31:ae:31:46:
61:8e:53:7b:e7:6d:f2:f7:9c:c7:12:80:ef:0e:39:9b:7d:4d:
f3:fb:b0:c5:f1:32:17:11:02:41:24:bc:62:6a:10:a8:c3:ea:
da:23:ab:ec:42:94:11:34:1b:48:94:06:ff:8d:cd:17:7b:20:
00:58:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:47:50 2025 by rpki-client