Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5sq_rN1CJMyXzyF1sJlYyTPvIwA.roa
File: 5sq_rN1CJMyXzyF1sJlYyTPvIwA.roa (raw, json)
Hash identifier: 9Azw0F9lroQcdcKL+/jvJIJpC+WpUBORNuXigLmVKQg=
Subject key identifier: E6:CA:BF:AC:DD:42:24:CC:97:CF:21:75:B0:99:58:C9:33:EF:23:00
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F05
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5sq_rN1CJMyXzyF1sJlYyTPvIwA.roa
Signing time: Mon 10 Feb 2025 14:16:18 +0000
ROA not before: Mon 10 Feb 2025 14:16:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38844
IP address blocks: 210.60.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3845 (0xf05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6CABFACDD4224CC97CF2175B09958C933EF2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:57:12:43:0e:7f:89:bf:9a:e9:06:1c:fd:
e2:39:1e:97:a8:f4:31:99:0f:2e:b0:40:5a:b4:60:
e4:8d:16:6d:1f:75:9b:09:59:f7:99:16:5e:55:5a:
58:93:b5:b9:80:90:37:43:37:df:13:49:b4:ba:43:
82:e3:e3:81:70:8c:f8:07:10:59:cc:57:a6:99:d5:
9d:0f:6a:be:c8:ba:cc:a7:be:fd:8c:27:81:89:34:
68:88:07:f9:5c:b3:19:46:99:b3:73:c7:75:82:79:
9d:47:00:ff:a3:ba:9a:6e:20:3f:d8:8c:ca:cd:85:
ce:15:0e:9e:6e:14:92:a6:b8:25:b2:24:71:21:af:
55:8a:1e:67:2b:11:aa:ee:14:72:07:f0:b4:ac:e3:
e3:ca:46:70:97:eb:25:03:cb:b9:9f:08:48:65:1f:
7e:2a:88:ea:e4:3c:fd:ba:b2:92:86:8c:66:32:c8:
3d:59:12:3f:d6:04:b0:69:f4:c5:7b:21:07:63:e2:
6e:f6:e8:c0:3c:99:2d:d0:0f:47:50:5f:53:b3:60:
67:8d:e2:a3:f9:8e:ca:7b:3a:85:6d:3d:c0:ed:ca:
66:02:f7:a9:13:26:48:9e:fd:0b:ad:18:82:09:47:
60:71:bd:d5:75:da:57:3a:7f:2f:1e:f6:2b:f1:f8:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:BF:AC:DD:42:24:CC:97:CF:21:75:B0:99:58:C9:33:EF:23:00
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5sq_rN1CJMyXzyF1sJlYyTPvIwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.149.0/24
Signature Algorithm: sha256WithRSAEncryption
98:30:67:3a:52:d8:27:df:38:15:ae:64:05:43:13:98:3c:5c:
df:5b:3d:80:39:75:a8:6d:0b:e0:3a:44:45:b4:00:a4:a2:0f:
ef:33:b2:3a:8b:42:4f:86:90:09:b2:99:18:83:32:a9:63:42:
36:18:2b:42:b0:60:12:2d:9c:82:1a:13:c7:63:98:91:ac:77:
53:b6:0f:8c:25:3a:ed:dd:ec:dd:c8:98:d7:f8:97:b5:d6:3a:
4a:28:f3:40:6b:8f:48:df:ac:87:20:f4:12:34:1a:bc:94:bb:
34:6b:60:d9:48:fa:9c:3c:3a:6d:9b:7b:a3:cb:d7:53:2f:58:
13:f0:98:c9:1a:3d:82:17:b6:7a:a4:85:e2:cb:61:17:8d:2f:
a8:bf:31:a2:5f:e0:86:b9:53:85:e3:20:6f:c1:54:59:0f:ab:
0d:e5:02:45:81:50:c8:98:05:79:8b:97:41:f2:2a:38:bc:7c:
96:32:bf:fe:bf:1b:1d:05:85:3a:3c:e2:ab:a8:b7:fb:93:e7:
81:da:2f:2e:c5:ef:5a:76:24:1a:f9:2f:5f:a3:f9:cd:2f:04:
11:ca:0f:f3:3e:79:60:94:6c:d3:0f:15:1b:8d:ea:a4:ee:47:
ce:be:f4:09:6d:f2:65:40:44:90:fc:3a:b2:f2:70:a0:7f:13:
1a:e1:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:44 2025 by rpki-client