Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa
File: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (raw, json)
Hash identifier: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I=
Subject key identifier: F5:AF:B3:D8:0D:FD:34:B7:B6:A5:45:73:53:8B:4C:47:1E:B0:BA:30
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F68
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa
Signing time: Tue 18 Feb 2025 01:37:00 +0000
ROA not before: Tue 18 Feb 2025 01:37:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17712
IP address blocks: 120.113.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3944 (0xf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:37:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F5AFB3D80DFD34B7B6A54573538B4C471EB0BA30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:55:96:cf:26:fc:87:5d:0e:e6:e2:a3:98:
ba:0b:35:46:bd:5c:b8:82:3c:4a:1f:9f:90:3b:e0:
79:c0:68:1d:ae:1c:8f:42:af:9a:48:b1:07:b4:4f:
7b:c7:1e:8e:97:b3:9f:3f:d7:e6:b3:90:d7:83:aa:
89:1a:e7:53:c7:8c:f4:a1:0c:b1:d6:b3:a8:74:a0:
2a:f8:54:81:55:bc:f9:c4:ba:77:2a:5c:43:2f:d1:
2a:a9:66:29:e4:71:f5:63:ce:2f:70:e7:03:ea:9a:
da:33:02:b9:8c:df:55:7e:88:3a:90:32:3c:2e:68:
23:9c:3f:6d:a3:c7:39:06:be:a2:29:8e:73:0f:a1:
2a:72:0a:84:76:3b:a2:99:14:8f:cc:3c:4b:df:b6:
fc:b1:85:cb:3b:46:10:ca:df:f1:eb:96:bf:1a:e0:
e7:28:de:a6:ee:56:ec:7d:ab:0b:b0:f9:88:42:94:
cf:81:68:c9:e7:90:b5:9f:df:4a:bc:52:20:a2:52:
62:01:ff:d2:e2:af:ad:87:39:b1:12:40:7f:54:ce:
4e:d2:bd:96:0d:07:fd:34:70:93:6f:f5:49:b0:01:
1c:d9:70:e1:2b:bb:dc:18:d1:82:dc:42:70:86:1f:
11:7a:77:b3:08:a2:8b:a8:fb:23:20:9a:88:7b:c8:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:B3:D8:0D:FD:34:B7:B6:A5:45:73:53:8B:4C:47:1E:B0:BA:30
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9a-z2A39NLe2pUVzU4tMRx6wujA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:07:01:bb:6a:f8:84:1b:f7:36:91:d1:ea:67:cc:e6:24:b0:
10:3d:3b:80:c6:0f:ca:22:41:eb:30:3c:e0:7f:70:be:e9:fe:
0d:27:cf:8a:8b:7d:1a:d9:95:ef:f2:08:6f:42:e0:ca:03:64:
cd:d6:09:89:bf:45:52:b0:e1:10:f0:36:d6:60:fd:7d:8e:bb:
32:ff:6f:92:99:47:80:0e:31:6c:0c:de:f0:cf:01:96:76:4c:
a4:5a:de:2c:a2:14:44:5c:8f:25:d5:66:f0:21:6e:9d:95:7c:
7d:7d:34:b8:1b:9a:34:39:ad:f3:32:71:fa:fb:03:30:69:8b:
e1:39:89:2c:7d:5e:68:e1:81:53:56:1d:3f:ac:a3:f5:2b:88:
f0:b7:6e:5d:89:f4:4c:56:7f:26:0c:c8:da:d1:6c:45:89:a5:
a2:90:6f:29:47:df:b7:98:c5:0a:29:d4:4b:70:91:b2:9e:06:
2f:7b:5c:b6:58:c2:a4:47:0d:75:0a:ae:a8:b4:a8:a7:11:5a:
ec:2b:6a:63:3b:a9:c6:cf:c0:28:c3:4d:91:1d:6c:0b:19:70:
3f:5b:ce:8c:29:45:66:72:a9:71:82:4c:e2:78:66:f4:75:f7:
14:d2:b6:f0:31:38:fa:f9:e2:82:2e:3d:b8:8b:7c:13:15:46:
3d:c8:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:08 2025 by rpki-client