Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa
File: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (raw, json)
Hash identifier: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU=
Subject key identifier: 02:7E:9A:E6:BD:A5:F0:19:FA:F8:F3:43:82:5F:B3:FF:E3:E4:92:D5
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F02
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa
Signing time: Mon 10 Feb 2025 14:16:17 +0000
ROA not before: Mon 10 Feb 2025 14:16:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 203.71.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3842 (0xf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=027E9AE6BDA5F019FAF8F343825FB3FFE3E492D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:0b:ab:2e:50:ad:2b:59:aa:d4:1f:3a:62:
15:1c:65:59:14:f7:d0:50:4a:a6:cd:b0:62:00:eb:
ad:62:9e:4b:8e:18:a0:1e:6d:11:0e:1c:5a:ad:d1:
f3:34:c0:28:ca:5b:7b:2a:d7:71:ad:ea:54:fe:20:
e8:73:31:26:f8:1f:82:fe:eb:a0:af:5f:31:ec:20:
06:52:32:91:8b:ff:ab:02:28:da:15:e8:cf:e3:80:
66:01:19:9b:89:24:bb:cd:54:2f:4c:c6:de:45:58:
b0:d2:6c:a9:78:26:49:aa:fe:32:69:19:0c:52:30:
51:aa:83:07:bb:4c:24:ad:23:43:98:74:ba:35:e6:
87:05:ce:51:10:1f:a2:f6:9a:c6:20:db:38:d3:39:
d5:84:08:ed:4d:12:a6:7c:fe:fe:ec:e5:00:87:2f:
05:30:50:c6:d6:dd:e4:9d:8a:3a:6b:dd:42:d5:0f:
fb:bf:dc:ba:c1:e5:a9:aa:76:b7:d6:c2:02:03:68:
dc:fa:9d:49:c2:00:9d:1d:67:d5:e1:fd:52:05:65:
0a:5c:e3:f0:4a:1c:d0:99:41:14:5e:6c:97:77:f9:
8b:b2:ff:59:3f:48:19:fd:d0:3a:cc:7c:5d:00:d4:
19:87:cf:db:97:eb:a9:2d:e4:1f:f5:fd:74:1b:32:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7E:9A:E6:BD:A5:F0:19:FA:F8:F3:43:82:5F:B3:FF:E3:E4:92:D5
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/An6a5r2l8Bn6-PNDgl-z_-PkktU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:07:a6:e4:7a:08:c9:00:db:27:b4:63:d9:56:67:52:84:48:
69:2f:37:94:35:e5:d5:11:9c:24:64:a8:81:9b:84:f4:ee:32:
f7:bb:72:6e:cd:c4:19:1c:3a:93:eb:08:19:e1:90:cd:f3:a0:
a9:78:3b:e7:c2:00:9a:d9:40:c6:7f:d5:a5:95:32:9f:39:47:
45:77:4a:ee:a0:b4:b0:a3:cc:c1:8c:e3:67:06:c7:d3:61:83:
2c:73:94:83:24:41:b3:5f:07:4a:9e:de:c7:7b:19:67:b5:31:
3d:cf:8d:73:a6:6b:86:0a:be:6d:6a:6c:92:47:05:38:b1:cd:
3b:39:00:6b:1e:da:e1:3d:fe:ca:23:ad:de:94:d3:d2:c9:c5:
ae:f4:9a:82:ed:39:42:17:7c:7f:d3:58:b1:86:4c:f6:07:db:
da:6e:92:f0:ff:a7:ac:fc:87:81:c7:df:1f:c4:ca:2b:9f:88:
6f:3f:26:bb:af:7e:74:13:fe:d6:f0:92:73:bc:17:40:d1:0b:
ff:7f:c0:2c:d1:9d:bc:99:a3:cc:46:30:0d:a6:07:d3:ce:df:
86:e7:19:d2:cf:be:5c:3b:40:08:a8:53:2d:8f:ba:eb:fc:ce:
a2:f5:61:df:be:20:75:9c:e4:2b:64:88:ce:55:0a:fa:e7:87:
7d:9d:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:50:53 2025 by rpki-client