Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa
File: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (raw, json)
Hash identifier: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA=
Subject key identifier: 17:3C:B9:65:C0:88:41:8C:BA:7F:A9:40:EA:87:9B:9C:E6:F2:4D:EE
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EEF
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa
Signing time: Mon 10 Feb 2025 14:16:13 +0000
ROA not before: Mon 10 Feb 2025 14:16:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 210.59.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3823 (0xeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:13 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=173CB965C088418CBA7FA940EA879B9CE6F24DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:fa:08:31:ca:cf:dd:55:da:9b:5d:77:ee:
d0:44:13:e1:a4:48:5c:35:fc:ba:e6:9b:7f:a8:b1:
db:e7:df:46:5b:8e:8e:90:2d:7d:ab:11:18:f9:ec:
bf:d0:b4:15:74:92:17:28:44:d0:4b:a8:d6:2c:3b:
2f:9f:35:ed:76:8d:5f:4c:ef:df:79:3f:8c:ea:4a:
a1:a3:ac:a4:02:3d:1a:54:af:56:7a:53:94:66:f1:
1b:3f:6c:f1:33:1d:bf:c1:14:35:07:af:69:ca:6f:
d4:39:fe:d5:ea:34:06:3b:e7:f8:6e:35:74:30:d2:
1b:d9:90:09:a5:82:5f:62:70:f0:81:81:bc:a3:b2:
07:ba:5d:27:5c:ce:59:18:3d:a9:2a:ab:1e:9d:a1:
1b:e7:5b:94:e3:8c:16:4e:e3:6a:08:06:20:d9:44:
68:15:83:d1:45:9d:10:44:ae:59:91:1d:ba:64:ac:
fd:8d:16:20:c4:f9:5e:7e:f3:f2:e6:60:c8:66:8d:
49:06:d1:d7:25:b0:e3:fd:52:8d:f1:3a:9c:45:b4:
c1:ac:4b:b6:c8:39:ba:ed:5b:67:c6:da:fe:7a:f4:
1e:9f:d0:64:59:d1:2e:60:4d:d3:1b:8e:ef:ae:75:
bf:4b:60:0d:8f:a1:8a:0b:82:de:ea:92:74:50:78:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3C:B9:65:C0:88:41:8C:BA:7F:A9:40:EA:87:9B:9C:E6:F2:4D:EE
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0d:60:ab:19:96:5f:02:13:5c:6a:ef:5c:b1:1a:3f:7b:3c:8e:
86:03:28:52:33:e6:98:41:b2:e8:ec:30:b3:c5:62:ee:09:16:
fa:6e:e9:b0:f8:bf:0c:63:e6:65:b7:e7:8d:60:ac:8c:d3:f2:
0f:a1:bd:11:18:fa:8a:f4:13:3b:94:b2:7a:60:38:09:73:c0:
86:35:ed:67:38:80:0c:5a:93:55:80:b2:52:71:0c:d2:ab:f6:
e4:f8:61:67:2e:31:7e:2a:78:dd:bf:56:0b:33:82:5e:e4:c7:
6f:e1:61:d2:99:11:c0:1d:a9:a9:1a:bf:d0:3c:dd:60:4c:1a:
f4:da:d7:66:7a:37:35:15:26:e0:26:99:bb:bb:3b:11:90:61:
b5:9d:a3:56:8c:d3:63:fa:8f:07:b5:a7:49:a1:ad:02:a9:f1:
5f:1b:81:a3:8b:40:2d:51:b7:7b:4c:a1:c8:88:ee:c4:d0:e6:
1b:e9:c8:1a:3a:c6:5a:b4:18:9e:b2:2c:6e:58:91:0c:69:6e:
c0:99:82:17:f0:55:fe:a7:84:ed:c7:c8:31:14:93:1d:98:5b:
ae:af:79:b6:76:7e:5e:51:e9:26:e9:42:45:1f:c9:dd:80:43:
e9:f6:a6:67:3e:40:17:e0:74:73:8e:7f:51:1b:e8:4a:18:7c:
63:2c:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:48:22 2025 by rpki-client