Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa
File: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (raw, json)
Hash identifier: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY=
Subject key identifier: 45:2B:ED:BC:FD:13:72:11:48:45:59:54:8F:27:CE:72:6D:AC:ED:DC
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EE4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa
Signing time: Mon 10 Feb 2025 14:16:11 +0000
ROA not before: Mon 10 Feb 2025 14:16:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 210.62.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3812 (0xee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=452BEDBCFD137211484559548F27CE726DACEDDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:cd:0b:af:d7:c9:fe:22:17:6a:ee:7e:dc:
c8:39:38:c3:8c:8d:71:42:90:88:a0:6b:69:28:b7:
34:26:62:a5:37:c8:2e:90:12:7d:5f:07:95:51:41:
37:63:d7:ee:ee:0e:60:7d:d6:50:03:f6:9a:22:a8:
b9:87:54:3f:f6:35:47:bf:ce:65:4b:c3:09:91:40:
af:b3:c3:ba:fc:62:3d:05:f9:19:34:57:ad:74:ab:
6c:a6:59:07:a9:0b:28:c2:75:2a:66:a3:88:de:ec:
89:04:5c:15:8b:71:62:89:72:e8:9a:02:0e:bd:dd:
ff:92:72:94:f4:1e:75:76:b0:88:da:ca:10:fb:dd:
7f:ff:83:80:8b:31:36:2d:c7:2f:d1:74:b0:a0:e1:
0a:b2:cd:17:0f:c3:7c:44:77:84:1f:13:5d:96:3b:
d5:23:39:fb:67:4c:b5:5c:7c:df:66:cf:ad:de:c7:
e4:35:cb:80:e0:ff:42:f5:94:fe:0c:b9:c7:10:8e:
66:ea:73:97:d4:0b:17:44:69:79:0b:0a:1e:0c:20:
5c:1b:ee:13:a8:f1:33:0e:70:b5:a5:a0:2b:bb:26:
e4:e5:26:d7:43:1a:fd:44:f9:79:f6:2b:a1:a0:14:
cf:45:79:44:e7:f6:a5:b0:b9:6f:61:4e:f0:9f:ca:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:ED:BC:FD:13:72:11:48:45:59:54:8F:27:CE:72:6D:AC:ED:DC
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RSvtvP0TchFIRVlUjyfOcm2s7dw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:b7:22:c2:a9:cb:af:71:d1:42:f3:d2:f5:1d:7c:98:a1:8a:
ed:87:2f:a4:38:b9:64:31:6d:22:86:09:1a:92:c3:5b:fc:b9:
c1:f9:9d:52:2a:5c:14:d7:cc:76:b5:80:b6:b5:00:2e:8e:2f:
2f:69:e8:e4:33:31:4b:23:4c:ea:ad:ca:18:46:48:54:e0:49:
cd:ff:36:77:30:83:f5:42:5d:f2:66:d2:c7:31:85:61:88:6b:
e4:60:48:65:e2:24:78:a9:71:a8:a0:78:a3:e9:bf:94:90:23:
b9:66:5b:c5:0b:8c:c9:ad:fb:21:8b:3f:03:59:b6:3b:e2:f9:
4e:85:00:56:4d:1a:c5:aa:c3:f5:a1:4d:7d:8b:c2:4a:0a:5d:
cc:22:23:eb:97:11:d9:48:a9:9b:49:a4:03:2b:73:b3:32:a6:
94:6e:fb:60:6b:8d:c9:38:2b:77:60:95:74:47:15:e3:1b:79:
34:1d:f3:10:14:bb:5c:95:b6:c4:ae:96:ab:0e:e0:bf:2c:e5:
b2:09:d5:9c:5e:6d:d3:18:6d:89:42:cf:d1:9b:c4:f3:58:bc:
79:ce:f7:36:2e:c1:9e:17:0d:10:55:0c:2b:90:a0:05:cc:4e:
eb:0f:97:dc:48:66:a8:54:e3:0a:99:c2:d4:0c:13:99:1f:2f:
33:ef:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:02:50 2025 by rpki-client