Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/T-fzPt9yOQFNZc265maI86zxizA.roa
File: T-fzPt9yOQFNZc265maI86zxizA.roa (raw, json)
Hash identifier: 3qQs/rzENsybrItfxsn4+jIWeUytLIaotigh82JzUY0=
Subject key identifier: 4F:E7:F3:3E:DF:72:39:01:4D:65:CD:BA:E6:66:88:F3:AC:F1:8B:30
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0D6A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/T-fzPt9yOQFNZc265maI86zxizA.roa
Signing time: Wed 15 May 2024 05:33:01 +0000
ROA not before: Wed 15 May 2024 05:33:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 134.208.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: May 15 05:33:01 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4FE7F33EDF7239014D65CDBAE66688F3ACF18B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:41:6b:48:f7:6a:62:08:25:4e:c5:25:cb:a0:
57:8c:0b:d8:7b:48:fe:2c:bb:59:90:54:59:45:b4:
e5:63:7b:fe:22:b8:69:98:fa:2c:da:09:e8:c7:73:
2d:5e:44:39:c5:ca:09:89:a1:48:1a:e8:d4:cc:3d:
1a:65:2f:e5:c5:84:3a:77:31:84:44:45:03:ef:33:
53:33:52:7d:82:e2:79:b0:76:67:47:69:1c:7c:9d:
1d:27:20:6e:f0:98:fc:85:76:42:9b:f0:2a:05:b6:
fe:53:f7:dc:87:ea:82:19:6c:fa:ba:9f:d6:ce:a6:
da:52:8c:c7:4b:f0:b6:59:77:5d:fa:ff:ea:84:ff:
4b:73:f8:ad:62:14:00:0e:04:69:90:da:bd:fc:be:
dd:11:21:69:69:61:ed:3a:6d:9f:b5:9a:43:c7:83:
bf:1c:bc:f1:e3:d8:8f:8c:73:36:ed:22:11:2c:24:
d7:1c:01:e4:ef:68:bb:68:d8:5d:9f:f7:b3:dd:19:
0c:11:95:da:66:58:b3:34:41:07:c5:54:78:13:bb:
2a:b8:54:f0:0b:16:dd:eb:b2:88:e8:0c:e6:97:4e:
8f:57:30:14:58:60:36:dc:66:da:c2:e1:ea:e4:17:
d9:05:56:ed:e3:e9:fc:28:08:81:93:58:af:7e:0f:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:F3:3E:DF:72:39:01:4D:65:CD:BA:E6:66:88:F3:AC:F1:8B:30
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/T-fzPt9yOQFNZc265maI86zxizA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:a2:e1:a8:9a:d6:08:52:68:c1:ee:4a:06:4c:4c:9a:03:fb:
ca:62:09:95:21:99:7f:da:2e:06:15:12:15:02:f7:a9:56:2a:
ea:15:0d:b6:33:3b:55:51:3f:15:e0:47:28:55:76:dd:2e:ec:
fa:b0:61:26:1a:2e:36:f2:31:ea:2f:8b:00:0b:19:a3:f6:30:
cf:20:50:39:5f:f6:c3:34:8c:cd:23:97:24:da:1a:9e:34:a3:
69:c4:04:8c:92:bb:6f:34:8a:17:30:5f:99:37:fa:a1:5c:66:
16:2e:f0:1a:ac:73:65:5c:98:ac:1a:10:29:b9:8c:fd:92:e8:
ad:ed:b7:ce:bc:40:88:68:75:dc:94:7f:87:cf:0a:c1:12:0d:
2b:14:92:fd:48:72:ad:f8:0d:d7:81:5f:81:d9:f1:5f:5a:fe:
b5:3f:21:41:55:e2:98:9b:13:80:ff:79:91:64:20:7e:9a:d7:
88:5d:fc:e7:5e:a9:ea:21:9f:6c:fa:ac:b8:72:0d:2d:3c:1d:
f7:3c:b6:51:ac:67:21:31:1b:e8:40:17:f0:d7:f0:6c:cb:89:
4b:ba:0f:16:ea:8d:e7:e7:59:c0:c5:d0:a8:ba:10:7e:0c:87:
71:97:6f:fb:6a:43:cf:af:b3:d6:bb:91:e3:99:e5:87:68:c9:
22:30:13:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:50:15 2025 by rpki-client