Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa
File: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (raw, json)
Hash identifier: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w=
Subject key identifier: FC:82:C2:C6:F1:BA:D0:28:82:39:AA:7F:06:7D:D5:2C:6B:82:76:BD
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EF8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa
Signing time: Mon 10 Feb 2025 14:16:15 +0000
ROA not before: Mon 10 Feb 2025 14:16:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9916
IP address blocks: 120.126.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3832 (0xef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FC82C2C6F1BAD0288239AA7F067DD52C6B8276BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cf:25:b9:2d:a3:e2:61:95:fb:f2:16:fb:c0:
51:c6:02:86:53:8a:54:60:79:10:90:a6:cb:97:90:
57:77:16:38:f8:3e:4d:a1:25:1f:39:7a:61:dc:82:
f3:a9:a1:06:45:26:25:17:ad:6c:8c:ac:86:0e:fb:
5c:60:11:f7:08:fd:b8:64:8b:a3:c8:8e:5d:bc:58:
31:f9:08:35:ff:30:82:e3:5b:26:9e:1c:c6:d5:b6:
6c:cf:ae:ab:fb:44:90:6f:22:c3:ae:8a:70:a4:5f:
ef:6a:91:04:b1:a0:28:a2:b1:f1:e2:bc:39:ab:92:
66:b9:7a:c4:c9:8d:5f:52:67:48:60:06:75:f9:5d:
28:c7:70:c0:c1:18:fa:b0:9a:88:a7:60:7b:4d:e7:
5d:b6:e6:28:be:ea:e6:bd:7a:67:f4:e8:60:0e:31:
a1:b7:74:72:5e:f8:c0:96:f2:52:b6:a2:ac:ae:dd:
8c:ea:46:78:71:51:53:4e:59:f4:dd:58:4f:b3:d7:
cf:b6:c4:53:84:3a:c9:23:21:a4:c4:72:7a:09:f0:
c6:2f:e9:93:92:03:0e:d0:e6:b4:70:a9:bb:7d:cd:
5d:2e:9d:f4:93:2c:e0:cf:c7:3d:0a:2d:e1:a9:a4:
34:0f:dd:99:b1:aa:b1:65:cd:4f:78:02:02:eb:a3:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:82:C2:C6:F1:BA:D0:28:82:39:AA:7F:06:7D:D5:2C:6B:82:76:BD
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_ILCxvG60CiCOap_Bn3VLGuCdr0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:1c:46:11:80:f0:5e:bc:59:f0:49:85:58:a5:60:6b:df:19:
7a:ea:d7:0d:0c:aa:c2:40:a3:8a:81:76:44:2b:d4:39:b7:50:
96:bf:85:ad:4a:af:19:99:e6:14:e4:91:79:4f:d5:0d:b5:57:
8b:aa:29:2e:3f:9f:97:b6:5c:ed:74:e8:ae:be:d3:b2:b2:98:
ac:1f:42:22:94:e8:c7:5f:f6:a2:29:8d:ef:74:26:bf:77:91:
8c:a5:57:ac:59:e6:b3:c1:12:ca:d5:82:75:53:09:a3:a1:40:
bd:d3:93:70:2e:46:aa:32:f2:f7:cc:e0:b8:46:19:2d:17:e8:
da:45:b6:8c:1e:a0:78:c7:0e:95:d7:74:e8:da:58:87:0a:76:
94:dd:68:2b:1b:27:30:31:c6:f1:58:e4:a6:2a:19:1e:c4:79:
46:4d:6a:e1:17:c2:30:57:89:79:e5:31:7d:ca:6f:09:cb:f6:
0a:71:c2:6c:c1:f7:6c:ba:21:54:09:8e:1c:d6:b3:88:95:94:
81:08:95:32:1d:d1:d5:4c:2a:e3:03:39:90:78:12:92:e9:f0:
f5:ea:37:63:ee:11:0f:b0:fd:f1:4f:d7:52:3d:ce:fb:82:cb:
e8:2b:33:0e:40:33:f6:ae:0a:c2:b1:dd:3b:12:18:bf:5f:97:
1d:26:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:45 2025 by rpki-client