Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/a_gsB71XrTzw8UGhko0-Vfi7MIM.roa
File: a_gsB71XrTzw8UGhko0-Vfi7MIM.roa (raw, json)
Hash identifier: 7t7mCgC+OzLJnXojg8sT/2jt7JAI7LCqc2mpEUcEFqM=
Subject key identifier: 6B:F8:2C:07:BD:57:AD:3C:F0:F1:41:A1:92:8D:3E:55:F8:BB:30:83
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F0A
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a_gsB71XrTzw8UGhko0-Vfi7MIM.roa
Signing time: Mon 10 Feb 2025 14:16:19 +0000
ROA not before: Mon 10 Feb 2025 14:16:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 210.70.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3850 (0xf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6BF82C07BD57AD3CF0F141A1928D3E55F8BB3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:0f:55:81:7d:5a:2b:de:91:92:e2:ba:78:
65:32:76:65:72:2f:8a:d0:5e:07:ca:93:c2:c2:52:
60:d0:18:96:8b:34:c2:a6:ae:56:59:2d:8e:2e:78:
66:24:ca:0b:f6:8f:88:69:7c:67:33:5a:57:12:6f:
5b:0a:3c:07:0a:f9:45:ad:a8:e6:f9:05:08:6f:e5:
f7:45:2f:e4:fa:80:14:47:a4:e0:3a:51:20:d6:03:
c9:d2:8b:e1:b4:73:6f:52:c0:35:72:4f:db:10:3b:
ee:75:08:78:de:a0:3a:75:5c:32:d6:6f:bd:f6:1f:
93:35:9b:f2:b3:15:03:d3:f3:19:33:5d:27:c3:02:
6e:d5:4c:81:e4:a7:92:d3:e1:c7:14:d2:a9:c2:5c:
6e:4c:f3:8c:eb:4e:15:5f:58:a7:ed:95:70:91:9b:
9d:3c:b2:03:72:13:61:9c:2a:42:17:3d:17:39:07:
fa:cc:71:f4:d3:00:98:0e:b2:67:c2:45:4c:b3:02:
15:11:0e:8e:f4:f7:61:1c:22:da:c8:ce:5c:f5:a2:
74:a9:95:db:61:74:c8:05:35:db:cc:0c:2e:27:3e:
54:f6:25:68:fd:8f:a7:18:96:0f:2d:47:d8:48:aa:
63:4f:9d:56:37:c1:c9:6c:2f:a7:62:d0:0b:c4:97:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:2C:07:BD:57:AD:3C:F0:F1:41:A1:92:8D:3E:55:F8:BB:30:83
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/a_gsB71XrTzw8UGhko0-Vfi7MIM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:04:be:95:c0:c8:df:c3:44:44:a3:60:7c:5c:32:25:c3:d6:
de:8d:95:8f:2c:dd:3c:10:89:79:65:35:8a:f6:6e:ee:8d:64:
be:4d:f9:2f:40:d6:e1:9c:41:0e:9a:2c:52:51:22:06:73:aa:
83:a5:60:90:ba:30:41:c2:a8:7d:05:92:76:92:38:d3:6f:2f:
48:e7:a7:06:e3:82:f0:a6:8d:be:c8:cb:89:8d:69:fd:a4:fc:
b5:98:9d:9c:76:a9:17:ba:e6:85:e9:45:95:da:0c:6e:c8:a5:
89:80:21:f2:be:fc:ea:39:ea:c8:b8:09:93:41:18:7e:7f:39:
e4:b4:53:74:a7:cd:ec:83:7c:37:a9:ac:1e:19:68:2c:20:d3:
66:e6:57:62:d3:89:a8:52:02:ab:70:e0:47:50:b8:39:7f:53:
04:6e:b3:c9:0b:4e:85:95:b9:94:34:54:33:d9:63:50:bf:39:
25:45:0b:f6:b3:74:9b:55:20:ee:e5:f5:62:a5:01:1d:f0:d7:
8c:f8:48:71:03:a8:ec:10:c1:d9:bd:31:56:26:a0:69:51:3f:
2b:ab:ff:95:45:21:ab:b8:b0:76:3c:c3:fe:2e:2b:3b:6e:09:
6d:52:a4:4a:65:55:b9:d6:10:4f:eb:4b:81:78:3f:8f:3c:5e:
c6:35:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:51:26 2025 by rpki-client