Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa
File: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (raw, json)
Hash identifier: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM=
Subject key identifier: 77:B9:79:70:1E:32:05:58:2F:AB:9F:B5:27:69:C3:07:76:57:BF:E7
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EF5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa
Signing time: Mon 10 Feb 2025 14:16:14 +0000
ROA not before: Mon 10 Feb 2025 14:16:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 210.71.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3829 (0xef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=77B979701E3205582FAB9FB52769C3077657BFE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:86:4c:00:cc:99:d9:41:ba:b6:f9:cc:e9:
0f:e9:a8:e9:f5:fe:17:23:58:66:68:99:29:a8:8a:
85:33:42:e0:78:d5:49:c1:19:2b:f9:93:63:81:a9:
26:e1:fb:fd:10:53:77:e9:89:e5:80:85:cc:01:a7:
b5:0a:1c:92:b8:29:6d:78:11:c9:15:f2:ea:c1:60:
36:f7:2a:14:65:4a:72:64:bc:cf:ba:2f:7f:d0:18:
59:87:a3:96:9b:70:45:f4:bb:0f:d3:be:b0:ac:88:
a3:d3:2b:d7:0c:44:52:34:1d:f5:b6:73:0b:af:a9:
1f:2a:d4:3a:7c:f0:33:84:2c:7b:6b:58:02:94:9a:
46:f4:cd:ee:ae:70:3d:91:d9:3d:4a:fa:86:62:8c:
20:e1:49:f9:5d:90:d6:c2:15:db:32:26:59:39:46:
56:40:14:42:ad:89:d4:3b:bb:8c:8a:f8:99:02:9f:
74:d4:97:83:fc:47:b4:35:c0:ef:c1:f2:bf:0a:4f:
da:b1:1f:74:5c:46:dc:e4:11:56:4b:c7:62:6b:1d:
dc:51:e4:13:eb:8d:3f:66:e0:a8:f3:39:f1:eb:d1:
1d:7c:11:d4:95:6f:02:f6:28:64:2b:d3:83:89:e4:
88:58:d5:54:fd:1e:1f:2f:7f:c1:07:67:1a:2c:64:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:79:70:1E:32:05:58:2F:AB:9F:B5:27:69:C3:07:76:57:BF:E7
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.71.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:47:74:cf:08:83:8e:a2:d9:f1:6e:73:80:31:e0:8d:5a:e3:
32:e5:f9:ad:f9:e6:82:11:05:4f:f7:10:08:05:89:f0:03:f1:
94:e6:a7:ca:ec:19:ac:a9:b9:59:3e:f3:61:f0:f6:85:aa:87:
2f:46:a3:f3:15:3c:95:1e:a4:cf:2e:14:58:e9:8e:c0:25:fe:
36:cb:4f:12:0d:d2:b1:ae:0b:de:8a:6b:52:08:31:36:71:fe:
d9:b2:ef:74:5c:9e:f2:3e:38:28:d1:29:30:f7:46:82:95:c3:
81:8f:40:f9:e2:1d:5b:a8:b3:b6:a8:3c:ba:91:12:6e:be:cc:
bb:ce:ba:47:f0:10:dd:78:55:5f:8f:e6:ab:cf:82:76:0d:8d:
7d:78:a5:78:89:ca:67:77:ce:88:00:3d:9e:e1:93:f5:a2:20:
35:ae:23:b3:cb:9b:5c:7d:79:a4:95:d8:a7:80:45:50:81:1f:
86:e4:24:87:fb:1e:c8:80:08:a3:7d:bf:26:db:c5:ae:97:c7:
4e:9f:cc:d1:dc:a2:f9:c0:f6:49:c5:fa:95:28:3c:6f:9a:7f:
89:8e:bd:c8:07:24:7b:a7:73:7a:3f:0d:51:97:a1:03:2f:88:
96:06:6f:22:8f:a6:50:18:43:ee:53:41:12:bf:0b:67:e4:ab:
da:4c:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:42:38 2025 by rpki-client