Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ezXbkpVqlkkbs4bZrWDwhfbyH_U.roa
File: ezXbkpVqlkkbs4bZrWDwhfbyH_U.roa (raw, json)
Hash identifier: CMqatQ8g+x0NQohNPUH+cZjooaW7gJbvxoINNGZVhjY=
Subject key identifier: 7B:35:DB:92:95:6A:96:49:1B:B3:86:D9:AD:60:F0:85:F6:F2:1F:F5
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EFF
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ezXbkpVqlkkbs4bZrWDwhfbyH_U.roa
Signing time: Mon 10 Feb 2025 14:16:17 +0000
ROA not before: Mon 10 Feb 2025 14:16:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131150
IP address blocks: 163.32.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3839 (0xeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7B35DB92956A96491BB386D9AD60F085F6F21FF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:b4:c9:3a:8f:c0:c9:21:81:c4:de:e8:e0:
18:e9:01:a1:cb:a6:26:b6:b2:d2:b1:1b:e9:bf:e9:
59:94:66:bb:e7:a0:67:8f:6a:aa:60:ab:05:b3:a0:
8c:86:8e:18:7f:6d:92:9c:51:01:55:1d:ed:44:9a:
f2:38:1a:93:c8:98:56:a6:ab:fc:92:3f:8b:ae:0f:
db:db:8e:d2:7b:be:fe:1f:16:d7:bc:38:90:07:26:
3c:9e:a1:bc:42:3e:31:d1:88:64:da:9f:e4:27:f2:
4d:da:87:b1:bd:05:0f:ca:5a:0f:b8:9b:06:dd:90:
01:6e:f2:c2:2d:9f:6d:dc:3c:af:40:b2:d5:ba:d0:
94:71:17:61:d1:4e:7b:71:2f:e0:5a:45:7a:3a:47:
23:71:72:91:2b:61:a7:55:be:b7:7d:cb:25:8a:ef:
20:ab:b2:3c:b1:2f:07:4e:6b:62:f4:ee:ee:c4:cb:
a8:ca:35:de:74:6f:8b:30:81:d0:e2:0a:3e:42:c5:
fe:83:a4:5b:e4:3b:6f:20:9f:b8:77:22:b8:3b:38:
31:37:37:58:c3:28:d0:e4:7c:46:83:e0:02:e6:ca:
6e:fc:68:dc:1f:c3:d2:5b:16:22:09:42:14:ba:c3:
9d:67:8f:03:91:0f:48:81:f6:9b:17:53:0b:59:2b:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:35:DB:92:95:6A:96:49:1B:B3:86:D9:AD:60:F0:85:F6:F2:1F:F5
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ezXbkpVqlkkbs4bZrWDwhfbyH_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b8:b2:69:8b:40:f6:a8:f2:b5:0e:96:a9:a7:54:72:40:e6:
5e:47:0c:df:f2:6b:c9:8d:28:86:a5:a0:68:14:04:66:0b:17:
e1:b1:49:89:88:de:95:27:27:82:62:c3:12:fa:7f:68:a1:cb:
02:f8:05:ad:eb:40:bd:e0:61:5a:07:51:2f:5d:9d:e4:aa:37:
c4:fe:eb:1a:3c:2e:02:62:e3:c3:a8:5c:0f:fd:ad:2b:35:4b:
89:3a:01:d7:07:9b:0e:82:d6:99:a0:1d:7e:e1:e7:bc:20:b0:
4c:d7:a8:7a:83:81:40:8c:88:ad:a2:ce:f9:e4:23:1b:41:8d:
66:86:77:66:71:b0:1d:7c:74:8e:b4:f0:6d:94:19:40:5c:42:
af:32:f4:92:c8:e4:ab:4a:5e:44:81:e9:e6:34:ad:b0:0c:3b:
50:7a:22:d8:a5:36:91:ab:35:e3:ce:06:37:cf:16:3d:95:87:
48:07:47:e9:e9:8f:3b:da:68:b5:0c:d1:6c:bf:54:c7:8f:e4:
27:d8:25:04:af:16:8b:b5:36:e6:2a:97:b8:38:c3:7d:94:12:
e9:20:19:39:0f:9f:6f:9f:27:54:85:5d:6b:11:b6:5e:3e:f0:
42:27:3b:e7:6b:d8:da:60:52:8d:f0:8f:bf:18:fa:d9:06:02:
c6:e5:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:33 2025 by rpki-client