Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa
File: fzL5lNlEhdqV6I4td_uVsaF_dAc.roa (raw, json)
Hash identifier: UPWTFJKcFPDChnqf1A2Q/AH79Rj28yXQtp6z1yRHcTU=
Subject key identifier: 7F:32:F9:94:D9:44:85:DA:95:E8:8E:2D:77:FB:95:B1:A1:7F:74:07
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0E60
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa
Signing time: Mon 26 Aug 2024 05:27:20 +0000
ROA not before: Mon 26 Aug 2024 05:27:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 163.30.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Aug 26 05:27:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7F32F994D94485DA95E88E2D77FB95B1A17F7407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:9a:46:df:9d:90:d0:04:6c:b8:cc:36:fa:
26:7a:eb:0b:8e:32:cb:ce:74:14:e0:38:7d:b8:af:
db:8f:9e:da:59:c1:ff:4f:ac:de:83:51:1f:e6:f2:
35:ef:0f:21:33:1a:67:59:10:36:3d:d8:1e:72:69:
f5:19:99:0f:26:e5:d5:09:39:f1:b8:23:4f:b6:17:
80:c4:c0:3e:3a:72:29:4e:b6:b3:f7:2e:cc:48:ac:
15:c4:ea:c5:a6:3d:17:19:88:d2:30:ff:24:85:4b:
81:fd:fb:38:a9:fd:14:41:99:90:23:59:fa:7b:44:
96:87:c5:4f:ea:8f:bd:e8:e2:03:ed:18:2d:2c:01:
d2:9a:d0:78:82:31:2d:54:ab:b1:d3:59:1e:68:90:
89:9e:89:cd:c4:88:cd:14:98:37:a5:2f:90:b8:57:
a5:74:71:69:86:15:a6:27:31:1e:46:d5:1c:62:b9:
53:c0:0f:b3:1d:0d:29:5c:84:7a:b1:55:af:47:c6:
ef:f3:61:19:45:6e:b4:47:1f:e7:f8:b4:8a:1b:04:
89:c1:cc:12:d6:fe:61:a2:36:64:7d:e1:64:23:93:
6f:fa:e6:0a:74:52:54:68:d4:30:b2:10:85:88:db:
c4:12:1e:ad:a9:3c:e8:9c:54:98:90:83:4d:c4:ac:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:32:F9:94:D9:44:85:DA:95:E8:8E:2D:77:FB:95:B1:A1:7F:74:07
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.30.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a6:5e:9b:db:7e:5f:40:37:f5:d4:26:7e:65:40:e6:9a:79:f8:
89:97:1a:89:a1:93:80:44:fe:1b:7f:db:6d:6f:b5:17:3e:69:
d1:b1:21:14:fa:e6:e4:63:f4:8d:05:58:60:8f:8e:6d:b9:31:
7a:fb:fe:a3:af:a6:7e:2e:07:4c:1f:75:9d:0b:23:e6:b4:1d:
53:8b:27:70:53:f5:4a:dc:2c:5f:19:bb:b3:8e:db:8a:dc:a7:
e0:08:4f:5d:f5:a2:a7:f7:aa:52:9d:ef:d4:73:a0:f6:36:c5:
0c:e4:ca:7c:ba:39:d0:ff:bd:1a:d0:ca:1b:33:93:7e:3e:b0:
52:0f:50:88:f0:58:d7:64:5b:3a:a4:e7:14:43:08:ec:34:fd:
9c:8a:6a:e0:03:ed:e2:f1:b3:33:ef:2a:c5:e9:11:57:19:c9:
28:69:c1:11:2f:45:5e:f5:47:4f:d9:e1:d9:9d:bc:cf:f4:80:
cf:76:96:00:43:62:7a:0e:a8:a6:86:0f:b5:bd:70:86:53:37:
7e:13:63:ca:17:41:f7:14:0d:07:86:72:28:f2:3c:67:26:65:
a7:27:36:00:4c:62:43:20:44:8f:b4:c0:ae:a1:a3:94:6d:81:
8f:6b:47:19:1e:60:2f:e0:01:b6:a4:3f:a5:0d:01:c5:bd:5c:
7d:7f:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:06:24 2025 by rpki-client