Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa
File: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (raw, json)
Hash identifier: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4=
Subject key identifier: 83:C5:36:3E:FB:D9:D2:2C:F8:31:F7:7C:69:28:2E:1C:B2:FA:67:FE
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F57
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa
Signing time: Mon 17 Feb 2025 09:51:41 +0000
ROA not before: Mon 17 Feb 2025 09:51:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17716
IP address blocks: 210.60.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 17 09:51:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=83C5363EFBD9D22CF831F77C69282E1CB2FA67FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:81:84:92:92:aa:63:91:eb:a9:16:c5:14:
43:cd:08:8d:2b:6a:bd:78:8f:6c:12:04:f4:c5:5f:
39:8b:31:c9:ec:43:68:8b:cd:19:c8:48:ef:3b:e5:
60:8d:71:dd:5d:ae:9e:87:6c:87:3f:19:ca:55:49:
83:dd:d8:32:d9:21:1f:9a:05:ae:6a:4d:33:d8:fa:
48:25:39:45:10:ca:b4:09:74:69:12:15:c2:a6:73:
4b:e8:ec:d3:9f:65:aa:20:ef:6f:5e:a6:30:5b:50:
cb:0a:62:d0:32:5f:89:70:86:fa:cb:2e:d5:da:57:
35:1f:01:ce:f1:a0:88:61:13:d2:36:12:1b:7a:87:
7a:33:e5:7c:3a:25:cb:12:ce:6a:89:81:2c:15:dd:
fc:a1:44:6b:2a:7e:73:54:a4:73:82:93:b7:47:cf:
c8:91:8b:92:48:c7:83:22:82:fa:c9:60:22:ea:1a:
42:63:e7:b3:e9:dc:06:50:14:23:51:41:2b:09:a9:
59:c3:18:ac:08:f4:41:f6:7e:e9:9c:fd:48:d4:36:
83:42:b1:fa:a1:54:cf:ee:2e:12:5d:c2:e5:18:1c:
a5:a1:dd:d7:71:48:93:3e:44:68:d4:63:5d:39:35:
6f:6e:5f:0e:1d:d1:69:03:17:cf:e2:89:37:fa:0b:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:36:3E:FB:D9:D2:2C:F8:31:F7:7C:69:28:2E:1C:B2:FA:67:FE
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fe:14:5a:20:be:fd:7d:12:81:e7:a2:01:9e:72:8a:04:d8:
3f:94:f4:aa:d4:b7:d7:ce:bd:f2:5d:8f:50:76:f2:e6:fd:c8:
32:a9:ff:66:30:ac:3e:5d:dc:f2:91:b3:70:c0:3e:20:48:5d:
6a:48:b5:05:4e:5a:0e:46:5a:bf:d2:e6:3d:1b:95:38:cc:b5:
e8:d7:e4:39:6c:78:28:a3:5d:45:cd:b3:50:a7:55:9c:d9:43:
0f:3c:d6:8f:c2:7a:37:2e:ba:83:97:80:c2:14:d1:f7:0c:93:
37:9f:ba:f6:c5:c1:65:7d:c9:be:a2:a7:7d:9c:1b:cf:23:8d:
42:3c:01:d1:00:5e:58:4f:99:97:13:56:26:46:b1:b7:ca:cc:
1f:ea:b3:e9:7d:36:69:ff:b6:ba:c6:0d:47:25:ff:a7:52:68:
c7:8d:2a:d6:d0:36:00:b0:db:5d:11:56:f8:35:99:64:81:af:
cf:c4:e9:36:1e:00:2e:4d:08:39:36:34:3b:be:07:b1:50:1c:
f5:eb:ed:b5:ea:b4:99:a3:2c:00:0d:1a:4e:a5:2f:f1:79:81:
ac:99:76:e1:b2:16:a4:92:47:41:83:a6:bb:1c:38:6d:17:fa:
db:80:ce:33:bd:23:c2:24:db:09:a0:2b:56:3b:f2:2e:25:04:
d7:7b:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:35 2025 by rpki-client