Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa
File: gFGmyiV2VDAG4OISYDC6F01F034.roa (raw, json)
Hash identifier: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino=
Subject key identifier: 80:51:A6:CA:25:76:54:30:06:E0:E2:12:60:30:BA:17:4D:45:D3:7E
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F64
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa
Signing time: Tue 18 Feb 2025 01:35:43 +0000
ROA not before: Tue 18 Feb 2025 01:35:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 120.109.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3940 (0xf64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:35:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8051A6CA2576543006E0E2126030BA174D45D37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:a4:7b:fc:f9:a4:14:bc:59:68:53:85:58:
dc:b9:9a:0e:83:4c:d5:16:7d:25:a0:ff:4d:7f:43:
e8:bc:f9:b6:39:36:21:67:3a:ce:ef:9c:74:06:f0:
bd:0b:f6:98:8d:60:b6:f5:b6:16:65:54:84:81:1d:
39:98:aa:59:c7:3d:dd:21:36:ad:f3:1c:3a:a3:36:
f7:5e:33:eb:c9:51:df:31:ad:05:55:79:4f:82:45:
9c:22:d5:e7:3a:f4:a6:8d:56:96:8e:aa:54:09:ce:
19:cf:52:70:f0:50:cf:0e:83:9b:41:04:6e:9a:24:
bf:04:74:a0:21:e6:a8:59:41:39:be:0c:bd:b5:7c:
ec:f8:54:e4:52:e2:74:90:d5:b4:8e:f3:f4:ad:8e:
0a:01:94:ce:10:22:1b:29:b2:64:75:cd:53:a0:fc:
09:12:44:10:94:db:12:42:23:3d:8c:92:33:65:c2:
f1:ac:73:36:52:e9:82:b6:76:bd:80:24:74:7c:6c:
bc:5f:ac:ad:dc:8f:3d:fb:59:e7:06:8c:b4:e8:65:
bd:fb:bf:fd:37:64:27:e9:c2:5d:f1:2c:23:c4:40:
53:64:0e:a1:82:7b:e2:07:ea:2e:44:91:a3:e2:52:
b8:a0:d2:49:81:34:5c:fb:6e:e4:19:6b:a8:48:67:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:A6:CA:25:76:54:30:06:E0:E2:12:60:30:BA:17:4D:45:D3:7E
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gFGmyiV2VDAG4OISYDC6F01F034.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:f8:8a:1a:c4:74:4e:87:f3:53:90:79:0b:06:74:ee:a3:cb:
1c:94:95:94:23:5c:37:86:58:6c:82:32:43:c1:89:d4:75:db:
5b:3d:4c:c6:db:71:a2:db:63:80:7f:f7:2d:25:f7:1b:4f:77:
f0:a5:7c:77:5e:c6:d9:82:17:51:56:bc:d3:6d:bd:7f:04:c9:
99:fd:17:8f:9d:24:25:cc:91:bb:5f:9e:2c:9f:16:34:d1:36:
59:b3:e4:c9:00:0c:48:b9:32:77:7a:81:0c:08:5e:a4:b9:6f:
55:c7:28:04:63:28:51:db:e5:99:60:d6:21:75:57:61:36:92:
8e:9d:3e:4d:de:0e:a6:cc:21:a6:60:fa:b1:e2:68:f1:75:6e:
3e:10:1d:7b:50:f6:51:18:ef:f0:2c:f0:cc:9b:0c:9a:25:11:
ee:bd:64:92:36:61:e2:92:04:f1:c3:63:47:7f:88:21:de:98:
ab:9d:1a:f2:f3:96:25:12:62:e6:03:dd:a3:17:67:22:ec:82:
2e:d2:f3:aa:fa:0f:fb:c2:ff:54:b8:b0:3b:3b:8e:4e:c5:be:
d5:e4:f7:5d:5e:2b:10:e9:61:81:04:18:95:64:2c:3d:a6:bd:
3d:09:f5:d9:9b:17:de:50:19:2a:e0:f4:b2:ca:39:44:cb:e9:
c4:cb:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:52 2025 by rpki-client