Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gkHU2FbUKaNEHihi_R0qDkEYEqg.roa
File: gkHU2FbUKaNEHihi_R0qDkEYEqg.roa (raw, json)
Hash identifier: kalXzPZTV4utYX/wWW/kQCFCOh2h7OqfjqoeLdvHlco=
Subject key identifier: 82:41:D4:D8:56:D4:29:A3:44:1E:28:62:FD:1D:2A:0E:41:18:12:A8
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EF1
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gkHU2FbUKaNEHihi_R0qDkEYEqg.roa
Signing time: Mon 10 Feb 2025 14:16:14 +0000
ROA not before: Mon 10 Feb 2025 14:16:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131150
IP address blocks: 120.119.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3825 (0xef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8241D4D856D429A3441E2862FD1D2A0E411812A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:bf:ee:e9:af:9e:84:d1:6c:78:87:05:fd:
92:ea:5a:43:dd:47:24:76:4d:12:00:cc:3e:8a:d7:
09:5a:ca:42:2a:fe:75:cc:73:f6:8f:35:7c:7c:8a:
80:66:6e:da:cb:e9:86:5b:74:08:4e:33:31:99:59:
f8:40:17:da:88:39:ba:c0:7b:c1:1f:39:d9:2d:30:
db:13:94:be:2b:e3:97:30:46:fc:04:50:25:ca:25:
d4:44:9a:df:76:4f:a9:b7:3a:68:99:60:1c:38:78:
32:f1:46:1c:30:31:4e:bd:1f:8f:34:cf:d0:0d:0b:
0b:6b:02:d4:cf:33:3c:7d:0b:64:64:60:e3:9a:d6:
e5:b7:a6:94:5c:57:d3:2a:55:74:18:83:f2:68:26:
07:ba:ad:3c:3c:49:9b:48:44:f2:59:97:50:e8:0e:
1a:92:6c:e9:97:12:73:c1:19:95:ea:ce:d7:4e:19:
60:99:1c:05:c9:0f:f6:07:71:4f:4c:79:62:39:35:
9f:7b:41:ab:d1:4e:92:ef:af:74:52:c0:d2:27:e9:
fd:46:ea:de:e9:bd:cf:d9:c2:48:71:b7:44:f4:63:
b9:53:ac:36:6f:53:4e:40:54:ab:36:05:84:24:29:
f7:70:40:f5:9e:b5:98:e8:0f:bd:0c:07:22:6f:59:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:D4:D8:56:D4:29:A3:44:1E:28:62:FD:1D:2A:0E:41:18:12:A8
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gkHU2FbUKaNEHihi_R0qDkEYEqg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.119.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:dd:aa:5e:a9:26:cc:c6:65:40:25:82:05:a7:02:db:d5:d5:
9c:15:e7:67:56:bd:d5:1f:58:8e:c7:df:37:2f:fe:4c:91:32:
3d:8f:2f:39:e4:6a:cc:11:0a:f2:8a:79:e1:b9:c6:cb:0e:df:
28:c0:82:92:3a:f7:d0:df:f3:ea:67:8b:6d:5c:57:c1:dd:48:
02:bf:2e:70:b4:af:46:00:2a:5f:8f:a2:6c:42:e2:68:1f:ca:
95:57:c2:09:af:fd:a9:a4:57:6b:31:08:e7:ac:ee:5b:69:28:
6a:a6:76:0d:8d:e5:ca:8a:90:bd:8d:47:0c:f8:d1:0c:a4:40:
11:82:c4:12:79:4d:eb:c3:da:ab:db:b3:f6:b2:8f:ee:dd:cc:
39:42:6c:1c:de:cd:f1:e6:d2:dc:04:81:55:eb:05:72:fa:9f:
39:1f:12:26:6e:1c:fa:19:b0:62:16:00:db:00:6c:ba:ed:8c:
3f:ac:4c:81:d8:9f:ed:08:5d:ee:95:94:b8:19:6b:b5:69:94:
6f:0e:2f:ab:fe:0a:0e:31:72:01:78:03:de:bf:b3:1b:a8:99:
61:7c:4c:f7:bc:19:46:c1:74:64:75:b2:50:f4:f4:37:07:ae:
f2:74:ad:84:4f:e9:3b:a6:4b:c6:a8:f9:b5:e3:67:de:b3:86:
4f:97:5e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:20:29 2025 by rpki-client