Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/hwhro3ukb2tVsrOp24DQIVP_9Io.roa
File: hwhro3ukb2tVsrOp24DQIVP_9Io.roa (raw, json)
Hash identifier: /3CaOaLCU4Qdb5c8X3967ezBiaPcU1rspaozCcmaGdM=
Subject key identifier: 87:08:6B:A3:7B:A4:6F:6B:55:B2:B3:A9:DB:80:D0:21:53:FF:F4:8A
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F72
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hwhro3ukb2tVsrOp24DQIVP_9Io.roa
Signing time: Tue 18 Feb 2025 01:40:50 +0000
ROA not before: Tue 18 Feb 2025 01:40:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17713
IP address blocks: 120.118.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3954 (0xf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:40:50 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=87086BA37BA46F6B55B2B3A9DB80D02153FFF48A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:3c:48:ac:50:55:69:45:82:63:55:fd:d4:
99:be:5c:b6:5c:be:62:24:54:3b:76:ec:21:5d:a3:
07:79:ab:5b:67:11:5a:2b:af:72:2e:c0:54:09:8b:
20:10:aa:87:cc:a6:3d:51:c1:c1:75:8e:be:5b:9a:
52:09:6d:94:bd:9f:12:f3:f2:08:b9:2a:7f:6e:d8:
d8:ff:25:ce:9f:b5:6d:49:d5:61:14:cd:90:df:04:
61:07:f4:f7:85:49:e0:98:ab:8f:7b:b1:21:c0:f4:
e9:e9:a1:af:35:44:70:bb:42:c3:d6:77:22:f7:09:
c5:88:7b:33:32:04:cf:36:e5:a0:a3:e3:52:5c:8b:
18:e3:eb:31:11:a3:ea:53:bc:cb:7f:11:fa:08:37:
ec:33:c5:5a:44:ea:1b:19:1a:8c:af:19:54:21:db:
5d:5f:48:fb:a8:93:84:3d:fc:14:c7:4d:e0:40:f3:
de:bf:ec:44:31:74:33:ce:e2:94:dc:38:cc:1a:e3:
80:2e:07:9b:ea:76:f6:5d:58:66:2f:77:9c:0c:1b:
7e:11:5d:e6:33:01:9f:4a:d9:f5:f9:07:a2:45:5e:
3a:15:56:dd:e6:b8:09:7d:f9:86:cc:68:d6:63:78:
3e:80:4b:ae:02:f0:ef:2d:b9:eb:ea:eb:03:f8:df:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:08:6B:A3:7B:A4:6F:6B:55:B2:B3:A9:DB:80:D0:21:53:FF:F4:8A
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/hwhro3ukb2tVsrOp24DQIVP_9Io.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:35:c8:f6:a3:e8:71:c8:8a:00:5a:23:73:2f:16:19:0a:14:
cd:d0:cd:5b:74:d1:c7:d9:e0:17:96:0f:0f:de:4e:9c:27:a0:
a0:a3:32:76:50:4f:73:71:c8:14:b7:83:97:a2:c0:1a:3e:4e:
d8:48:4c:6c:ef:81:28:06:1d:ef:f3:c4:c3:85:e8:bd:19:b3:
80:58:1d:20:83:91:9f:dc:c9:e9:e9:5a:09:5e:52:e8:e6:d7:
47:e6:43:61:64:c9:9d:e0:80:c7:1e:ce:64:6b:7b:4b:6c:0f:
bf:74:f8:15:d9:9e:a3:d1:6c:ed:19:72:08:7f:64:df:d3:b9:
27:3e:cf:c6:fa:85:a5:8b:9a:e8:4b:f4:e6:36:83:73:96:b8:
76:ba:6a:6a:53:95:b2:cc:b4:c7:8e:59:ef:aa:39:f0:5b:07:
87:c5:57:4e:24:d7:a1:40:51:49:b6:89:e3:bf:aa:a6:c8:69:
47:be:cc:90:77:65:bc:a4:8d:1d:d2:46:06:1f:04:ca:6f:27:
db:d3:8a:68:88:45:fa:b9:24:af:a5:96:4e:a6:1a:dc:c3:ac:
14:fe:33:da:71:ec:ef:56:8a:17:00:e2:65:3f:f2:cf:45:05:
41:36:c5:2a:5b:db:24:44:56:57:c8:36:21:b0:13:38:f4:f4:
f2:fb:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:09:56 2025 by rpki-client