Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/js3KmPpJE18X1Z6ulmDj6bphGTE.roa
File: js3KmPpJE18X1Z6ulmDj6bphGTE.roa (raw, json)
Hash identifier: 72NPAal/Ki4QecF4QWaFUuvgti4IDyUrsdggOyQR3mY=
Subject key identifier: 8E:CD:CA:98:FA:49:13:5F:17:D5:9E:AE:96:60:E3:E9:BA:61:19:31
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F01
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/js3KmPpJE18X1Z6ulmDj6bphGTE.roa
Signing time: Mon 10 Feb 2025 14:16:17 +0000
ROA not before: Mon 10 Feb 2025 14:16:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9916
IP address blocks: 120.126.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3841 (0xf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8ECDCA98FA49135F17D59EAE9660E3E9BA611931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:03:a4:52:84:e7:9e:24:4f:9f:c5:e6:d1:
7c:a3:fa:3a:61:ab:93:c4:7e:81:46:c6:1e:11:25:
bf:06:3e:70:41:d5:c4:b6:a9:5c:1e:50:5e:cc:5e:
50:68:29:dc:c4:82:90:da:4a:55:d0:cd:59:13:74:
30:9c:01:b7:c9:0d:ce:61:04:1e:cc:5a:2d:cb:40:
37:61:df:07:80:19:81:72:05:cf:81:4a:99:e5:fd:
9a:0e:86:3e:d8:ef:5c:0c:b6:06:0e:b1:6e:29:ae:
02:df:8b:3e:e8:9e:13:ab:ee:07:11:c5:8e:32:80:
9c:c4:ef:fe:ed:ea:a1:f8:fc:eb:62:1d:17:a9:5b:
ee:d5:7a:e2:2e:0b:49:19:a1:50:23:9d:7e:64:92:
32:3b:b2:8d:57:d6:03:23:1d:8a:f4:cd:93:a8:d0:
2e:b9:96:45:85:26:1b:31:c8:74:c9:20:ab:08:11:
eb:9c:06:3a:17:f4:d6:c8:9d:ec:11:86:5a:6b:b1:
1b:6d:32:90:5a:19:c9:f4:6b:07:ff:36:9a:73:99:
e9:18:47:12:86:80:ce:6d:d4:a7:be:ec:b3:54:b0:
d6:25:20:36:68:72:43:45:17:d4:c9:0b:53:3e:72:
d5:e5:79:f4:de:97:04:7c:c7:4d:70:ef:ed:35:db:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:CA:98:FA:49:13:5F:17:D5:9E:AE:96:60:E3:E9:BA:61:19:31
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/js3KmPpJE18X1Z6ulmDj6bphGTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:98:3d:29:25:99:bd:b6:ff:34:1c:84:68:1a:fa:c5:31:fd:
60:5c:3a:cf:1f:48:b0:af:75:89:c3:a1:d6:69:b6:9e:cc:f8:
ed:07:58:5a:bf:c6:20:e1:e9:b9:c8:08:e3:d2:e8:4e:10:ca:
c1:9e:25:d8:9c:a6:1c:e6:8f:80:d9:6e:d7:5a:65:53:c6:d3:
3d:4b:df:00:b0:c5:12:98:5f:b0:ca:83:6c:40:64:57:9f:ef:
2a:91:86:c4:33:f0:42:dd:ff:7e:91:4e:0c:8d:c3:e3:97:ed:
ec:57:e1:97:f8:33:e0:0d:68:6d:20:03:43:5b:48:94:ea:c7:
4a:0d:14:43:28:36:2c:eb:8f:21:e5:4f:8d:44:98:ec:5a:17:
ed:04:b3:fb:25:50:f7:79:d5:ba:c8:df:4d:ca:09:c2:b2:48:
8d:e8:db:8c:0b:84:2e:ce:87:c8:cd:7e:9a:95:81:ab:61:99:
ce:74:e5:6d:a4:16:73:0e:3f:1c:f6:92:1b:8d:0e:93:eb:f6:
39:92:e2:30:15:88:11:b6:6d:1f:91:10:18:96:3d:18:6e:96:
89:f3:1c:c4:2a:37:a2:cf:6e:f9:cd:68:43:6f:8a:cc:21:35:
c2:f6:24:73:ed:7d:d4:ec:96:65:21:fd:4c:0a:33:dd:e2:14:
0c:55:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:48:36 2025 by rpki-client