Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa
File: m1-ylTLqUpS3OelxHUtEmYTlcmc.roa (raw, json)
Hash identifier: ZK5MTs7vqt/D7mHLWQdYucIlbxnXuGrvGn2hyxYq6VM=
Subject key identifier: 9B:5F:B2:95:32:EA:52:94:B7:39:E9:71:1D:4B:44:99:84:E5:72:67
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0E61
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa
Signing time: Mon 26 Aug 2024 05:27:23 +0000
ROA not before: Mon 26 Aug 2024 05:27:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131150
IP address blocks: 120.119.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Aug 26 05:27:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B5FB29532EA5294B739E9711D4B449984E57267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:b9:5b:54:06:f4:3a:d3:f5:77:d4:ea:7a:
60:83:26:49:3a:09:a8:ff:43:a1:85:de:5b:1f:b8:
20:bd:76:c0:de:dc:b0:7b:a9:38:bd:60:1c:ee:d4:
e3:90:b4:2b:ee:8b:4e:80:ca:33:28:83:3c:e6:07:
e9:62:34:ed:7e:16:79:9d:77:18:cd:8d:82:b1:4a:
ce:40:eb:09:68:ec:01:17:8b:de:1e:59:f9:d0:fc:
35:d2:93:f1:bc:8c:fe:5b:ec:8a:32:df:5d:5c:8d:
4c:ef:79:52:ff:9b:94:20:7c:24:70:43:ee:e1:74:
f4:32:95:32:d2:7b:7a:aa:e6:51:c1:28:22:d5:8c:
5f:0d:f4:da:6c:a4:c9:da:27:9e:9f:bc:54:a7:c2:
a3:20:fb:f1:39:c7:d0:89:f1:f0:ed:03:50:4f:d9:
02:3f:0e:13:62:69:6f:2a:1b:18:e7:97:b3:61:99:
54:97:b8:55:3c:2e:f4:2d:db:b5:3c:e3:ee:0f:31:
8b:4a:49:cd:6d:07:11:2e:fc:63:87:d5:21:73:27:
a4:6a:1b:30:76:e3:16:52:de:3a:8c:c8:a1:57:a0:
26:dc:58:d8:0a:68:ca:ba:60:82:46:8a:b2:35:5a:
4b:16:b6:50:41:9d:a8:df:ef:4f:ec:51:12:20:18:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:B2:95:32:EA:52:94:B7:39:E9:71:1D:4B:44:99:84:E5:72:67
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.119.254.0/23
Signature Algorithm: sha256WithRSAEncryption
98:07:58:ec:8b:56:48:2d:91:b7:73:66:ff:f6:6c:ce:23:6c:
a1:f9:67:96:1f:92:73:0b:a1:5c:28:a8:83:50:79:cd:55:34:
30:0f:3c:bc:fb:d7:16:31:83:0d:1c:60:2b:9e:63:cb:20:9c:
5d:25:9c:93:75:11:16:b4:df:fb:da:30:3e:70:13:a4:9d:3b:
f0:36:bf:0c:66:8b:d9:10:f3:f4:60:3c:d6:7a:3f:5a:15:9c:
da:21:0a:e6:b0:5d:f9:a0:39:19:dc:8d:b9:d3:ec:62:03:b2:
d3:8c:24:99:d9:e5:f8:55:b3:5b:6e:87:c7:0d:e4:76:33:9e:
ee:54:a8:ab:a6:95:8b:b3:d5:9e:4a:e8:2d:64:7e:86:b5:20:
dd:2c:ed:76:75:0b:e7:f1:49:7f:32:c3:27:c6:0e:8d:59:1c:
8b:8c:5d:87:56:b6:d0:0d:2e:34:d2:93:47:d5:78:5d:f4:8a:
67:17:9e:50:b5:9c:57:f6:35:0c:02:62:fa:f2:19:cd:53:a1:
21:5c:90:cb:1a:a8:4b:0f:26:62:ce:b8:83:64:d1:5f:a2:13:
c4:b5:f2:ae:2f:d3:97:cf:af:47:b9:e5:27:93:17:2f:49:0b:
71:b5:d3:5a:a9:4f:59:8c:0d:d2:84:fe:f2:b3:eb:cc:32:d8:
b8:66:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:51 2025 by rpki-client