Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rUUD6MeUGGaTd29qTRrYrFtGQaA.roa
File: rUUD6MeUGGaTd29qTRrYrFtGQaA.roa (raw, json)
Hash identifier: qQjreJgGyu2GJEDn9c6v8GOPZksGgMii/W+rxkqj5qE=
Subject key identifier: AD:45:03:E8:C7:94:18:66:93:77:6F:6A:4D:1A:D8:AC:5B:46:41:A0
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F0E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rUUD6MeUGGaTd29qTRrYrFtGQaA.roa
Signing time: Mon 10 Feb 2025 14:16:21 +0000
ROA not before: Mon 10 Feb 2025 14:16:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18185
IP address blocks: 120.117.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3854 (0xf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AD4503E8C794186693776F6A4D1AD8AC5B4641A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:94:15:b6:df:da:5e:1e:b7:a6:e9:0b:a8:
a9:01:f6:d2:8d:f2:91:8d:0e:bb:f9:8d:96:37:b8:
fd:59:85:e6:0d:68:5d:a8:8b:a4:58:4f:b5:2b:2d:
91:1f:d1:20:05:5a:fd:3b:5f:03:71:a9:d7:68:18:
7b:7d:14:94:ab:87:ed:f5:8f:5f:e7:cf:00:56:5f:
e8:62:7e:ba:d5:46:e3:42:84:22:d1:35:ec:12:64:
22:b8:0d:f9:98:56:5b:e1:df:27:cc:19:eb:c9:ef:
c1:6f:5a:4a:bc:9e:3a:73:59:05:e0:9d:02:7f:5b:
ae:db:d2:d4:41:82:ad:2b:f9:4c:8f:b4:ed:e1:69:
85:df:c1:f4:19:1c:31:30:98:8f:38:97:65:d6:b4:
4b:ad:e1:59:70:1f:36:44:3b:cc:72:45:91:71:65:
0c:d5:b5:fc:0f:1e:ef:b9:58:52:73:28:30:97:75:
06:62:e8:d0:f6:02:f0:9b:06:fe:a6:e6:0b:f8:ba:
16:4b:43:b8:81:aa:91:02:d1:ae:43:2f:4f:cd:fa:
50:dd:9b:3b:c7:c0:4f:44:33:59:8a:99:06:58:78:
78:5f:99:3d:26:7c:42:2d:d8:38:3d:6d:36:1d:b6:
be:79:f1:0c:79:07:ed:f2:97:f2:2d:c6:29:2d:58:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:03:E8:C7:94:18:66:93:77:6F:6A:4D:1A:D8:AC:5B:46:41:A0
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rUUD6MeUGGaTd29qTRrYrFtGQaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.4.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6e:fe:9f:02:17:72:05:49:59:2f:6c:3c:32:85:83:2d:cb:
2e:9c:ff:74:60:82:df:e0:0f:03:c1:55:96:75:4e:32:f9:c4:
73:86:72:5a:3d:0e:ba:80:2f:41:e1:13:ec:88:ff:5c:69:cb:
6f:1e:a5:7e:ee:28:a1:ad:dc:31:8f:19:21:46:8d:98:9f:ca:
a8:f2:8e:80:26:34:e4:8e:7e:2b:44:88:63:3a:51:49:54:6b:
d9:9f:19:03:42:6e:15:8c:26:11:a2:67:66:e2:b7:c3:47:e8:
af:0f:18:ed:da:57:af:12:3c:ca:a1:af:64:80:fe:da:0a:3a:
5e:9c:f6:36:ea:4c:42:f5:30:ed:6a:77:6a:31:3e:be:99:c2:
9e:17:83:ef:87:04:72:a9:16:7b:22:9a:37:95:37:4c:0f:79:
e9:4c:e3:11:59:20:92:ca:01:32:e2:4e:e4:be:32:6b:c4:02:
7c:cd:da:d8:81:67:f6:0b:a9:e8:d1:52:42:48:3e:1a:23:5e:
65:39:4d:dc:aa:91:55:8d:13:54:98:22:fc:7d:2f:4c:e6:db:
4e:fd:49:5a:ed:c1:29:25:b0:99:c9:d7:2a:fd:11:1f:3c:d2:
b0:4c:c1:1f:1e:57:9a:0e:3c:d6:42:e4:99:ae:8c:05:17:1b:
0d:f4:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:44 2025 by rpki-client