Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa
File: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (raw, json)
Hash identifier: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8=
Subject key identifier: B5:D4:C0:F0:65:8A:37:6E:3D:03:AD:62:3F:BA:8B:AB:7F:8B:30:B4
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F6E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa
Signing time: Tue 18 Feb 2025 01:39:24 +0000
ROA not before: Tue 18 Feb 2025 01:39:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18177
IP address blocks: 120.116.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3950 (0xf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:39:24 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B5D4C0F0658A376E3D03AD623FBA8BAB7F8B30B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:9a:74:cc:68:83:46:c6:80:04:bd:c8:a9:
19:2c:0d:af:e0:1c:40:f8:96:9a:4b:ab:99:40:2a:
f9:dd:50:40:ca:33:ec:a4:20:21:9e:11:2b:7e:64:
c0:c2:17:a3:f7:9b:63:b0:4b:53:1b:e3:42:73:e6:
8b:c1:28:7c:78:ef:39:63:69:3e:a5:86:8f:c1:02:
70:dc:c7:57:30:ec:13:4c:20:69:ca:2a:67:6a:ac:
1b:3c:1d:e1:89:a2:3b:7b:37:dd:da:96:bf:51:59:
c2:b2:d3:5f:f7:10:90:9d:a4:00:98:a3:ce:b6:43:
d8:da:a0:81:84:98:7c:1b:09:95:96:86:ec:e6:77:
7c:71:a8:53:3e:0a:cb:2a:b1:d1:f6:a8:f1:0f:8d:
68:89:44:39:3e:78:96:ff:45:92:dc:ca:88:04:77:
1b:81:82:46:f5:36:c5:12:65:7a:56:f9:b9:49:a0:
22:64:19:c1:42:3b:54:1d:b3:cf:4a:82:ff:7c:8c:
df:69:bb:32:96:d7:ae:84:69:de:d6:ed:42:61:be:
86:71:1f:42:86:d2:b5:64:93:c9:3a:10:ee:cf:07:
92:53:b1:6b:04:ac:41:47:88:ec:ad:b5:53:03:7e:
ee:58:08:77:d3:96:73:66:35:f8:2a:44:f2:1c:d2:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D4:C0:F0:65:8A:37:6E:3D:03:AD:62:3F:BA:8B:AB:7F:8B:30:B4
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/tdTA8GWKN249A61iP7qLq3-LMLQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.116.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:e6:0d:bb:81:29:7d:22:2f:33:a6:05:ce:74:2d:21:85:2c:
5e:4b:b5:0e:b7:08:04:e0:e4:52:68:24:0b:47:f8:50:b3:39:
5c:0d:77:83:db:75:b0:4b:56:12:73:3c:82:70:9a:b7:a8:b6:
f9:38:d8:0d:9f:4f:2b:79:e4:39:00:da:8e:5a:8d:9b:d4:93:
3b:b2:a8:5c:e5:78:b5:21:5b:84:49:0a:b8:f1:7f:c9:46:80:
68:9f:f3:37:6c:d3:3f:04:7f:5b:42:18:f0:ca:74:d1:1d:a7:
bd:c4:3a:05:5b:5d:91:02:7c:52:86:68:73:6f:46:ec:8d:04:
c1:5e:45:5e:e0:3a:21:cb:03:f1:e7:86:17:f8:81:18:06:84:
e9:b9:89:4f:02:01:bd:7d:5c:ca:39:b2:16:11:ad:c1:0b:b7:
27:a1:b5:13:7f:c5:cf:a7:86:a1:19:91:e6:93:2a:73:6e:25:
b5:85:43:18:a6:00:a7:63:08:4b:71:c1:0c:55:4e:bd:91:0c:
6b:45:1d:11:c0:14:cd:fb:32:ff:3a:b8:13:56:43:88:25:d8:
13:95:63:7e:e7:39:46:a0:95:0f:7e:3c:c2:e5:b7:52:db:84:
c7:c5:77:c1:1f:51:f4:ec:5b:f6:13:28:44:ad:76:d9:b1:c2:
f5:c1:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:39 2025 by rpki-client