Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/84LMYtRT9Lk6Rcvm2H1EC12pX7U.roa
File: 84LMYtRT9Lk6Rcvm2H1EC12pX7U.roa (raw, json)
Hash identifier: A/DIgMvFbNXlXuM0rY8KagIyjXh7u9MxIHof1ErgrAU=
Subject key identifier: F3:82:CC:62:D4:53:F4:B9:3A:45:CB:E6:D8:7D:44:0B:5D:A9:5F:B5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1276
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/84LMYtRT9Lk6Rcvm2H1EC12pX7U.roa
Signing time: Mon 10 Feb 2025 14:14:52 +0000
ROA not before: Mon 10 Feb 2025 14:14:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7532
IP address blocks: 150.116.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4726 (0x1276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F382CC62D453F4B93A45CBE6D87D440B5DA95FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:30:23:46:e8:26:12:67:00:c2:8c:28:e4:
12:88:26:b0:40:09:d6:5d:f8:bd:5f:3a:f7:1e:20:
33:4a:ba:be:1a:6f:c1:61:0e:f8:7f:69:f7:fb:27:
c1:0c:f4:d1:55:37:05:be:b0:e7:24:2e:13:c9:a4:
dd:21:ff:a1:38:47:84:4f:4a:30:da:98:d7:43:27:
84:6f:5b:64:83:5d:c5:96:67:4a:55:c2:91:bc:0f:
4c:eb:d5:12:39:43:3f:76:cf:cb:21:e1:8f:1c:f3:
05:52:35:bf:68:d8:fb:ba:a3:49:9f:34:72:8c:16:
07:28:e8:a3:4b:d1:5f:48:40:b4:99:7c:61:a5:fe:
54:7d:ab:88:8c:9d:3b:25:73:6d:51:78:fc:a8:25:
7e:14:7a:bd:a3:64:bb:5f:55:22:a0:e9:d9:68:41:
a7:70:e3:5a:d4:c1:79:60:45:68:72:53:11:8a:77:
54:d4:b9:c5:50:43:98:da:6c:46:44:46:2b:87:93:
7e:5e:e9:3e:c6:a8:37:c2:2c:bd:6a:ac:dd:df:5f:
d6:50:b7:08:8a:1c:80:4a:6b:86:27:b1:83:88:c7:
45:0c:95:e5:be:37:9d:c0:a5:24:92:b6:93:c9:02:
37:c4:6a:89:78:02:d5:b4:be:7c:3d:14:df:58:51:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:CC:62:D4:53:F4:B9:3A:45:CB:E6:D8:7D:44:0B:5D:A9:5F:B5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/84LMYtRT9Lk6Rcvm2H1EC12pX7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.54.0/24
Signature Algorithm: sha256WithRSAEncryption
88:23:38:30:52:d9:11:07:cf:ac:de:fb:c9:1b:65:67:3e:8d:
d8:b0:da:34:f4:3e:b7:45:f2:e3:15:34:22:0e:fe:eb:1e:3a:
1c:99:1b:09:59:84:cf:93:8e:f4:eb:05:16:13:01:ce:6a:1d:
69:61:83:7b:4b:cf:8f:48:ec:6c:5b:e4:92:2b:6d:98:cf:a4:
3c:eb:e0:f0:3d:32:96:b0:2c:ca:91:de:15:8e:97:90:56:cf:
c4:1d:d4:79:11:7f:4a:0c:9c:5a:b0:9f:40:4b:0a:ff:f6:b8:
fd:e1:11:60:67:80:41:8d:c2:67:79:da:2a:20:ff:c6:e3:90:
a3:9b:34:82:a4:33:c8:62:87:b0:2f:ad:18:5e:6c:af:8b:a0:
10:43:b4:49:f4:a2:a9:b4:41:47:23:b9:18:e6:22:fe:e7:90:
fc:eb:f7:01:4d:56:95:98:0e:f3:ad:c6:cf:76:36:cb:04:32:
4d:6f:2d:02:4c:f2:74:5f:7d:93:f6:20:92:29:57:8f:4f:fa:
44:8d:d2:ad:00:4b:6f:54:3d:35:7f:b9:ce:c7:6d:2f:b8:26:
28:ba:09:e3:a9:08:2c:65:73:2f:09:ca:c5:09:81:54:bc:3d:
7b:da:8c:b5:c7:70:e5:c0:58:bb:9e:19:43:ed:e5:3f:17:b4:
1f:14:c8:95
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEnYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx
NDE0NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzODJDQzYyRDQ1M0Y0
QjkzQTQ1Q0JFNkQ4N0Q0NDBCNURBOTVGQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBNDAjRugmEmcAwowo5BKIJrBACdZd+L1fOvceIDNKur4ab8Fh
Dvh/aff7J8EM9NFVNwW+sOckLhPJpN0h/6E4R4RPSjDamNdDJ4RvW2SDXcWWZ0pV
wpG8D0zr1RI5Qz92z8sh4Y8c8wVSNb9o2Pu6o0mfNHKMFgco6KNL0V9IQLSZfGGl
/lR9q4iMnTslc21RePyoJX4Uer2jZLtfVSKg6dloQadw41rUwXlgRWhyUxGKd1TU
ucVQQ5jabEZERiuHk35e6T7GqDfCLL1qrN3fX9ZQtwiKHIBKa4YnsYOIx0UMleW+
N53ApSSStpPJAjfEaol4AtW0vnw9FN9YUcMNAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU84LMYtRT9Lk6Rcvm2H1EC12pX7UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84NExNWXRSVDlMazZS
Y3ZtMkgxRUMxMnBYN1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQ2MA0GCSqGSIb3DQEBCwUAA4IBAQCIIzgwUtkRB8+s3vvJG2VnPo3YsNo0
9D63RfLjFTQiDv7rHjocmRsJWYTPk4706wUWEwHOah1pYYN7S8+PSOxsW+SSK22Y
z6Q86+DwPTKWsCzKkd4VjpeQVs/EHdR5EX9KDJxasJ9ASwr/9rj94RFgZ4BBjcJn
edoqIP/G45CjmzSCpDPIYoewL60YXmyvi6AQQ7RJ9KKptEFHI7kY5iL+55D86/cB
TVaVmA7zrcbPdjbLBDJNby0CTPJ0X32T9iCSKVePT/pEjdKtAEtvVD01f7nOx20v
uCYougnjqQgsZXMvCcrFCYFUvD172oy1x3DlwFi7nhlD7eU/F7QfFMiV
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:18:53 2025 by rpki-client