Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa
File: ZI2Xxndo_OrEmquNllMo-nGRKN8.roa (raw, json)
Hash identifier: CF1n9ryfTx7B9YYoPn4rULM6/da2DNcG9FogGOINgXo=
Subject key identifier: 64:8D:97:C6:77:68:FC:EA:C4:9A:AB:8D:96:53:28:FA:71:91:28:DF
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1270
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa
Signing time: Mon 10 Feb 2025 14:14:51 +0000
ROA not before: Mon 10 Feb 2025 14:14:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4720 (0x1270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=648D97C67768FCEAC49AAB8D965328FA719128DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:2e:70:cf:6c:5d:7e:35:be:0f:3d:8d:9d:
5f:a1:77:39:c9:23:43:e4:50:84:31:24:3d:2e:c1:
9b:65:71:42:c7:b8:a1:3b:33:b7:8d:c3:24:d9:95:
b6:f0:87:0d:30:20:32:6e:21:07:61:86:8d:a0:7e:
03:42:01:1e:f7:ec:7c:66:1a:2a:f8:a9:c0:d5:cb:
1e:0e:ad:8f:33:19:90:a3:ec:18:8f:03:c0:dd:21:
28:b5:b8:84:2f:68:cf:cf:8b:af:83:56:e4:bb:61:
69:69:9c:ef:93:76:77:0a:eb:9d:09:b0:45:b7:1f:
a4:16:09:a6:50:e5:ca:d1:ce:6b:6d:60:92:f7:0f:
70:0d:41:71:48:f7:65:af:08:21:74:aa:5b:60:ac:
bc:83:ef:8a:45:e7:a2:23:6e:41:1a:3f:d7:61:03:
e4:fb:13:e0:ec:6a:0f:76:b5:57:55:7f:fd:13:24:
a3:21:0f:e1:be:de:a9:e3:d2:6c:66:75:c9:e9:91:
b3:77:63:af:f8:bf:2b:74:9d:a3:4a:2f:4b:ca:ee:
41:2a:29:7d:0c:d8:dc:57:38:3f:db:53:9a:75:a4:
1b:fc:4e:47:76:d5:25:7b:0d:d6:54:40:3e:13:bb:
a6:23:f5:7e:e3:b8:08:3b:e1:5b:3e:3f:9e:db:5c:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:97:C6:77:68:FC:EA:C4:9A:AB:8D:96:53:28:FA:71:91:28:DF
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ZI2Xxndo_OrEmquNllMo-nGRKN8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.83.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a3:7d:d9:42:b6:ba:f2:4b:78:7d:69:64:73:f4:fb:81:6b:
d8:2b:78:f5:15:8c:f5:11:4f:86:13:9b:3e:5b:9a:b4:06:a6:
cc:0e:85:9c:57:6b:4b:31:d4:eb:d0:5f:69:01:f8:28:5b:a1:
1a:0e:21:16:36:21:3b:3e:e6:1c:e0:93:00:f6:4c:12:b7:ff:
6d:5f:83:20:aa:22:c3:4d:db:a3:62:ab:28:23:1e:d2:1e:48:
85:43:58:dc:d0:87:a6:11:39:36:7b:2e:c1:07:41:f0:17:56:
65:75:ae:80:a3:02:86:d4:b6:ce:b4:4a:15:e3:ac:1f:22:5c:
6f:c4:75:8b:49:04:22:17:c3:83:91:37:03:90:dd:8d:d8:5a:
07:99:d1:34:5e:26:27:a6:73:cd:26:76:24:bd:47:13:81:2c:
d1:ca:84:83:7f:6d:31:3d:82:b9:40:e5:c7:fe:99:4c:44:f1:
6a:11:d7:cc:a5:f2:52:4f:27:2d:ca:06:ac:f1:56:2b:7b:5b:
30:ea:df:50:f0:2a:08:c6:05:a6:73:c4:aa:04:27:d4:ea:52:
fe:6a:5c:19:6e:e7:80:42:b5:f3:56:db:be:20:a4:c6:ac:88:
f9:36:83:a9:9e:38:10:a8:db:3f:75:1c:e5:cd:9e:7c:6d:7c:
2b:50:a3:d1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx
NDE0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0OEQ5N0M2Nzc2OEZD
RUFDNDlBQUI4RDk2NTMyOEZBNzE5MTI4REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPFS5wz2xdfjW+Dz2NnV+hdznJI0PkUIQxJD0uwZtlcULHuKE7
M7eNwyTZlbbwhw0wIDJuIQdhho2gfgNCAR737HxmGir4qcDVyx4OrY8zGZCj7BiP
A8DdISi1uIQvaM/Pi6+DVuS7YWlpnO+TdncK650JsEW3H6QWCaZQ5crRzmttYJL3
D3ANQXFI92WvCCF0qltgrLyD74pF56IjbkEaP9dhA+T7E+Dsag92tVdVf/0TJKMh
D+G+3qnj0mxmdcnpkbN3Y6/4vyt0naNKL0vK7kEqKX0M2NxXOD/bU5p1pBv8Tkd2
1SV7DdZUQD4Tu6Yj9X7juAg74Vs+P57bXB1jAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUZI2Xxndo/OrEmquNllMo+nGRKN8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9aSTJYeG5kb19PckVt
cXVObGxNby1uR1JLTjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnRTMA0GCSqGSIb3DQEBCwUAA4IBAQBCo33ZQra68kt4fWlkc/T7gWvYK3j1
FYz1EU+GE5s+W5q0BqbMDoWcV2tLMdTr0F9pAfgoW6EaDiEWNiE7PuYc4JMA9kwS
t/9tX4MgqiLDTdujYqsoIx7SHkiFQ1jc0IemETk2ey7BB0HwF1Zlda6AowKG1LbO
tEoV46wfIlxvxHWLSQQiF8ODkTcDkN2N2FoHmdE0XiYnpnPNJnYkvUcTgSzRyoSD
f20xPYK5QOXH/plMRPFqEdfMpfJSTyctygas8VYre1sw6t9Q8CoIxgWmc8SqBCfU
6lL+alwZbueAQrXzVtu+IKTGrIj5NoOpnjgQqNs/dRzlzZ58bXwrUKPR
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:23 2025 by rpki-client