Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eJvnHueQ9vdlzWAbLbIenUMPVSw.roa
File: eJvnHueQ9vdlzWAbLbIenUMPVSw.roa (raw, json)
Hash identifier: euoB+kawFPhdKjFZsLd7XJmNCQ9QfqwT+0kFCwbHbiI=
Subject key identifier: 78:9B:E7:1E:E7:90:F6:F7:65:CD:60:1B:2D:B2:1E:9D:43:0F:55:2C
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1296
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eJvnHueQ9vdlzWAbLbIenUMPVSw.roa
Signing time: Mon 10 Feb 2025 14:15:01 +0000
ROA not before: Mon 10 Feb 2025 14:15:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4758 (0x1296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:01 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=789BE71EE790F6F765CD601B2DB21E9D430F552C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9d:54:c8:ea:d7:36:0e:6d:1b:7d:b7:24:51:
11:33:76:11:6f:f9:c1:3b:d4:2e:3e:63:38:83:b3:
ca:4c:b0:ca:14:f1:cd:21:6b:c6:49:09:4c:ea:a9:
03:b5:be:08:a7:18:6e:cc:62:55:16:a0:ef:b3:d9:
34:03:5b:4b:94:ed:57:e4:fe:79:01:5f:58:20:0d:
97:7b:81:2a:47:a2:ff:48:b6:63:a8:df:31:3f:fb:
5d:86:03:96:54:05:5c:a2:40:41:fc:0a:85:69:98:
19:28:99:38:91:96:9a:2b:8a:09:9f:2e:f4:a3:d7:
e6:09:21:47:b7:b6:62:db:37:79:74:66:82:f5:80:
17:26:f6:b2:c8:c5:1e:a9:1a:97:9b:49:70:a1:14:
94:47:39:62:ae:1c:c4:3c:92:29:e0:97:f0:04:2b:
19:00:d2:4b:13:93:a6:e8:0c:d9:01:17:32:02:3c:
03:7f:9e:31:51:0c:03:97:47:ad:b4:74:ea:94:79:
63:26:f1:6c:b4:6d:ed:c7:71:34:c2:31:1f:36:f7:
2c:67:47:e0:79:13:40:b3:c2:8e:53:6c:c8:66:bc:
10:58:40:46:b6:8f:ed:80:8f:c4:8c:f6:8f:50:85:
d8:bb:ce:a6:5a:30:e0:86:08:0f:58:5e:81:75:a6:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9B:E7:1E:E7:90:F6:F7:65:CD:60:1B:2D:B2:1E:9D:43:0F:55:2C
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eJvnHueQ9vdlzWAbLbIenUMPVSw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:a3:cb:b3:71:31:d1:da:92:37:32:9b:2b:02:44:16:9e:b6:
74:10:0f:ec:d9:40:aa:e2:7e:90:0b:7f:6c:05:d6:7e:63:22:
63:d0:2b:e0:b6:e6:63:22:54:b0:ee:f6:82:c9:b0:42:db:d2:
80:1a:2e:1e:27:7b:39:4b:a2:7d:63:92:1a:38:ed:ff:c3:53:
e6:5c:3a:29:48:1a:89:54:6e:eb:95:dc:02:aa:6a:9b:02:bf:
7c:32:46:68:ef:ec:75:2c:91:10:a6:37:31:8d:ca:30:74:92:
44:a2:0f:b1:b4:68:6a:ca:4d:4e:2f:05:4d:a8:c4:d2:c6:11:
02:14:5e:35:5d:04:21:1c:92:db:5f:53:2b:36:87:96:b3:75:
5a:6e:9c:0e:a2:91:91:53:d2:55:ac:9c:9f:3c:f2:c7:7d:75:
15:25:fb:8a:60:19:ca:ee:6f:82:51:47:07:3b:22:54:8c:0f:
4a:a5:ad:68:39:03:ea:fe:af:14:20:63:a2:ae:45:53:df:d4:
97:8d:dd:f0:e3:43:be:9d:70:d3:f8:90:09:7c:3d:fa:b2:ad:
d2:e7:92:25:f2:35:74:50:ad:58:34:1c:fa:78:40:75:c7:3a:
5b:c0:9c:ab:f6:74:65:d2:90:ab:85:fc:c9:a7:94:29:78:25:
88:c7:8d:26
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx
NDE1MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4OUJFNzFFRTc5MEY2
Rjc2NUNENjAxQjJEQjIxRTlENDMwRjU1MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4nVTI6tc2Dm0bfbckUREzdhFv+cE71C4+YziDs8pMsMoU8c0h
a8ZJCUzqqQO1vginGG7MYlUWoO+z2TQDW0uU7Vfk/nkBX1ggDZd7gSpHov9ItmOo
3zE/+12GA5ZUBVyiQEH8CoVpmBkomTiRlporigmfLvSj1+YJIUe3tmLbN3l0ZoL1
gBcm9rLIxR6pGpebSXChFJRHOWKuHMQ8kingl/AEKxkA0ksTk6boDNkBFzICPAN/
njFRDAOXR620dOqUeWMm8Wy0be3HcTTCMR829yxnR+B5E0Czwo5TbMhmvBBYQEa2
j+2Aj8SM9o9Qhdi7zqZaMOCGCA9YXoF1poDTAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUeJvnHueQ9vdlzWAbLbIenUMPVSwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9lSnZuSHVlUTl2ZGx6
V0FiTGJJZW5VTVBWU3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFlnSgMA0GCSqGSIb3DQEBCwUAA4IBAQCio8uzcTHR2pI3MpsrAkQWnrZ0EA/s
2UCq4n6QC39sBdZ+YyJj0CvgtuZjIlSw7vaCybBC29KAGi4eJ3s5S6J9Y5IaOO3/
w1PmXDopSBqJVG7rldwCqmqbAr98MkZo7+x1LJEQpjcxjcowdJJEog+xtGhqyk1O
LwVNqMTSxhECFF41XQQhHJLbX1MrNoeWs3VabpwOopGRU9JVrJyfPPLHfXUVJfuK
YBnK7m+CUUcHOyJUjA9Kpa1oOQPq/q8UIGOirkVT39SXjd3w40O+nXDT+JAJfD36
sq3S55Il8jV0UK1YNBz6eEB1xzpbwJyr9nRl0pCrhfzJp5QpeCWIx40m
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:21 2025 by rpki-client