Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ecluIRPCjGQhhkvTaqnkcVzkmWo.roa
File: ecluIRPCjGQhhkvTaqnkcVzkmWo.roa (raw, json)
Hash identifier: vctGT0v/qGFzj59dygpFu0JWqRByKm08KznaYWPXYDg=
Subject key identifier: 79:C9:6E:21:13:C2:8C:64:21:86:4B:D3:6A:A9:E4:71:5C:E4:99:6A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 110A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ecluIRPCjGQhhkvTaqnkcVzkmWo.roa
Signing time: Mon 10 Feb 2025 13:56:44 +0000
ROA not before: Mon 10 Feb 2025 13:56:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 113.61.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4362 (0x110a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=79C96E2113C28C6421864BD36AA9E4715CE4996A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:3d:a7:41:9a:8f:1c:e0:19:71:fb:f5:b4:
72:a6:08:e2:8b:45:a6:f7:84:2d:7b:10:66:64:9a:
1b:d3:a6:19:97:5a:5f:64:1c:9f:8c:a8:86:c8:4a:
47:88:c2:69:7c:61:15:3c:2e:20:e3:84:1a:9f:51:
9c:38:21:e4:fd:a1:5a:36:a0:71:ac:95:bd:35:53:
58:ed:5e:f2:fd:c1:38:33:02:c3:6a:63:eb:91:71:
a0:dc:14:fb:08:9b:02:49:39:be:d4:b4:ec:d7:89:
05:4c:b5:ae:ae:0a:17:15:7d:b2:08:0b:a2:76:f7:
2f:f1:e7:49:86:0a:30:52:45:67:59:04:d9:ea:de:
49:52:b5:4b:dc:be:8e:95:98:72:b2:a3:f6:a1:66:
8e:bb:c3:66:fb:99:a8:da:66:8d:68:3f:c7:49:30:
eb:95:a9:eb:fe:ec:5b:f7:73:64:7b:e1:9a:42:28:
3f:e4:0e:0c:c7:47:d9:0c:a7:5b:19:26:c6:54:4d:
24:22:fd:37:c6:d6:9b:d5:be:44:bb:99:96:2e:d9:
52:75:43:ad:35:e2:fc:df:ac:3f:9c:55:9b:9f:0c:
ee:5a:8f:76:2e:95:a0:9b:b3:e7:ef:a9:4f:48:1c:
73:96:6e:a6:15:c7:e8:2e:b7:5c:58:a6:6c:9d:32:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:6E:21:13:C2:8C:64:21:86:4B:D3:6A:A9:E4:71:5C:E4:99:6A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ecluIRPCjGQhhkvTaqnkcVzkmWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
46:e0:5e:19:bb:f0:cb:b8:0a:5c:d8:13:f0:45:1e:f5:53:a2:
fd:2c:cf:24:84:f0:43:b3:24:fd:0c:6a:4c:44:0d:1c:53:14:
f1:ce:27:7e:cd:7f:b9:b9:42:5a:53:ea:13:83:72:24:89:94:
e1:49:d6:b2:6b:94:13:c8:bf:f8:09:07:23:66:b2:05:0d:bb:
b1:ce:61:8a:ba:fe:16:d2:26:b7:40:5e:14:51:1d:da:df:12:
27:e7:7d:8b:63:fb:82:c2:d5:f4:43:87:a3:d7:bb:f3:f4:b5:
0f:f3:ba:4a:0f:0c:99:4c:b9:67:8d:6e:d9:d2:45:ca:42:09:
f0:dc:08:ac:a5:68:f8:61:3e:9f:35:8a:8e:49:90:ec:c0:5b:
cb:df:88:cf:f5:b4:5e:d6:25:77:5a:e5:c6:8b:58:c3:12:f9:
ee:3e:af:d0:aa:34:4b:43:68:cc:2a:24:84:6b:19:86:cb:cc:
1d:89:c7:be:e8:ac:df:bc:39:6c:5c:b7:f3:c5:33:d2:93:6b:
44:a5:b7:a8:cd:e6:91:7e:fb:32:fc:61:0f:35:28:ba:fc:54:
4f:db:e6:f9:47:a9:c2:64:e5:a2:c6:01:92:b4:68:c0:2a:b3:
ce:e5:13:36:6f:7c:83:95:7a:06:1f:09:67:02:e2:4e:b1:dd:
93:04:f0:1e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx
MzU2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5Qzk2RTIxMTNDMjhD
NjQyMTg2NEJEMzZBQTlFNDcxNUNFNDk5NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMOT2nQZqPHOAZcfv1tHKmCOKLRab3hC17EGZkmhvTphmXWl9k
HJ+MqIbISkeIwml8YRU8LiDjhBqfUZw4IeT9oVo2oHGslb01U1jtXvL9wTgzAsNq
Y+uRcaDcFPsImwJJOb7UtOzXiQVMta6uChcVfbIIC6J29y/x50mGCjBSRWdZBNnq
3klStUvcvo6VmHKyo/ahZo67w2b7majaZo1oP8dJMOuVqev+7Fv3c2R74ZpCKD/k
DgzHR9kMp1sZJsZUTSQi/TfG1pvVvkS7mZYu2VJ1Q6014vzfrD+cVZufDO5aj3Yu
laCbs+fvqU9IHHOWbqYVx+gut1xYpmydMkytAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUecluIRPCjGQhhkvTaqnkcVzkmWowHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZWNsdUlSUENqR1FoaGt2VGFxbmtj
VnprbVdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE98DAN
BgkqhkiG9w0BAQsFAAOCAQEARuBeGbvwy7gKXNgT8EUe9VOi/SzPJITwQ7Mk/Qxq
TEQNHFMU8c4nfs1/ublCWlPqE4NyJImU4UnWsmuUE8i/+AkHI2ayBQ27sc5hirr+
FtImt0BeFFEd2t8SJ+d9i2P7gsLV9EOHo9e78/S1D/O6Sg8MmUy5Z41u2dJFykIJ
8NwIrKVo+GE+nzWKjkmQ7MBby9+Iz/W0XtYld1rlxotYwxL57j6v0Ko0S0NozCok
hGsZhsvMHYnHvuis37w5bFy388Uz0pNrRKW3qM3mkX77MvxhDzUouvxUT9vm+Uep
wmTlosYBkrRowCqzzuUTNm98g5V6Bh8JZwLiTrHdkwTwHg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:07:37 2025 by rpki-client