Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa
File: FeAMDm9qccijoyI9Ffbw1vCASAU.roa (raw, json)
Hash identifier: v9ASdzTON3Hi71cqK379nVHH1s8vlafaTgjUjA7ut38=
Subject key identifier: 15:E0:0C:0E:6F:6A:71:C8:A3:A3:22:3D:15:F6:F0:D6:F0:80:48:05
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1205
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa
Signing time: Mon 10 Feb 2025 14:27:58 +0000
ROA not before: Mon 10 Feb 2025 14:27:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 218.35.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4613 (0x1205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=15E00C0E6F6A71C8A3A3223D15F6F0D6F0804805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:d3:9c:42:a8:04:34:b0:05:5c:20:de:38:
4e:c5:ef:ef:3d:53:ca:cb:3b:16:29:b8:c4:33:41:
50:89:de:25:a2:d3:4a:98:98:72:b1:75:f4:7e:76:
92:01:89:3d:47:8d:e3:1f:9b:40:1f:88:bb:bd:16:
e1:68:d8:d0:8d:d7:61:5c:89:de:43:cc:fb:11:22:
d3:53:df:28:ed:26:7a:1f:da:b9:3d:6b:52:d9:cc:
11:97:36:da:ac:37:d6:d0:24:97:ee:10:f7:cb:7b:
e8:27:98:e4:a5:15:b3:50:a7:1f:74:1f:8c:6a:19:
ed:52:8c:34:39:7b:5a:16:10:19:25:be:5a:8a:9c:
6b:c7:b2:de:f7:7e:01:e2:03:10:0f:d2:e1:77:7b:
af:81:3b:a5:8d:13:55:84:b5:4a:2a:bc:34:b7:35:
85:ea:7a:60:3e:b3:04:81:ad:5f:11:70:69:13:83:
2f:b2:b6:6a:89:21:28:84:4b:9e:88:e1:6b:45:a3:
51:90:cf:76:21:ce:64:e5:2c:4b:ad:f4:e9:04:3e:
d3:eb:5f:e6:dd:b9:20:d9:a9:3f:7b:8d:ef:77:0e:
87:87:64:8e:90:37:b7:ef:c4:9e:e0:eb:5a:0c:35:
c9:50:a0:d6:bd:73:5c:02:57:34:c9:5b:68:dd:16:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:0C:0E:6F:6A:71:C8:A3:A3:22:3D:15:F6:F0:D6:F0:80:48:05
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FeAMDm9qccijoyI9Ffbw1vCASAU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:39:ff:34:9e:e2:50:03:8c:7c:ee:40:48:42:9c:05:2b:c7:
f6:f1:69:97:36:4a:75:2f:d3:99:d6:1c:4f:11:ea:ee:0d:24:
93:52:94:15:7a:39:75:23:60:38:1a:cc:0f:4a:45:b2:a9:23:
75:39:92:6c:52:d3:52:60:c9:26:40:96:03:cd:0a:3a:02:f9:
3a:ce:4e:50:4b:ca:52:58:f8:eb:43:04:e9:f9:92:e6:c0:25:
74:db:79:6d:80:9c:37:76:a7:e9:af:9d:b4:66:1f:35:8e:26:
25:9b:47:1f:7c:6b:e9:c2:f1:dc:96:1d:76:fa:31:c2:44:af:
16:f1:b1:e4:b5:35:e8:ac:93:e3:65:fc:8b:45:9b:15:bf:58:
6c:e1:b8:c7:0a:42:2f:c2:1c:ee:28:45:20:68:dc:8e:6d:89:
c9:00:1b:d4:c5:67:ee:81:86:c9:80:21:4f:d4:77:d0:ea:dc:
cb:98:a1:a4:be:c6:f2:6c:3f:a3:aa:0d:35:be:2c:ed:f6:23:
d9:72:a3:75:69:0f:73:fa:8a:59:d7:35:31:6a:80:83:48:5d:
ec:f3:ba:27:63:b4:ec:08:92:bc:14:cc:30:f1:b4:2d:bd:db:
a2:63:29:c5:67:74:c3:bd:d1:cc:52:01:42:7c:5e:ba:f8:27:
e0:45:cb:22
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI3NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1RTAwQzBFNkY2QTcx
QzhBM0EzMjIzRDE1RjZGMEQ2RjA4MDQ4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQE9OcQqgENLAFXCDeOE7F7+89U8rLOxYpuMQzQVCJ3iWi00qY
mHKxdfR+dpIBiT1HjeMfm0AfiLu9FuFo2NCN12Fcid5DzPsRItNT3yjtJnof2rk9
a1LZzBGXNtqsN9bQJJfuEPfLe+gnmOSlFbNQpx90H4xqGe1SjDQ5e1oWEBklvlqK
nGvHst73fgHiAxAP0uF3e6+BO6WNE1WEtUoqvDS3NYXqemA+swSBrV8RcGkTgy+y
tmqJISiES56I4WtFo1GQz3YhzmTlLEut9OkEPtPrX+bduSDZqT97je93DoeHZI6Q
N7fvxJ7g61oMNclQoNa9c1wCVzTJW2jdFk2VAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUFeAMDm9qccijoyI9Ffbw1vCASAUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ZlQU1EbTlxY2Npam95STlGZmJ3MXZD
QVNBVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaIwgwDQYJ
KoZIhvcNAQELBQADggEBAJ05/zSe4lADjHzuQEhCnAUrx/bxaZc2SnUv05nWHE8R
6u4NJJNSlBV6OXUjYDgazA9KRbKpI3U5kmxS01JgySZAlgPNCjoC+TrOTlBLylJY
+OtDBOn5kubAJXTbeW2AnDd2p+mvnbRmHzWOJiWbRx98a+nC8dyWHXb6McJErxbx
seS1Neisk+Nl/ItFmxW/WGzhuMcKQi/CHO4oRSBo3I5tickAG9TFZ+6BhsmAIU/U
d9Dq3MuYoaS+xvJsP6OqDTW+LO32I9lyo3VpD3P6ilnXNTFqgINIXezzuidjtOwI
krwUzDDxtC2926JjKcVndMO90cxSAUJ8Xrr4J+BFyyI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:34:41 2025 by rpki-client