Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Wr4Sv2V9NlIZtX5aumNiFOXnwxM.roa
File: Wr4Sv2V9NlIZtX5aumNiFOXnwxM.roa (raw, json)
Hash identifier: YBvkdV43MO0NI99x3zxA2QO0bWNzLNPmYK8zoJV5ba4=
Subject key identifier: 5A:BE:12:BF:65:7D:36:52:19:B5:7E:5A:BA:63:62:14:E5:E7:C3:13
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11FB
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Wr4Sv2V9NlIZtX5aumNiFOXnwxM.roa
Signing time: Mon 10 Feb 2025 14:27:55 +0000
ROA not before: Mon 10 Feb 2025 14:27:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18412
IP address blocks: 2401:e180:8e00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4603 (0x11fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5ABE12BF657D365219B57E5ABA636214E5E7C313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:ff:38:eb:38:8a:14:64:82:67:0c:19:9a:
87:33:78:ba:0f:85:d6:9d:aa:0b:eb:4e:95:9a:7e:
b7:3c:9a:fd:61:c0:8f:fa:d8:69:57:7b:65:aa:ce:
c8:a5:f3:73:2b:ee:2b:bf:25:b8:29:be:63:00:5a:
a4:ef:ae:6f:10:eb:2d:5d:f5:69:0d:85:0b:e4:d2:
68:3e:88:aa:77:81:50:2a:90:25:0c:a9:d5:fc:8c:
6b:20:9c:0a:2b:a0:ad:bb:3d:5f:a9:f8:8b:e3:4d:
52:9f:24:22:c2:c5:b0:aa:49:72:37:a0:bb:ca:cd:
cd:2e:c7:05:46:ee:aa:e3:63:ea:96:17:01:e1:52:
55:74:60:0d:27:66:00:d3:b1:53:75:9c:ff:bc:b4:
e0:0c:e6:c0:8d:40:6d:c0:1e:ef:33:84:01:b6:69:
b0:58:02:84:75:18:5c:20:0b:d1:b8:a3:cc:97:59:
59:21:97:7a:37:32:d7:ec:39:cc:e2:45:b5:0b:6a:
00:19:4b:71:6d:0f:42:75:7e:e7:3e:43:f9:23:3c:
00:a3:67:02:32:92:e4:e3:a1:65:19:0a:11:59:44:
40:68:ee:04:1e:3e:90:59:ee:67:ab:49:42:3e:d3:
b9:2c:8b:1e:45:d4:5f:ef:3e:37:9f:6e:7a:08:7b:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:12:BF:65:7D:36:52:19:B5:7E:5A:BA:63:62:14:E5:E7:C3:13
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Wr4Sv2V9NlIZtX5aumNiFOXnwxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e180:8e00::/44
Signature Algorithm: sha256WithRSAEncryption
55:eb:27:d5:a7:0b:bb:f0:3e:58:56:0f:c1:a6:a2:e8:68:c7:
f4:27:c2:c4:84:8f:d3:16:44:98:a7:27:eb:5d:af:6a:47:a9:
69:15:44:96:7e:ae:12:a9:0c:08:9a:ac:e3:ed:cc:b1:80:b2:
e9:be:73:74:02:f0:59:11:c4:ea:63:c1:7f:75:d8:e7:54:3e:
d4:ad:f6:28:21:6c:41:be:52:4b:8c:8f:e9:7f:5a:2c:11:c3:
a3:f0:8a:6a:4c:72:d5:34:54:9c:5d:c0:85:6c:f6:6b:dd:9c:
3b:fc:5b:e4:63:b4:eb:92:21:2f:23:e2:8f:44:97:21:d4:de:
9b:d9:f6:1b:a5:f1:0f:de:24:97:3e:89:e4:84:d2:de:dc:91:
40:61:c6:0c:33:e8:3a:3b:7e:96:a3:e1:af:45:0f:00:bf:64:
df:5b:3b:2e:7b:b9:65:9f:85:79:1b:60:ea:56:fe:9c:5e:78:
67:12:b7:32:3e:f1:52:02:a7:a6:01:fb:0f:1b:59:46:bb:41:
d4:e2:e1:b7:b2:e8:22:97:b1:04:83:f9:eb:c8:a3:19:af:25:
35:33:6d:be:0f:31:f3:85:b8:d6:2f:36:9c:03:f4:21:a6:14:
70:64:bf:fc:4c:e4:dd:98:53:da:28:19:91:63:62:5b:b6:07:
75:d5:ec:0c
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICEfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI3NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBQkUxMkJGNjU3RDM2
NTIxOUI1N0U1QUJBNjM2MjE0RTVFN0MzMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiL/846ziKFGSCZwwZmoczeLoPhdadqgvrTpWafrc8mv1hwI/6
2GlXe2Wqzsil83Mr7iu/JbgpvmMAWqTvrm8Q6y1d9WkNhQvk0mg+iKp3gVAqkCUM
qdX8jGsgnAoroK27PV+p+IvjTVKfJCLCxbCqSXI3oLvKzc0uxwVG7qrjY+qWFwHh
UlV0YA0nZgDTsVN1nP+8tOAM5sCNQG3AHu8zhAG2abBYAoR1GFwgC9G4o8yXWVkh
l3o3MtfsOcziRbULagAZS3FtD0J1fuc+Q/kjPACjZwIykuTjoWUZChFZREBo7gQe
PpBZ7merSUI+07ksix5F1F/vPjefbnoIe845AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUWr4Sv2V9NlIZtX5aumNiFOXnwxMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1dyNFN2MlY5TmxJWnRYNWF1bU5pRk9Y
bnd4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAeGAjgAw
DQYJKoZIhvcNAQELBQADggEBAFXrJ9WnC7vwPlhWD8Gmouhox/QnwsSEj9MWRJin
J+tdr2pHqWkVRJZ+rhKpDAiarOPtzLGAsum+c3QC8FkRxOpjwX912OdUPtSt9igh
bEG+UkuMj+l/WiwRw6PwimpMctU0VJxdwIVs9mvdnDv8W+RjtOuSIS8j4o9ElyHU
3pvZ9hul8Q/eJJc+ieSE0t7ckUBhxgwz6Do7fpaj4a9FDwC/ZN9bOy57uWWfhXkb
YOpW/pxeeGcStzI+8VICp6YB+w8bWUa7QdTi4bey6CKXsQSD+evIoxmvJTUzbb4P
MfOFuNYvNpwD9CGmFHBkv/xM5N2YU9ooGZFjYlu2B3XV7Aw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:47 2025 by rpki-client