Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa
File: YVmqsNS1O_a2acCQayNemHUXSx8.roa (raw, json)
Hash identifier: Q6qcZq36JMeLfAjQjofL23gr9MFXvMOHvKIFfsp3M1Y=
Subject key identifier: 61:59:AA:B0:D4:B5:3B:F6:B6:69:C0:90:6B:23:5E:98:75:17:4B:1F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 11DF
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa
Signing time: Mon 10 Feb 2025 14:27:49 +0000
ROA not before: Mon 10 Feb 2025 14:27:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9674
IP address blocks: 39.8.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4575 (0x11df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6159AAB0D4B53BF6B669C0906B235E9875174B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:95:00:f7:73:fe:b4:79:96:94:2a:19:f0:
ca:99:81:00:e6:39:e3:14:22:2a:cf:87:33:b2:24:
86:e5:46:77:6a:37:c7:46:d9:5d:50:90:c3:41:dc:
60:4e:79:9e:1b:29:4f:74:13:74:13:20:96:0a:06:
3c:1c:c4:de:2c:a4:d7:84:d5:09:5a:fe:5b:5a:de:
f4:b9:8b:1a:ea:47:ed:e3:0e:a7:8b:c0:01:f5:c7:
52:e0:fe:4e:83:0e:6b:97:96:b6:96:84:fa:6d:8a:
1d:77:78:18:31:6f:bc:58:e9:73:2f:52:f3:88:1e:
0b:21:7c:5f:81:54:9c:52:97:32:54:e5:0c:b9:8f:
20:c7:49:5d:30:79:ce:cb:2e:80:8f:bc:1c:38:5f:
62:7e:ee:c9:61:49:f8:7e:20:eb:18:23:85:26:9f:
39:ab:16:c3:99:2f:10:7e:b3:1c:14:91:44:0b:fe:
d1:56:ed:9a:19:3f:2b:70:60:e3:36:0f:7c:01:d6:
3a:53:d4:ad:2a:e7:d8:5b:47:13:06:27:ac:c0:3c:
ff:6a:36:6a:d1:3f:a3:06:de:f2:6a:18:36:26:b8:
c0:95:6b:58:b2:d6:c0:b3:af:59:eb:40:44:ad:7c:
13:41:56:44:f3:09:4f:26:b4:1c:f8:27:67:7f:6b:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:AA:B0:D4:B5:3B:F6:B6:69:C0:90:6B:23:5E:98:75:17:4B:1F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YVmqsNS1O_a2acCQayNemHUXSx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.8.0.0/13
Signature Algorithm: sha256WithRSAEncryption
03:09:8f:1e:2a:dc:d4:5b:ec:a8:79:a9:90:29:af:9d:56:5b:
15:c1:f4:13:b4:66:8b:fa:4b:bb:34:77:93:99:c6:d1:8a:0b:
c7:62:e9:fc:a8:f3:c7:fa:a3:b3:63:0e:09:e6:5a:dc:b8:bb:
8a:e2:21:2b:37:87:2f:e6:a7:8e:52:80:ad:d0:e3:5d:1d:dc:
d4:bb:32:d2:aa:3d:be:e4:c3:89:89:79:f5:c2:96:83:ce:6d:
1e:2a:4b:f7:d8:1a:d4:1a:77:73:13:2e:9c:83:9a:9c:0b:bc:
11:8f:90:7d:a3:64:6b:29:cd:bb:84:b0:28:fa:5d:b9:7f:5e:
46:51:4b:b0:8c:e8:c4:94:18:5e:ad:5e:37:c0:00:10:68:4f:
e1:5e:0d:dd:d7:ba:6d:3c:c4:24:81:14:f5:08:e2:f8:c3:34:
ef:18:93:9a:0f:d2:e2:fb:df:ed:c4:16:18:c5:f0:66:37:ec:
8e:cf:cc:44:89:4b:a5:80:8d:50:86:2b:ce:1b:2f:19:3d:04:
03:cf:41:b7:e9:e7:30:01:22:f5:6a:14:4d:28:43:82:1c:12:
24:8c:f3:18:6e:7c:92:e6:0a:c0:f0:3b:04:4b:52:f0:cb:a8:
30:64:31:0b:2b:67:5c:42:29:f7:e5:40:fa:d8:80:0f:ac:77:
8d:04:3a:91
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI3NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxNTlBQUIwRDRCNTNC
RjZCNjY5QzA5MDZCMjM1RTk4NzUxNzRCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvm5UA93P+tHmWlCoZ8MqZgQDmOeMUIirPhzOyJIblRndqN8dG
2V1QkMNB3GBOeZ4bKU90E3QTIJYKBjwcxN4spNeE1Qla/lta3vS5ixrqR+3jDqeL
wAH1x1Lg/k6DDmuXlraWhPptih13eBgxb7xY6XMvUvOIHgshfF+BVJxSlzJU5Qy5
jyDHSV0wec7LLoCPvBw4X2J+7slhSfh+IOsYI4UmnzmrFsOZLxB+sxwUkUQL/tFW
7ZoZPytwYOM2D3wB1jpT1K0q59hbRxMGJ6zAPP9qNmrRP6MG3vJqGDYmuMCVa1iy
1sCzr1nrQEStfBNBVkTzCU8mtBz4J2d/a2EtAgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQUYVmqsNS1O/a2acCQayNemHUXSx8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1lWbXFzTlMxT19hMmFjQ1FheU5lbUhV
WFN4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwMnCDANBgkq
hkiG9w0BAQsFAAOCAQEAAwmPHirc1FvsqHmpkCmvnVZbFcH0E7Rmi/pLuzR3k5nG
0YoLx2Lp/Kjzx/qjs2MOCeZa3Li7iuIhKzeHL+anjlKArdDjXR3c1Lsy0qo9vuTD
iYl59cKWg85tHipL99ga1Bp3cxMunIOanAu8EY+QfaNkaynNu4SwKPpduX9eRlFL
sIzoxJQYXq1eN8AAEGhP4V4N3de6bTzEJIEU9Qji+MM07xiTmg/S4vvf7cQWGMXw
Zjfsjs/MRIlLpYCNUIYrzhsvGT0EA89Bt+nnMAEi9WoUTShDghwSJIzzGG58kuYK
wPA7BEtS8MuoMGQxCytnXEIp9+VA+tiAD6x3jQQ6kQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:15 2025 by rpki-client