Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa
File: oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa (raw, json)
Hash identifier: oHd2p3sbuHiEjiTPZJ0trjJwBeFsS4U8XY9mIcV5ZNA=
Subject key identifier: A0:AC:CC:5F:A7:46:09:BE:22:C3:EF:E5:18:1B:C5:AE:AD:73:5D:10
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0FFA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa
Signing time: Mon 26 Aug 2024 05:15:57 +0000
ROA not before: Mon 26 Aug 2024 05:15:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24155
IP address blocks: 210.63.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4090 (0xffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:15:57 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A0ACCC5FA74609BE22C3EFE5181BC5AEAD735D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:ed:28:7e:9b:72:bf:ed:82:3c:b8:67:79:
b7:f9:53:7c:8c:e7:0d:17:8a:c2:20:e9:48:7e:63:
48:44:f3:04:e1:2e:d7:dd:da:ba:53:a2:50:24:f3:
ad:18:32:6d:8f:39:d3:3b:82:65:df:f1:59:7c:8c:
fc:25:02:2d:21:97:31:64:f9:bd:2c:e1:ec:8f:2f:
65:a9:30:fa:e4:dd:14:6e:8d:86:85:c6:ed:d4:aa:
6c:7a:ef:86:ed:10:fa:65:4f:ca:ca:21:33:38:eb:
e4:b3:91:7f:f3:0d:9e:70:48:84:66:21:f3:38:a8:
77:e5:f5:4b:c0:c4:e9:65:cb:f6:02:b3:09:b6:ce:
18:48:f4:70:db:d2:7c:33:e8:78:87:0e:e2:22:0e:
a8:3a:86:df:7d:e6:f3:98:d2:00:1e:d2:d5:b2:3e:
b3:c9:97:50:d2:88:dd:3f:f7:44:b7:67:80:1b:26:
a8:09:f3:68:a6:14:30:ba:4f:6c:a2:7a:91:91:87:
7f:76:29:21:0c:cb:af:b2:9e:69:0d:32:99:7d:79:
dc:92:54:fc:84:25:44:b0:f0:e8:b9:8b:c2:5a:78:
db:3c:b5:4a:28:bb:a1:90:8c:cf:c8:c9:6a:85:47:
7a:28:9c:bd:c0:d5:97:ce:7a:45:b1:68:d4:4e:fb:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:CC:5F:A7:46:09:BE:22:C3:EF:E5:18:1B:C5:AE:AD:73:5D:10
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.224.0/21
Signature Algorithm: sha256WithRSAEncryption
61:0d:a0:38:d0:9c:40:e6:e5:0e:8b:d9:57:82:07:77:eb:c6:
26:2e:7a:86:bc:ca:8c:8a:21:17:05:7c:f3:cd:6c:35:8c:fd:
6a:99:b3:f8:67:5a:f9:c0:17:61:6a:9c:27:63:6b:77:a6:c0:
1a:bb:a5:85:3a:25:20:fe:b3:47:70:41:f6:d9:05:98:a0:11:
30:32:c4:fc:97:1e:26:f5:cb:e8:f3:d2:eb:4f:3c:ea:c4:bf:
28:0a:b8:8a:d6:eb:ea:d8:3c:a0:4f:cb:69:34:08:fa:de:ac:
64:fe:7b:d9:89:14:fb:12:bb:90:4d:ee:ce:54:73:32:44:45:
51:c4:9d:1a:36:ab:a5:01:55:2d:fc:c4:6d:2b:2b:02:9d:7d:
00:85:c9:1e:c5:ed:fd:3d:ff:26:5c:d1:f1:7f:b9:53:26:63:
57:ea:8a:42:65:73:83:e5:74:b2:a6:db:6f:d2:94:42:b4:87:
d3:5e:79:df:68:ab:40:88:8d:6a:73:7d:25:09:e6:48:9b:3e:
36:b2:6f:70:4c:b6:d5:df:5d:8a:31:99:e7:1c:3e:85:ab:97:
b2:17:42:6c:80:d7:dc:a0:b9:ca:15:34:3d:a6:d9:58:79:c8:
c7:1e:db:b7:50:5a:9e:b0:f7:20:57:93:8f:64:fe:5c:d4:22:
7b:7b:c0:2c
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICD/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE1NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwQUNDQzVGQTc0NjA5
QkUyMkMzRUZFNTE4MUJDNUFFQUQ3MzVEMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrnO0ofptyv+2CPLhnebf5U3yM5w0XisIg6Uh+Y0hE8wThLtfd
2rpTolAk860YMm2POdM7gmXf8Vl8jPwlAi0hlzFk+b0s4eyPL2WpMPrk3RRujYaF
xu3Uqmx674btEPplT8rKITM46+SzkX/zDZ5wSIRmIfM4qHfl9UvAxOlly/YCswm2
zhhI9HDb0nwz6HiHDuIiDqg6ht995vOY0gAe0tWyPrPJl1DSiN0/90S3Z4AbJqgJ
82imFDC6T2yiepGRh392KSEMy6+ynmkNMpl9edySVPyEJUSw8Oi5i8JaeNs8tUoo
u6GQjM/IyWqFR3oonL3A1ZfOekWxaNRO+3P9AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUoKzMX6dGCb4iw+/lGBvFrq1zXRAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL29Lek1YNmRHQ2I0aXctX2xHQnZGcnEx
elhSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP+AwDQYJ
KoZIhvcNAQELBQADggEBAGENoDjQnEDm5Q6L2VeCB3frxiYueoa8yoyKIRcFfPPN
bDWM/WqZs/hnWvnAF2FqnCdja3emwBq7pYU6JSD+s0dwQfbZBZigETAyxPyXHib1
y+jz0utPPOrEvygKuIrW6+rYPKBPy2k0CPrerGT+e9mJFPsSu5BN7s5UczJERVHE
nRo2q6UBVS38xG0rKwKdfQCFyR7F7f09/yZc0fF/uVMmY1fqikJlc4PldLKm22/S
lEK0h9Need9oq0CIjWpzfSUJ5kibPjayb3BMttXfXYoxmeccPoWrl7IXQmyA19yg
ucoVND2m2Vh5yMce27dQWp6w9yBXk49k/lzUInt7wCw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:48 2025 by rpki-client