Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa
File: slHOVmWJPd5NObJVhx39xC4ZN_c.roa (raw, json)
Hash identifier: OPGfp28FY5DmsOk+D5iZaWpiVv8B4lN7yyaEbuqbHJE=
Subject key identifier: B2:51:CE:56:65:89:3D:DE:4D:39:B2:55:87:1D:FD:C4:2E:19:37:F7
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1187
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa
Signing time: Mon 10 Feb 2025 14:27:27 +0000
ROA not before: Mon 10 Feb 2025 14:27:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 22787
IP address blocks: 210.58.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4487 (0x1187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B251CE5665893DDE4D39B255871DFDC42E1937F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:b8:65:d9:fc:b5:a0:4b:22:26:5f:5f:06:
6c:c7:9f:e2:0f:7a:63:f1:01:65:4d:eb:8f:71:db:
a0:25:6c:14:11:12:1b:02:fa:e8:1b:ed:f3:68:9f:
ab:90:fb:b6:89:13:0b:90:58:dd:f0:74:e1:77:79:
20:80:01:fe:bf:41:a3:8c:0b:42:c3:3c:8c:12:a0:
2d:0a:42:cd:ab:db:50:fe:a6:32:08:87:32:77:ca:
66:30:ff:08:f3:72:fb:8b:62:14:13:2c:43:6f:e7:
b6:4c:8c:35:45:23:d6:4c:b5:aa:e6:bb:d7:e3:f0:
cd:7c:f8:90:72:d7:59:ae:9d:d5:4f:86:a7:da:cb:
8f:c3:4a:fd:a7:a5:30:2f:22:47:08:57:8b:5c:41:
df:c6:0d:21:c3:17:61:1f:4a:15:15:ac:4b:a6:59:
18:71:79:88:12:f4:a5:49:5e:ee:9f:1b:56:52:c1:
bc:41:04:e8:97:de:e2:5f:a5:19:eb:74:25:70:50:
20:eb:ea:7c:72:4f:fd:f7:97:00:71:09:67:63:c7:
70:41:1d:28:b0:05:d3:fc:c9:f8:c9:07:51:12:ad:
9d:b3:e8:5d:a4:79:eb:e5:2d:19:77:c2:c6:35:ff:
81:aa:d9:7f:aa:1f:cd:33:2f:27:80:a2:ed:75:9a:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:CE:56:65:89:3D:DE:4D:39:B2:55:87:1D:FD:C4:2E:19:37:F7
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/slHOVmWJPd5NObJVhx39xC4ZN_c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.90.0/23
Signature Algorithm: sha256WithRSAEncryption
95:7e:55:16:8b:b7:8d:ae:f6:26:14:c1:56:92:04:37:36:41:
e1:8c:98:61:56:26:fb:42:fe:64:c9:e1:53:5c:af:0f:a2:82:
7d:4a:ee:a4:58:c8:5a:3f:81:fc:83:4c:cf:ec:92:71:46:63:
1b:a1:c2:50:d0:0b:66:68:4f:60:3d:4e:56:1f:19:dd:e6:2f:
ab:eb:5a:d4:ea:b4:c8:5f:90:6d:61:bd:b4:dd:63:cb:c0:6b:
c4:a4:71:19:79:6d:cf:83:6f:d6:c0:ee:0f:a0:4f:0a:16:42:
92:99:05:29:00:77:bc:88:d8:7a:ef:a0:82:db:2c:15:43:fd:
77:77:20:2a:45:84:53:72:b4:08:a1:bf:7b:aa:8d:d7:27:54:
46:4f:3c:ae:89:5b:10:46:27:91:be:a3:83:18:e4:c7:e5:23:
dc:7b:fb:f4:87:fc:80:ab:98:45:94:74:8b:87:92:6b:f5:1c:
2f:9a:bd:3c:b0:00:29:3c:c4:46:e6:4a:18:81:8a:80:6a:66:
fd:51:25:e2:4a:1b:0c:af:34:ae:57:4d:0c:13:0d:93:84:a2:
c9:eb:4f:43:81:ca:a7:d9:52:b8:cd:24:90:85:4b:c4:7a:5a:
a5:fd:33:3d:19:13:3e:33:61:2e:6e:e3:85:9e:66:17:6f:e4:
ab:bf:61:6c
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI3MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyNTFDRTU2NjU4OTNE
REU0RDM5QjI1NTg3MURGREM0MkUxOTM3RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGCLhl2fy1oEsiJl9fBmzHn+IPemPxAWVN649x26AlbBQREhsC
+ugb7fNon6uQ+7aJEwuQWN3wdOF3eSCAAf6/QaOMC0LDPIwSoC0KQs2r21D+pjII
hzJ3ymYw/wjzcvuLYhQTLENv57ZMjDVFI9ZMtarmu9fj8M18+JBy11mundVPhqfa
y4/DSv2npTAvIkcIV4tcQd/GDSHDF2EfShUVrEumWRhxeYgS9KVJXu6fG1ZSwbxB
BOiX3uJfpRnrdCVwUCDr6nxyT/33lwBxCWdjx3BBHSiwBdP8yfjJB1ESrZ2z6F2k
eevlLRl3wsY1/4Gq2X+qH80zLyeAou11mgQ/AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUslHOVmWJPd5NObJVhx39xC4ZN/cwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3NsSE9WbVdKUGQ1Tk9iSlZoeDM5eEM0
Wk5fYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSOlowDQYJ
KoZIhvcNAQELBQADggEBAJV+VRaLt42u9iYUwVaSBDc2QeGMmGFWJvtC/mTJ4VNc
rw+ign1K7qRYyFo/gfyDTM/sknFGYxuhwlDQC2ZoT2A9TlYfGd3mL6vrWtTqtMhf
kG1hvbTdY8vAa8SkcRl5bc+Db9bA7g+gTwoWQpKZBSkAd7yI2HrvoILbLBVD/Xd3
ICpFhFNytAihv3uqjdcnVEZPPK6JWxBGJ5G+o4MY5MflI9x7+/SH/ICrmEWUdIuH
kmv1HC+avTywACk8xEbmShiBioBqZv1RJeJKGwyvNK5XTQwTDZOEosnrT0OByqfZ
UrjNJJCFS8R6WqX9Mz0ZEz4zYS5u44WeZhdv5Ku/YWw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:51:50 2025 by rpki-client