Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa
File: vzzvqKEyvPbO0vysYGBD8_4lVVI.roa (raw, json)
Hash identifier: WS/50W5hwCFltMIwUuhzUvb6kg2SKrSJB4i843fAhqI=
Subject key identifier: BF:3C:EF:A8:A1:32:BC:F6:CE:D2:FC:AC:60:60:43:F3:FE:25:55:52
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1011
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa
Signing time: Mon 26 Aug 2024 05:16:01 +0000
ROA not before: Mon 26 Aug 2024 05:16:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 124.218.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4113 (0x1011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BF3CEFA8A132BCF6CED2FCAC606043F3FE255552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:13:df:d0:c1:94:82:00:74:bf:1f:7a:28:
62:96:c5:d6:36:71:d3:1d:82:20:b9:51:75:14:2b:
d2:d7:a1:67:e6:e7:d3:33:72:f2:ec:ae:0a:db:09:
14:88:5b:9f:8a:2a:1f:48:18:a9:d3:49:a3:62:65:
7e:7c:93:97:1e:9e:d2:3e:94:65:5f:3b:93:7a:fb:
47:0e:fe:52:1d:34:39:10:bb:48:7d:79:1f:66:5f:
b5:29:b4:ec:90:b3:ab:03:b9:f3:fb:36:75:86:a2:
d9:bf:aa:81:a1:67:5b:75:ba:a6:a4:14:e1:a6:ca:
32:b1:21:19:02:9d:94:d1:94:4d:14:f8:c6:11:7c:
a8:c6:b6:bf:3a:92:5a:15:07:46:ce:74:3f:42:c1:
d4:b1:e5:8c:a7:81:35:16:6b:c9:7f:b8:ce:fc:e7:
d6:9a:65:db:88:2e:a8:ad:cc:2a:56:09:74:3d:54:
89:f9:ac:36:9b:e9:d3:31:b8:dd:b7:9a:aa:7a:23:
31:94:a8:e8:49:d7:fd:17:06:5f:b9:01:c8:a8:06:
b4:68:4e:ca:1e:4b:ae:1b:c9:cf:f4:c2:5a:a7:d7:
cd:de:53:71:43:f6:7e:be:1b:cd:34:5f:20:58:c2:
49:88:ba:b8:28:dd:86:cc:dd:50:dc:eb:96:9d:d0:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:EF:A8:A1:32:BC:F6:CE:D2:FC:AC:60:60:43:F3:FE:25:55:52
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:7d:a2:ff:54:72:57:28:ae:bb:94:e5:9f:2e:bf:70:89:2b:
35:64:ad:f2:21:00:6f:ae:2f:c1:79:8f:34:0b:69:8f:61:b5:
78:5b:2c:2e:95:8a:b9:21:fb:94:ce:6c:8c:63:43:e2:bf:46:
e3:f4:ee:72:81:7f:98:e8:a3:b4:90:72:c2:4c:19:c4:6b:9a:
d9:57:99:d0:dd:d5:28:a3:da:4f:55:20:90:0e:b8:67:5e:6a:
60:bd:f6:92:2f:5d:20:19:48:65:0c:6d:10:cb:31:11:17:e3:
75:78:a4:10:82:b6:5a:0e:6a:03:0d:07:7c:8f:a5:97:aa:7a:
d2:03:06:47:04:d4:bd:36:86:d6:6d:0f:39:83:bc:22:8f:98:
56:4c:28:d8:25:80:28:79:76:e7:93:5b:86:5e:ae:5d:10:87:
f8:cc:2c:1f:62:b4:99:3e:5e:7b:6b:15:72:de:04:c4:ac:ac:
84:34:ea:3c:0a:e3:28:9d:98:7f:05:9f:b8:1d:21:6c:53:56:
f1:86:f3:6a:70:7e:64:13:fb:df:d5:63:18:13:34:fd:27:ed:
78:cf:a5:76:43:6a:1b:47:b8:c2:fa:09:da:63:2e:50:0a:6c:
64:6d:c9:93:b5:18:eb:52:f3:82:38:54:8e:ee:62:a1:8e:9d:
33:89:97:24
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE2MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGM0NFRkE4QTEzMkJD
RjZDRUQyRkNBQzYwNjA0M0YzRkUyNTU1NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhtRPf0MGUggB0vx96KGKWxdY2cdMdgiC5UXUUK9LXoWfm59Mz
cvLsrgrbCRSIW5+KKh9IGKnTSaNiZX58k5centI+lGVfO5N6+0cO/lIdNDkQu0h9
eR9mX7UptOyQs6sDufP7NnWGotm/qoGhZ1t1uqakFOGmyjKxIRkCnZTRlE0U+MYR
fKjGtr86kloVB0bOdD9CwdSx5YyngTUWa8l/uM7859aaZduILqitzCpWCXQ9VIn5
rDab6dMxuN23mqp6IzGUqOhJ1/0XBl+5AcioBrRoTsoeS64byc/0wlqn183eU3FD
9n6+G800XyBYwkmIurgo3YbM3VDc65ad0JFBAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUvzzvqKEyvPbO0vysYGBD8/4lVVIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3Z6enZxS0V5dlBiTzB2eXNZR0JEOF80
bFZWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mAwDQYJ
KoZIhvcNAQELBQADggEBAI59ov9UclcorruU5Z8uv3CJKzVkrfIhAG+uL8F5jzQL
aY9htXhbLC6Virkh+5TObIxjQ+K/RuP07nKBf5joo7SQcsJMGcRrmtlXmdDd1Sij
2k9VIJAOuGdeamC99pIvXSAZSGUMbRDLMREX43V4pBCCtloOagMNB3yPpZeqetID
BkcE1L02htZtDzmDvCKPmFZMKNglgCh5dueTW4Zerl0Qh/jMLB9itJk+XntrFXLe
BMSsrIQ06jwK4yidmH8Fn7gdIWxTVvGG82pwfmQT+9/VYxgTNP0n7XjPpXZDahtH
uML6CdpjLlAKbGRtyZO1GOtS84I4VI7uYqGOnTOJlyQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:42:23 2025 by rpki-client