Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa
File: z80KwdLzHXQsrRS4TQivhS8zbx8.roa (raw, json)
Hash identifier: af0c5cyUwe7id25FQ1Bw4O4Qg6ZaJCoPbHaeNl+cDpE=
Subject key identifier: CF:CD:0A:C1:D2:F3:1D:74:2C:AD:14:B8:4D:08:AF:85:2F:33:6F:1F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 128A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa
Signing time: Mon 10 Feb 2025 14:28:32 +0000
ROA not before: Mon 10 Feb 2025 14:28:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 218.35.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CFCD0AC1D2F31D742CAD14B84D08AF852F336F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:a2:c7:c0:de:21:76:56:4b:cb:19:46:fd:
ef:f2:1e:b2:33:e7:b6:17:fb:a2:f2:0b:c3:ce:41:
e5:3f:7e:c0:d8:b6:f7:68:30:f1:5a:cb:0b:5f:ba:
31:86:eb:6c:bc:43:05:d0:d4:9f:12:b4:4e:d2:58:
b8:83:50:39:d7:26:4e:4c:f1:fc:fc:84:2b:fa:13:
b7:c0:f3:94:40:24:f1:63:d4:3f:cc:cf:05:ab:eb:
72:01:e6:23:8e:d9:2e:64:13:b0:06:45:de:d0:6a:
48:ca:75:36:ca:fd:35:a3:45:8e:d0:88:ae:2a:d0:
23:42:1a:ab:94:40:7f:ff:3f:a4:7a:c9:ea:c0:2b:
a6:16:82:08:5c:e6:12:58:c6:eb:3e:c2:63:36:7d:
42:06:18:00:fc:d8:8b:cf:13:97:2c:85:0d:73:ea:
78:1a:d9:25:96:bd:4b:fb:d4:4b:4b:de:ce:11:eb:
bb:6a:24:b4:5c:e9:cf:66:26:df:cd:90:6f:3a:ca:
1b:12:d6:9a:e9:85:36:7d:95:e3:fb:1c:5b:f8:d0:
5b:c4:04:01:e6:c5:0d:d3:2f:59:ef:72:37:83:ad:
c3:5c:71:55:3a:21:60:d4:c6:e6:68:79:b6:27:19:
6c:ee:31:24:cd:47:52:f6:26:c6:a0:86:e6:be:31:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:0A:C1:D2:F3:1D:74:2C:AD:14:B8:4D:08:AF:85:2F:33:6F:1F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z80KwdLzHXQsrRS4TQivhS8zbx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.16.0/21
Signature Algorithm: sha256WithRSAEncryption
70:88:89:2f:55:1e:29:f3:5a:4f:2a:5c:3d:0a:d4:33:b1:64:
6f:4c:5a:de:7b:a7:fe:84:7d:19:f5:93:43:5b:af:b7:83:0c:
a7:bc:47:c3:34:5d:d5:27:31:97:13:37:88:78:2d:e6:b0:5b:
d0:ea:88:e6:6e:e5:89:cb:05:ab:83:3d:d8:2d:fd:b8:91:c6:
7e:0c:38:52:8f:e2:2f:59:04:d1:0b:f1:d2:c5:c2:46:6f:04:
50:23:cb:6e:70:47:12:92:74:0e:3e:13:14:0a:d3:51:6d:cd:
35:25:c4:3c:db:0a:62:45:94:f5:18:5b:01:c4:47:18:51:26:
07:2d:28:60:d1:7c:ea:c0:6d:8c:4c:d9:87:b1:f9:8c:74:52:
2f:cd:fa:15:e6:0f:7a:b3:57:b7:31:fa:0f:e9:65:a0:45:da:
d0:03:d1:4e:70:5d:6b:96:28:51:3e:0d:78:b9:ee:3a:88:13:
e4:ba:cc:df:4b:05:16:42:54:c2:8c:34:c1:c0:52:ff:7f:3f:
2b:2f:e3:48:c9:1e:94:21:71:93:9c:db:b8:70:da:15:64:9a:
1f:55:24:8a:91:60:cb:ca:74:88:04:17:f7:4e:5b:c1:bd:43:
1b:fc:1c:23:9f:8c:17:8c:dd:44:08:00:29:4c:c9:d4:2a:69:
8b:4a:12:d7
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTAyMTAx
NDI4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGQ0QwQUMxRDJGMzFE
NzQyQ0FEMTRCODREMDhBRjg1MkYzMzZGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk9aLHwN4hdlZLyxlG/e/yHrIz57YX+6LyC8POQeU/fsDYtvdo
MPFaywtfujGG62y8QwXQ1J8StE7SWLiDUDnXJk5M8fz8hCv6E7fA85RAJPFj1D/M
zwWr63IB5iOO2S5kE7AGRd7QakjKdTbK/TWjRY7QiK4q0CNCGquUQH//P6R6yerA
K6YWgghc5hJYxus+wmM2fUIGGAD82IvPE5cshQ1z6nga2SWWvUv71EtL3s4R67tq
JLRc6c9mJt/NkG86yhsS1prphTZ9leP7HFv40FvEBAHmxQ3TL1nvcjeDrcNccVU6
IWDUxuZoebYnGWzuMSTNR1L2Jsaghua+MQOVAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUz80KwdLzHXQsrRS4TQivhS8zbx8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3o4MEt3ZEx6SFhRc3JSUzRUUWl2aFM4
emJ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaIxAwDQYJ
KoZIhvcNAQELBQADggEBAHCIiS9VHinzWk8qXD0K1DOxZG9MWt57p/6EfRn1k0Nb
r7eDDKe8R8M0XdUnMZcTN4h4LeawW9DqiOZu5YnLBauDPdgt/biRxn4MOFKP4i9Z
BNEL8dLFwkZvBFAjy25wRxKSdA4+ExQK01FtzTUlxDzbCmJFlPUYWwHERxhRJgct
KGDRfOrAbYxM2Yex+Yx0Ui/N+hXmD3qzV7cx+g/pZaBF2tAD0U5wXWuWKFE+DXi5
7jqIE+S6zN9LBRZCVMKMNMHAUv9/Pysv40jJHpQhcZOc27hw2hVkmh9VJIqRYMvK
dIgEF/dOW8G9Qxv8HCOfjBeM3UQIAClMydQqaYtKEtc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:48:37 2025 by rpki-client