Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa
File: OTOMgQUdUuAeP16rKCMRcquFLp8.roa (raw, json)
Hash identifier: fzdLcNB8dNQVgxkNHW431k2vxYRfPgicXosbG62ez4E=
Subject key identifier: 39:33:8C:81:05:1D:52:E0:1E:3F:5E:AB:28:23:11:72:AB:85:2E:9F
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0C82
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa
Signing time: Mon 10 Feb 2025 13:49:51 +0000
ROA not before: Mon 10 Feb 2025 13:49:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17710
IP address blocks: 150.107.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Feb 10 13:49:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39338C81051D52E01E3F5EAB28231172AB852E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:1c:39:f0:32:70:68:67:03:71:ea:58:69:
ff:b5:82:9f:1f:2c:f7:0a:b6:c8:61:71:c4:f3:aa:
34:fa:d7:d7:5b:c8:57:cb:da:58:68:ad:14:00:63:
e9:0c:55:35:bf:52:55:8a:6d:20:53:c6:85:d5:08:
f2:0c:a9:64:01:e7:a7:73:4d:b7:2c:82:9b:df:43:
03:de:19:1c:0c:15:0a:bb:67:3c:5c:6c:64:2d:b4:
de:53:66:7f:54:f9:8c:a9:a4:2f:08:a2:de:d9:9a:
47:a3:6e:be:c2:34:94:3f:2e:84:ce:5b:83:c8:8e:
b9:42:e7:28:d7:ee:ca:2d:0d:54:0a:8c:61:1f:16:
83:65:2c:a6:35:da:e9:35:fd:4e:c3:c5:8b:75:9f:
05:df:2b:00:fb:fc:cc:fc:90:34:63:06:9d:18:fc:
6d:6d:90:a1:0c:b3:a8:74:bf:dc:1a:8d:0a:37:92:
e6:67:92:63:94:b7:ff:87:1b:ac:09:dc:05:bb:37:
91:15:b4:43:3b:cc:65:83:8d:5f:be:17:26:52:37:
3a:7f:bb:90:1f:c7:a1:d8:46:89:57:f4:23:83:cc:
9f:38:81:4d:e7:15:71:aa:9a:5f:72:59:62:d7:46:
5f:e0:e0:c3:5b:2d:e9:a2:91:8e:f0:37:99:01:0f:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:8C:81:05:1D:52:E0:1E:3F:5E:AB:28:23:11:72:AB:85:2E:9F
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/OTOMgQUdUuAeP16rKCMRcquFLp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:e9:04:d5:3d:6c:5d:cf:b2:11:f4:ca:a0:5b:ec:d5:fe:47:
bf:da:ae:92:59:ef:bb:8a:5f:f1:c9:86:8e:f1:db:1c:b1:88:
8b:b3:3d:ac:19:1b:75:b4:f1:5b:31:a7:aa:77:b4:db:0f:4a:
07:b1:bb:31:2b:27:87:2d:38:7f:45:ed:5a:69:5f:f0:92:f2:
ac:b9:dc:14:2e:a9:60:26:07:ba:1f:46:ee:17:aa:f2:dd:68:
03:74:02:76:91:03:27:8f:49:9b:bf:9e:8b:99:40:34:5c:32:
62:ce:32:e3:87:09:98:c6:c2:eb:99:14:65:50:d5:4d:83:77:
ca:6d:2e:45:b9:b4:9e:3e:87:24:53:6b:ba:ba:f9:61:65:dc:
a6:fa:02:96:ae:29:e2:51:d6:ff:94:00:a4:7f:fd:fd:27:2a:
5c:2c:f9:a2:e4:da:05:df:8f:d9:9c:a3:08:39:1f:ab:27:8d:
19:1d:f2:64:e6:01:c5:63:d5:43:0e:63:c4:ce:c4:85:83:ae:
02:8a:e4:7b:8d:02:0c:4f:b0:88:94:86:f9:4a:8a:e5:3c:cb:
a8:b5:2d:9a:eb:85:f7:ce:f3:66:29:35:25:c2:75:81:a5:c8:
d9:32:c3:cc:9a:86:96:ab:43:b0:47:e8:5a:4c:fe:53:b5:50:
cd:81:41:2c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3
OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNTAyMTAx
MzQ5NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5MzM4QzgxMDUxRDUy
RTAxRTNGNUVBQjI4MjMxMTcyQUI4NTJFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdwRw58DJwaGcDcepYaf+1gp8fLPcKtshhccTzqjT619dbyFfL
2lhorRQAY+kMVTW/UlWKbSBTxoXVCPIMqWQB56dzTbcsgpvfQwPeGRwMFQq7Zzxc
bGQttN5TZn9U+YyppC8Iot7Zmkejbr7CNJQ/LoTOW4PIjrlC5yjX7sotDVQKjGEf
FoNlLKY12uk1/U7DxYt1nwXfKwD7/Mz8kDRjBp0Y/G1tkKEMs6h0v9wajQo3kuZn
kmOUt/+HG6wJ3AW7N5EVtEM7zGWDjV++FyZSNzp/u5Afx6HYRolX9CODzJ84gU3n
FXGqml9yWWLXRl/g4MNbLemikY7wN5kBD1CtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOTOMgQUdUuAeP16rKCMRcquFLp8wHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U
IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU
L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL09UT01nUVVkVXVBZVAxNnJL
Q01SY3F1RkxwOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKW
a0AwDQYJKoZIhvcNAQELBQADggEBAJ/pBNU9bF3PshH0yqBb7NX+R7/arpJZ77uK
X/HJho7x2xyxiIuzPawZG3W08Vsxp6p3tNsPSgexuzErJ4ctOH9F7VppX/CS8qy5
3BQuqWAmB7ofRu4XqvLdaAN0AnaRAyePSZu/nouZQDRcMmLOMuOHCZjGwuuZFGVQ
1U2Dd8ptLkW5tJ4+hyRTa7q6+WFl3Kb6ApauKeJR1v+UAKR//f0nKlws+aLk2gXf
j9mcowg5H6snjRkd8mTmAcVj1UMOY8TOxIWDrgKK5HuNAgxPsIiUhvlKiuU8y6i1
LZrrhffO82YpNSXCdYGlyNkyw8yahparQ7BH6FpM/lO1UM2BQSw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:05 2025 by rpki-client