Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SutqDcXbhR5qOKlJ570y6yVWk_w.roa
File: SutqDcXbhR5qOKlJ570y6yVWk_w.roa (raw, json)
Hash identifier: RKklchv+inKq5I0fcWpSwk3A6tmWpLvUJzheHqB//ks=
Subject key identifier: 4A:EB:6A:0D:C5:DB:85:1E:6A:38:A9:49:E7:BD:32:EB:25:56:93:FC
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 136C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SutqDcXbhR5qOKlJ570y6yVWk_w.roa
Signing time: Mon 10 Feb 2025 14:09:27 +0000
ROA not before: Mon 10 Feb 2025 14:09:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 24158
IP address blocks: 203.105.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4972 (0x136c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 10 14:09:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4AEB6A0DC5DB851E6A38A949E7BD32EB255693FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:9c:4e:46:8e:06:96:fb:41:14:4d:e2:d4:
d2:26:20:f6:2a:b5:60:d4:39:e0:b6:dd:92:22:4d:
f1:ae:45:a1:c7:bc:1c:9d:9d:9f:2c:14:aa:95:4a:
97:e6:74:18:a8:ed:9b:3f:7e:c8:7e:30:99:ff:c1:
d9:c5:3e:76:db:a3:dd:d3:9d:b0:52:7a:95:8d:26:
09:e4:14:58:bb:39:14:8a:a8:bb:ea:62:b3:63:3e:
01:bf:29:77:10:02:4a:3c:ff:b0:c0:ae:43:fd:44:
6e:84:94:30:f6:ac:82:ff:51:6d:23:9e:38:9c:49:
12:ac:b7:02:04:ef:ca:c8:3c:0f:79:7e:39:f4:a5:
4a:70:e2:c9:0d:07:2a:af:46:31:53:bb:80:87:8f:
3f:07:18:a6:52:f6:69:9e:39:db:61:57:20:88:5b:
4a:f8:b2:64:d8:e3:c7:26:6c:7f:7f:5a:12:2e:30:
f0:20:cc:d8:d7:b7:ce:34:61:c4:db:b7:33:a7:c3:
b0:cd:40:e0:a8:cc:e1:5f:b2:2d:8c:6e:32:12:8a:
e0:e1:e9:48:50:54:86:4b:ea:de:03:d2:f4:a3:ae:
c9:80:73:36:c7:ab:c3:37:b0:54:d7:77:8c:56:09:
f6:0b:b0:d6:a3:21:25:c6:64:83:50:74:0b:01:76:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EB:6A:0D:C5:DB:85:1E:6A:38:A9:49:E7:BD:32:EB:25:56:93:FC
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SutqDcXbhR5qOKlJ570y6yVWk_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f5:c6:ef:79:1e:bb:12:c9:e1:4f:47:3d:a2:bc:d8:06:e2:
69:af:dd:be:3e:fd:2b:e8:26:e7:f7:41:2e:00:16:ff:0b:d5:
f3:77:13:69:35:6c:ca:9e:28:18:74:7a:33:f9:0c:06:ba:37:
c2:47:6e:15:24:cb:e4:9c:6b:0d:d7:ea:ab:85:44:ec:37:71:
18:5d:4a:a3:62:ca:c0:88:3f:d0:59:19:db:73:ee:2a:b2:a4:
6b:6d:cd:ad:e2:1a:3d:c6:3d:af:c1:7a:71:9e:36:23:58:56:
74:55:42:4b:35:5a:6d:0a:49:74:12:0e:51:86:cb:f0:d4:ca:
f6:fb:4d:1d:35:d3:dc:a6:3b:87:47:cc:a4:3b:05:21:2b:5d:
46:76:12:bf:18:af:d1:5c:82:3a:44:2f:ea:35:3b:28:3a:4f:
24:03:62:84:d9:c4:72:cc:4b:2b:01:15:5d:0d:ee:cb:5f:67:
a0:11:ae:1f:db:ad:79:c9:58:60:f1:a3:6d:30:df:35:20:9a:
55:50:e3:5d:ee:84:bc:ac:a0:70:69:42:2b:ab:47:fb:93:5a:
77:9b:a5:bc:0b:94:94:16:18:f9:f0:3e:16:89:97:86:19:32:
c5:b4:1f:54:40:aa:ff:73:33:3c:ca:de:83:29:bc:5a:61:b0:
9a:50:67:61
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICE2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx
NDA5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBRUI2QTBEQzVEQjg1
MUU2QTM4QTk0OUU3QkQzMkVCMjU1NjkzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMNJxORo4GlvtBFE3i1NImIPYqtWDUOeC23ZIiTfGuRaHHvByd
nZ8sFKqVSpfmdBio7Zs/fsh+MJn/wdnFPnbbo93TnbBSepWNJgnkFFi7ORSKqLvq
YrNjPgG/KXcQAko8/7DArkP9RG6ElDD2rIL/UW0jnjicSRKstwIE78rIPA95fjn0
pUpw4skNByqvRjFTu4CHjz8HGKZS9mmeOdthVyCIW0r4smTY48cmbH9/WhIuMPAg
zNjXt840YcTbtzOnw7DNQOCozOFfsi2MbjISiuDh6UhQVIZL6t4D0vSjrsmAczbH
q8M3sFTXd4xWCfYLsNajISXGZINQdAsBdiGDAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUSutqDcXbhR5qOKlJ570y6yVWk/wwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU3V0cURjWGJoUjVxT0ts
SjU3MHk2eVZXa193LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMtp7zANBgkqhkiG9w0BAQsFAAOCAQEAevXG73keuxLJ4U9HPaK82Abiaa/dvj79
K+gm5/dBLgAW/wvV83cTaTVsyp4oGHR6M/kMBro3wkduFSTL5JxrDdfqq4VE7Ddx
GF1Ko2LKwIg/0FkZ23PuKrKka23NreIaPcY9r8F6cZ42I1hWdFVCSzVabQpJdBIO
UYbL8NTK9vtNHTXT3KY7h0fMpDsFIStdRnYSvxiv0VyCOkQv6jU7KDpPJANihNnE
csxLKwEVXQ3uy19noBGuH9uteclYYPGjbTDfNSCaVVDjXe6EvKygcGlCK6tH+5Na
d5ulvAuUlBYY+fA+FomXhhkyxbQfVECq/3MzPMregym8WmGwmlBnYQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:08 2025 by rpki-client