Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa
File: 6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa (raw, json)
Hash identifier: VQJsdHL3R9mn4n9Ze8N81vGAzOXZ7N3h33WM5dS6EeI=
Subject key identifier: E8:61:AF:C0:15:1F:17:1C:35:9D:20:B0:85:BF:48:24:E8:E2:1F:37
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0EB7
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa
Signing time: Mon 10 Feb 2025 13:59:48 +0000
ROA not before: Mon 10 Feb 2025 13:59:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38843
IP address blocks: 124.150.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3767 (0xeb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Feb 10 13:59:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E861AFC0151F171C359D20B085BF4824E8E21F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:6a:e0:ac:10:92:14:61:23:2b:3c:fe:f5:
51:8f:29:fa:da:af:40:2d:71:78:68:5d:1c:88:ef:
d6:80:55:5c:99:47:32:68:34:2a:5f:ae:21:80:a1:
83:b4:76:d0:04:7e:10:1b:be:d6:c0:a9:58:64:04:
6b:ec:a6:d0:bf:a8:94:b0:b9:29:9a:c6:dc:39:b8:
c7:6f:08:14:f5:86:d7:f9:c8:fe:2d:c8:08:40:07:
79:f9:a3:df:c1:fb:fe:0b:40:96:a0:8f:86:a5:a1:
ec:f5:61:77:8e:aa:31:1d:fa:3b:8c:64:36:60:56:
77:78:6c:59:5e:d8:02:00:a9:ed:e0:e0:a5:d6:d3:
4e:06:09:43:cb:6d:e4:6d:f0:1a:ad:43:ac:8a:0e:
51:eb:0b:c6:76:a0:06:3f:32:bc:ef:7c:5f:98:99:
4d:e2:f3:fe:eb:f3:e5:da:dc:45:84:4b:ec:2c:55:
86:1f:d7:b9:09:fb:2f:56:f4:ba:a2:ee:31:04:60:
66:f2:1d:a9:f8:e2:24:95:04:36:0d:2c:38:52:a9:
29:8d:db:c2:2e:b5:04:54:10:80:cc:cb:30:85:2c:
5e:69:31:58:c7:1f:9f:42:95:ba:00:d0:16:79:9c:
25:bc:8c:2b:b4:f7:59:29:26:d8:17:25:d3:65:01:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:AF:C0:15:1F:17:1C:35:9D:20:B0:85:BF:48:24:E8:E2:1F:37
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/6GGvwBUfFxw1nSCwhb9IJOjiHzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:b2:de:a5:44:d3:eb:cd:e3:a8:17:d1:9f:c6:ef:26:e2:bf:
2f:58:b3:f1:f0:5a:41:89:52:d8:c0:c3:8d:7e:c0:15:9d:af:
84:9e:55:ec:d2:61:b0:40:22:25:e5:b7:88:62:fc:6b:39:b4:
94:5d:12:58:91:46:02:5d:c1:2c:ae:39:fd:0c:06:11:1d:7f:
a3:62:14:da:5c:dc:9a:45:a4:60:11:a6:fb:7b:96:48:b5:e8:
f6:c3:7a:fe:e9:fe:3b:96:47:5a:73:14:18:28:98:80:46:cc:
bf:5e:64:c3:e3:c4:c5:83:98:9b:67:01:07:28:4c:c9:37:79:
4b:75:6b:1f:e8:92:64:21:7e:8e:87:4f:51:ab:04:fa:7e:d9:
d9:22:c5:e0:89:a8:ac:63:3e:52:69:3f:5b:d2:11:01:65:36:
10:c9:87:b0:7c:b9:8c:c5:74:79:ef:87:8f:17:63:e5:a9:95:
57:53:bb:14:44:65:64:b8:e3:e0:d7:ed:5f:24:84:c8:dc:ee:
07:40:1a:de:03:9e:bf:62:7c:5f:30:9d:7b:1d:de:bc:65:bb:
4a:44:d7:b2:a5:e9:56:6b:40:73:d8:39:d2:d9:4a:50:c1:fb:
60:ea:4d:d3:ae:c5:5f:34:b2:a9:21:bc:a6:79:7a:a6:bc:9f:
e8:ae:83:04
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNTAyMTAx
MzU5NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4NjFBRkMwMTUxRjE3
MUMzNTlEMjBCMDg1QkY0ODI0RThFMjFGMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+xGrgrBCSFGEjKzz+9VGPKfrar0AtcXhoXRyI79aAVVyZRzJo
NCpfriGAoYO0dtAEfhAbvtbAqVhkBGvsptC/qJSwuSmaxtw5uMdvCBT1htf5yP4t
yAhAB3n5o9/B+/4LQJagj4aloez1YXeOqjEd+juMZDZgVnd4bFle2AIAqe3g4KXW
004GCUPLbeRt8BqtQ6yKDlHrC8Z2oAY/MrzvfF+YmU3i8/7r8+Xa3EWES+wsVYYf
17kJ+y9W9Lqi7jEEYGbyHan44iSVBDYNLDhSqSmN28IutQRUEIDMyzCFLF5pMVjH
H59ClboA0BZ5nCW8jCu091kpJtgXJdNlAYtxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6GGvwBUfFxw1nSCwhb9IJOjiHzcwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vNkdHdndCVWZGeHcxblNDd2hiOUlK
T2ppSHpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnyWhDAN
BgkqhkiG9w0BAQsFAAOCAQEAKrLepUTT683jqBfRn8bvJuK/L1iz8fBaQYlS2MDD
jX7AFZ2vhJ5V7NJhsEAiJeW3iGL8azm0lF0SWJFGAl3BLK45/QwGER1/o2IU2lzc
mkWkYBGm+3uWSLXo9sN6/un+O5ZHWnMUGCiYgEbMv15kw+PExYOYm2cBByhMyTd5
S3VrH+iSZCF+jodPUasE+n7Z2SLF4ImorGM+Umk/W9IRAWU2EMmHsHy5jMV0ee+H
jxdj5amVV1O7FERlZLjj4NftXySEyNzuB0Aa3gOev2J8XzCdex3evGW7SkTXsqXp
VmtAc9g50tlKUMH7YOpN067FXzSyqSG8pnl6pryf6K6DBA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:28 2025 by rpki-client