Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/-9vGmeeNefwndf0Q0x8_kteaypg.roa
File: -9vGmeeNefwndf0Q0x8_kteaypg.roa (raw, json)
Hash identifier: up6xWUJHdV8qrNym8bM0KEnsJ0dOWDa8t/NW2uUCVLk=
Subject key identifier: FB:DB:C6:99:E7:8D:79:FC:27:75:FD:10:D3:1F:3F:92:D7:9A:CA:98
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D0A
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-9vGmeeNefwndf0Q0x8_kteaypg.roa
Signing time: Mon 10 Feb 2025 14:02:28 +0000
ROA not before: Mon 10 Feb 2025 14:02:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 39.1.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FBDBC699E78D79FC2775FD10D31F3F92D79ACA98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:4c:2b:96:18:e5:ef:4b:35:62:50:4e:11:
00:2a:4e:a4:1a:84:89:03:7a:da:69:5c:20:b4:09:
4a:42:69:6f:72:b9:89:dd:f3:45:66:cd:6a:3b:a9:
18:29:d7:61:ce:bc:1c:32:22:69:03:a6:95:e9:f7:
86:31:b3:ad:88:48:98:d5:97:d8:9c:52:94:ca:5e:
99:78:1a:94:2e:24:6c:e4:a2:14:99:7e:d5:ac:85:
9f:62:2f:ed:97:a7:e5:61:b6:8d:ad:e1:5f:77:ef:
06:87:ec:d7:25:2f:11:fa:5e:3e:08:e4:08:83:eb:
1b:63:2b:02:40:99:54:f5:14:b7:4e:04:58:54:e9:
38:03:2c:3e:98:57:10:c5:8e:7a:8f:45:d5:e9:2a:
15:02:69:74:7b:0c:3a:27:d2:66:69:49:40:72:3a:
f7:4c:2d:97:15:9e:ff:f5:16:96:38:59:88:dd:2c:
2a:bc:37:90:98:e2:74:ad:8e:33:14:8b:ce:bc:76:
a5:54:03:cb:17:c3:2f:90:8f:ae:c4:41:bb:8d:c9:
e3:e7:7f:28:3e:76:1e:05:1f:74:70:26:65:61:f4:
db:9e:92:da:d8:e8:f8:cd:cb:16:71:2c:4d:63:0d:
9d:49:19:d7:9c:0d:42:51:ba:b0:e4:79:b4:a3:6d:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DB:C6:99:E7:8D:79:FC:27:75:FD:10:D3:1F:3F:92:D7:9A:CA:98
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/-9vGmeeNefwndf0Q0x8_kteaypg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.46.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:35:fe:d2:08:05:71:53:b9:7a:a8:54:07:55:09:63:9f:14:
ca:eb:de:0a:45:07:bb:ea:b3:78:86:89:c4:18:9e:be:08:bf:
45:02:69:4d:27:db:37:96:b3:f7:39:af:4f:86:9d:0c:7f:61:
18:10:da:52:17:83:8a:60:de:c7:3b:e0:c6:32:10:d0:c9:8d:
9b:80:76:27:5d:c3:81:2c:9f:5f:b7:2c:7e:fa:18:60:63:14:
88:d9:1a:96:90:67:2a:ff:7a:11:08:86:53:d7:9b:ef:0b:4e:
7c:0f:e0:6a:f4:58:5f:0b:2f:be:bf:5f:90:05:14:db:7c:c4:
1c:1a:f0:99:83:34:ec:24:f2:69:cc:eb:6c:ab:f2:54:60:ae:
3f:80:81:8d:ac:ed:7b:04:56:16:53:12:69:43:73:5b:5b:0a:
96:ac:68:30:f5:df:a4:bf:22:19:23:a2:d2:21:63:5c:38:64:
f2:7b:b2:7e:61:4d:79:f9:7b:24:c5:33:c1:c9:30:d9:a1:56:
2c:87:98:0f:26:64:c4:9d:06:06:74:0c:2e:45:b1:9e:c2:a9:
d0:2f:a6:97:80:2e:51:c9:d2:ce:17:57:16:37:45:98:c9:5e:
f5:58:8d:3a:f3:e9:04:2a:e7:e6:d6:fc:18:f2:99:8e:d4:ac:
b7:88:57:10
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx
NDAyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZCREJDNjk5RTc4RDc5
RkMyNzc1RkQxMEQzMUYzRjkyRDc5QUNBOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgpEwrlhjl70s1YlBOEQAqTqQahIkDetppXCC0CUpCaW9yuYnd
80VmzWo7qRgp12HOvBwyImkDppXp94Yxs62ISJjVl9icUpTKXpl4GpQuJGzkohSZ
ftWshZ9iL+2Xp+Vhto2t4V937waH7NclLxH6Xj4I5AiD6xtjKwJAmVT1FLdOBFhU
6TgDLD6YVxDFjnqPRdXpKhUCaXR7DDon0mZpSUByOvdMLZcVnv/1FpY4WYjdLCq8
N5CY4nStjjMUi868dqVUA8sXwy+Qj67EQbuNyePnfyg+dh4FH3RwJmVh9NuektrY
6PjNyxZxLE1jDZ1JGdecDUJRurDkebSjbYyNAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU+9vGmeeNefwndf0Q0x8/kteaypgwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC8tOXZHbWVlTmVmd25kZjBRMHg4
X2t0ZWF5cGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJwEu
MA0GCSqGSIb3DQEBCwUAA4IBAQAeNf7SCAVxU7l6qFQHVQljnxTK694KRQe76rN4
honEGJ6+CL9FAmlNJ9s3lrP3Oa9Php0Mf2EYENpSF4OKYN7HO+DGMhDQyY2bgHYn
XcOBLJ9ftyx++hhgYxSI2RqWkGcq/3oRCIZT15vvC058D+Bq9FhfCy++v1+QBRTb
fMQcGvCZgzTsJPJpzOtsq/JUYK4/gIGNrO17BFYWUxJpQ3NbWwqWrGgw9d+kvyIZ
I6LSIWNcOGTye7J+YU15+XskxTPByTDZoVYsh5gPJmTEnQYGdAwuRbGewqnQL6aX
gC5RydLOF1cWN0WYyV71WI068+kEKufm1vwY8pmO1Ky3iFcQ
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:29 2025 by rpki-client