Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa
File: 1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa (raw, json)
Hash identifier: Pnwt/0AUvScTQsmZ5xT4Q741teN+n9ewYhy8oteAKQA=
Subject key identifier: D5:4C:61:34:63:26:16:06:E3:A1:06:95:8C:28:CC:41:87:63:05:81
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0D06
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa
Signing time: Mon 10 Feb 2025 14:02:27 +0000
ROA not before: Mon 10 Feb 2025 14:02:27 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 39.1.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3334 (0xd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Feb 10 14:02:27 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D54C613463261606E3A106958C28CC4187630581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:34:15:55:1b:0a:5e:9a:51:45:cc:b4:d3:
7a:d2:95:38:13:83:ce:a6:e8:4f:28:fd:ba:fe:65:
a5:86:4d:03:41:41:df:7b:d9:27:9d:25:ef:1e:cf:
0b:60:a6:22:90:1e:09:6f:61:cb:12:48:14:16:cc:
08:8d:2b:cd:7f:4f:a5:95:55:7b:c8:ad:d7:7c:0f:
31:b8:2d:88:94:b3:04:7a:df:a2:94:f8:9a:aa:8f:
d2:4a:d8:ec:a0:54:f0:8e:b3:38:56:6a:28:9f:b5:
57:3a:95:19:a9:21:09:1d:c8:f1:4f:f6:4b:73:a4:
27:da:c4:76:29:f2:2f:ce:7f:ed:96:ac:53:83:aa:
fe:41:eb:7f:b5:36:27:79:bc:9a:54:5a:51:c9:37:
44:a2:4a:0c:1e:30:98:73:37:ec:10:e3:7f:34:d8:
f8:6d:5d:d8:c8:d8:9a:5a:8f:01:67:af:8d:96:21:
ff:1d:75:ce:bc:aa:a3:e6:13:2d:e7:e7:65:47:2d:
33:d9:f0:88:5f:71:65:c6:33:55:d7:e4:c5:6c:03:
5d:1f:18:49:32:0b:e4:e1:f5:1a:44:82:23:7e:96:
cb:35:53:5d:0c:5c:f4:0f:77:a7:6a:d8:64:6d:27:
22:76:44:a9:45:a5:78:b1:64:fb:7c:ee:1e:12:92:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:61:34:63:26:16:06:E3:A1:06:95:8C:28:CC:41:87:63:05:81
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
39.1.96.0/20
Signature Algorithm: sha256WithRSAEncryption
43:d3:4a:3e:2f:80:7a:85:88:3f:50:c7:06:82:21:a9:c8:78:
12:0a:e5:4f:68:42:a9:67:c6:47:32:a2:d2:82:ea:a8:8b:69:
9f:84:44:20:ac:a4:0f:b5:b9:a4:b6:de:11:e6:16:c2:13:31:
19:07:30:a4:0e:69:07:56:d6:5e:64:1b:28:6b:1f:6a:66:03:
d9:99:a1:b2:f6:37:bc:a9:6c:e7:a9:52:1c:7b:66:66:75:68:
dd:b6:70:71:bd:3a:e8:bc:8a:cb:bc:bd:0c:90:bc:4f:52:8c:
a5:5d:6f:fc:42:96:2a:54:9b:fd:e8:3a:0a:47:b4:f1:bc:64:
c9:14:29:0b:67:e5:f3:ad:97:24:48:4d:fc:50:de:b3:44:52:
54:69:38:7f:3f:a7:f4:3d:14:02:c7:d4:ed:e2:2d:62:38:bd:
a0:72:69:d6:9b:d0:52:9b:32:b2:bd:48:3e:2c:b1:99:28:0c:
25:7b:29:3d:a2:e5:08:57:fe:11:9b:e4:63:1b:b3:7d:cb:32:
40:5d:d6:eb:b9:ba:f6:05:64:f7:5f:f4:0e:7c:0a:77:c5:a5:
fb:86:02:21:26:eb:5e:00:43:84:e1:68:7e:2b:5e:00:bb:d4:
88:73:08:51:bb:34:4d:bf:db:05:77:39:0e:ec:70:7e:fb:76:
c4:6d:09:76
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNTAyMTAx
NDAyMjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NEM2MTM0NjMyNjE2
MDZFM0ExMDY5NThDMjhDQzQxODc2MzA1ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCryDQVVRsKXppRRcy003rSlTgTg86m6E8o/br+ZaWGTQNBQd97
2SedJe8ezwtgpiKQHglvYcsSSBQWzAiNK81/T6WVVXvIrdd8DzG4LYiUswR636KU
+Jqqj9JK2OygVPCOszhWaiiftVc6lRmpIQkdyPFP9ktzpCfaxHYp8i/Of+2WrFOD
qv5B63+1Nid5vJpUWlHJN0SiSgweMJhzN+wQ43802PhtXdjI2JpajwFnr42WIf8d
dc68qqPmEy3n52VHLTPZ8IhfcWXGM1XX5MVsA10fGEkyC+Th9RpEgiN+lss1U10M
XPQPd6dq2GRtJyJ2RKlFpXixZPt87h4SktHtAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU1UxhNGMmFgbjoQaVjCjMQYdjBYEwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC8xVXhoTkdNbUZnYmpvUWFWakNq
TVFZZGpCWUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwFg
MA0GCSqGSIb3DQEBCwUAA4IBAQBD00o+L4B6hYg/UMcGgiGpyHgSCuVPaEKpZ8ZH
MqLSguqoi2mfhEQgrKQPtbmktt4R5hbCEzEZBzCkDmkHVtZeZBsoax9qZgPZmaGy
9je8qWznqVIce2ZmdWjdtnBxvTrovIrLvL0MkLxPUoylXW/8QpYqVJv96DoKR7Tx
vGTJFCkLZ+XzrZckSE38UN6zRFJUaTh/P6f0PRQCx9Tt4i1iOL2gcmnWm9BSmzKy
vUg+LLGZKAwleyk9ouUIV/4Rm+RjG7N9yzJAXdbrubr2BWT3X/QOfAp3xaX7hgIh
JuteAEOE4Wh+K14Au9SIcwhRuzRNv9sFdzkO7HB++3bEbQl2
-----END CERTIFICATE-----
Generated at Tue Apr 8 08:08:24 2025 by rpki-client