Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa
File: o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa (raw, json)
Hash identifier: a70jO3mYfElVvjwJiHBJgb5fkjKGVEjAca2M10Shi88=
Subject key identifier: A3:F7:B4:0B:CB:F4:91:66:3E:45:7E:6F:84:85:F3:EC:9E:D3:C3:8F
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0C9C
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa
Signing time: Mon 26 Aug 2024 05:26:54 +0000
ROA not before: Mon 26 Aug 2024 05:26:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 43.255.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Aug 26 05:26:54 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A3F7B40BCBF491663E457E6F8485F3EC9ED3C38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:09:4e:cf:51:e8:f3:ce:eb:3d:1d:32:7a:
ba:d5:40:28:51:28:73:cc:18:09:b5:1f:e8:d2:35:
55:5d:51:df:04:fd:f9:4e:bb:ef:b5:79:bc:87:dd:
9e:61:86:0d:1a:15:bb:ed:b3:fb:11:91:4a:6d:d1:
a8:6e:f7:3c:f5:a8:34:8b:66:19:21:64:5c:15:cc:
94:03:95:39:15:c5:5c:2b:0a:49:6f:aa:58:81:3f:
ea:3f:29:1f:3d:a0:4b:1f:63:8a:d7:9b:aa:b2:73:
4b:37:39:e8:ae:2a:31:31:d8:b7:37:1f:32:31:bd:
75:45:f3:d8:f6:11:0d:03:1e:4b:fe:1f:22:dc:ad:
34:43:14:08:ad:74:e0:47:8a:62:0d:e8:a5:8f:cf:
b8:f6:6f:53:84:89:c8:96:cf:29:ac:65:9f:02:a5:
cd:3b:5b:a3:e7:96:75:7b:b4:6d:7c:66:bf:5f:60:
57:c7:1d:7a:84:9f:fa:50:dd:19:50:63:30:a0:e1:
c3:61:89:04:c1:40:b2:25:a5:d1:b6:51:dc:7b:93:
a7:72:ad:21:44:5a:f9:8f:d4:e8:f3:52:8d:a6:cc:
3d:ad:39:9c:99:a0:ae:78:22:d6:de:73:11:d6:7d:
06:18:c3:7f:2e:d9:72:da:68:bd:67:83:91:65:37:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:B4:0B:CB:F4:91:66:3E:45:7E:6F:84:85:F3:EC:9E:D3:C3:8F
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:f2:a9:0d:21:37:da:53:52:07:1a:81:79:61:67:a2:d5:35:
dd:7a:34:22:6a:d1:51:36:d5:c9:1e:7c:5a:20:b2:01:ba:e6:
9f:d3:7c:5c:17:16:b5:72:42:36:cc:51:a6:be:c8:d3:0a:d8:
dd:43:54:8f:66:97:78:d3:5e:fd:74:01:ec:b8:69:a5:f1:b4:
c9:58:de:8c:57:d5:81:ac:8c:2d:a7:b7:05:8d:2c:12:48:22:
d0:09:56:ac:8b:2b:fd:b5:af:8c:a5:dd:c7:92:bd:d6:e5:29:
be:d6:d3:24:50:d7:1d:ea:68:43:dd:3a:93:b7:e8:98:d7:c1:
67:e4:42:6f:27:ad:ad:4a:20:aa:16:53:a7:aa:21:0e:1a:f2:
3b:e0:ef:26:d9:c7:34:c2:13:e9:a7:fe:8c:63:a4:f5:f4:19:
aa:26:17:e4:1a:b3:ef:7a:ff:ed:01:f3:d5:95:8e:58:64:0b:
4f:aa:38:84:a1:a6:f8:2d:73:78:1a:f8:7d:fa:f6:c6:50:1c:
33:7e:7a:70:91:75:e5:fe:01:0d:69:6d:f0:10:9e:07:a3:73:
dd:4e:e3:51:9d:6f:19:7f:e1:be:8c:9c:ec:00:c2:9c:5a:bd:
05:10:28:27:a4:4d:82:8c:0c:a2:ae:a0:04:a5:45:76:58:ff:
c4:e5:7c:e0
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw
NTI2NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzRjdCNDBCQ0JGNDkx
NjYzRTQ1N0U2Rjg0ODVGM0VDOUVEM0MzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC75wlOz1Ho887rPR0yerrVQChRKHPMGAm1H+jSNVVdUd8E/flO
u++1ebyH3Z5hhg0aFbvts/sRkUpt0ahu9zz1qDSLZhkhZFwVzJQDlTkVxVwrCklv
qliBP+o/KR89oEsfY4rXm6qyc0s3OeiuKjEx2Lc3HzIxvXVF89j2EQ0DHkv+HyLc
rTRDFAitdOBHimIN6KWPz7j2b1OEiciWzymsZZ8Cpc07W6PnlnV7tG18Zr9fYFfH
HXqEn/pQ3RlQYzCg4cNhiQTBQLIlpdG2Udx7k6dyrSFEWvmP1OjzUo2mzD2tOZyZ
oK54ItbecxHWfQYYw38u2XLaaL1ng5FlN59dAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUo/e0C8v0kWY+RX5vhIXz7J7Tw48wHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L29fZTBDOHYwa1dZ
LVJYNXZoSVh6N0o3VHc0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIr/wwwDQYJKoZIhvcNAQELBQADggEBAIzyqQ0hN9pTUgcagXlhZ6LVNd16
NCJq0VE21ckefFogsgG65p/TfFwXFrVyQjbMUaa+yNMK2N1DVI9ml3jTXv10Aey4
aaXxtMlY3oxX1YGsjC2ntwWNLBJIItAJVqyLK/21r4yl3ceSvdblKb7W0yRQ1x3q
aEPdOpO36JjXwWfkQm8nra1KIKoWU6eqIQ4a8jvg7ybZxzTCE+mn/oxjpPX0Gaom
F+Qas+96/+0B89WVjlhkC0+qOIShpvgtc3ga+H369sZQHDN+enCRdeX+AQ1pbfAQ
ngejc91O41Gdbxl/4b6MnOwAwpxavQUQKCekTYKMDKKuoASlRXZY/8TlfOA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:56:43 2025 by rpki-client