Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa
File: q8YYIUJbbq96tABmvhWXwbgS_Cw.roa (raw, json)
Hash identifier: AJw6fd34gefMVvKxvJPEq+fVdG9iIGETeTYFQ0gcDbo=
Subject key identifier: AB:C6:18:21:42:5B:6E:AF:7A:B4:00:66:BE:15:97:C1:B8:12:FC:2C
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0D21
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa
Signing time: Mon 10 Feb 2025 14:23:29 +0000
ROA not before: Mon 10 Feb 2025 14:23:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 101.3.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Feb 10 14:23:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ABC61821425B6EAF7AB40066BE1597C1B812FC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:60:c4:34:05:91:27:5f:5d:ac:f3:99:84:
d4:72:fb:7e:cd:d3:4f:c1:d3:87:b6:e2:2d:0b:57:
2a:9f:ee:05:09:a6:48:51:e9:a7:12:78:ac:ea:95:
86:24:38:ae:3f:42:cd:33:6a:9d:89:f6:f5:77:d1:
fc:42:24:31:df:54:de:a2:29:3f:cc:a7:ab:2f:ff:
5b:95:28:3b:f2:d5:c2:39:6c:72:2d:5e:99:13:23:
e8:1a:d3:3f:08:e6:69:20:d5:f9:fd:19:75:a7:4b:
0a:34:b9:19:9d:f7:e0:8b:5f:ed:be:96:6e:7b:c5:
07:b0:4c:39:07:e6:9e:e0:65:75:fd:b6:dd:99:ce:
9c:36:44:d3:8d:2e:9f:75:50:45:d9:7d:79:8a:8c:
32:90:b8:f7:eb:11:cf:14:5a:75:ee:a7:b9:84:c6:
7b:35:47:a2:6a:30:b8:76:20:1f:f9:a5:d6:57:a3:
07:d9:f1:ab:92:e6:3f:18:6e:76:2d:38:83:c5:7c:
c7:20:45:b7:30:d0:1a:70:4e:4a:cd:4e:b0:16:2c:
44:3c:f0:05:b6:fa:07:9c:10:e5:d4:a4:f7:63:b2:
af:c8:3d:82:b1:d5:cc:b9:a8:5e:44:f8:d9:5e:be:
40:8c:d1:c9:23:e1:40:25:47:b4:81:fa:cf:bc:92:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:18:21:42:5B:6E:AF:7A:B4:00:66:BE:15:97:C1:B8:12:FC:2C
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/q8YYIUJbbq96tABmvhWXwbgS_Cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:0a:31:af:81:38:1c:d6:93:f8:01:b0:3c:fb:d4:e8:92:d9:
58:18:66:a9:73:85:02:12:2b:ee:f5:37:18:0e:b2:2b:65:19:
78:d8:12:bd:b1:33:1c:b2:c0:25:27:97:f7:8b:86:50:6f:e1:
a5:49:8e:6e:d0:a8:cc:51:c9:eb:79:2e:63:ed:f6:7c:12:87:
2c:bf:37:9e:aa:0a:cd:ec:6f:1b:13:f7:7d:a6:d5:8f:b4:ad:
ad:6d:89:0f:27:f8:d4:e3:41:55:52:24:5a:3f:60:bb:69:fe:
a3:43:cc:fd:a5:57:4e:50:7b:42:dd:75:a5:23:3e:45:77:e3:
23:3c:85:75:30:7c:f8:25:b4:70:f1:cf:9b:c3:35:8d:4c:c1:
b7:fb:70:71:63:73:1f:68:f3:7e:a8:9a:11:a1:ff:77:44:29:
6f:32:4e:01:0a:30:84:06:25:4c:f1:44:63:a7:65:6d:a9:63:
af:79:9c:90:07:b9:9b:36:02:a4:76:18:43:08:4b:94:f2:c8:
20:de:86:b5:d9:5a:25:16:48:2e:c6:e6:5e:c1:2a:79:ad:cd:
0e:20:22:86:3f:c0:aa:9d:0d:28:c2:1b:69:8b:6b:8c:3d:d4:
4e:76:c8:9b:21:e0:57:8c:62:fe:f9:3c:a8:97:c1:53:42:38:
79:47:8d:3e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNTAyMTAx
NDIzMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCQzYxODIxNDI1QjZF
QUY3QUI0MDA2NkJFMTU5N0MxQjgxMkZDMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJAGDENAWRJ19drPOZhNRy+37N00/B04e24i0LVyqf7gUJpkhR
6acSeKzqlYYkOK4/Qs0zap2J9vV30fxCJDHfVN6iKT/Mp6sv/1uVKDvy1cI5bHIt
XpkTI+ga0z8I5mkg1fn9GXWnSwo0uRmd9+CLX+2+lm57xQewTDkH5p7gZXX9tt2Z
zpw2RNONLp91UEXZfXmKjDKQuPfrEc8UWnXup7mExns1R6JqMLh2IB/5pdZXowfZ
8auS5j8YbnYtOIPFfMcgRbcw0BpwTkrNTrAWLEQ88AW2+gecEOXUpPdjsq/IPYKx
1cy5qF5E+NlevkCM0ckj4UAlR7SB+s+8ksHRAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUq8YYIUJbbq96tABmvhWXwbgS/CwwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L3E4WVlJVUpiYnE5
NnRBQm12aFdYd2JnU19Ddy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVlA4AwDQYJKoZIhvcNAQELBQADggEBAJwKMa+BOBzWk/gBsDz71OiS2VgY
ZqlzhQISK+71NxgOsitlGXjYEr2xMxyywCUnl/eLhlBv4aVJjm7QqMxRyet5LmPt
9nwShyy/N56qCs3sbxsT932m1Y+0ra1tiQ8n+NTjQVVSJFo/YLtp/qNDzP2lV05Q
e0LddaUjPkV34yM8hXUwfPgltHDxz5vDNY1Mwbf7cHFjcx9o836omhGh/3dEKW8y
TgEKMIQGJUzxRGOnZW2pY695nJAHuZs2AqR2GEMIS5TyyCDehrXZWiUWSC7G5l7B
KnmtzQ4gIoY/wKqdDSjCG2mLa4w91E52yJsh4FeMYv75PKiXwVNCOHlHjT4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:17 2025 by rpki-client