Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa
File: FvEkl-JkILzv-de1ahsSP3CxEh4.roa (raw, json)
Hash identifier: 9gWs+K3Sq4lWPmFheDEfq5O3GM0zob5ufbydeBoVU1E=
Subject key identifier: 16:F1:24:97:E2:64:20:BC:EF:F9:D7:B5:6A:1B:12:3F:70:B1:12:1E
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1255
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa
Signing time: Mon 10 Feb 2025 14:14:44 +0000
ROA not before: Mon 10 Feb 2025 14:14:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17651
IP address blocks: 150.116.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4693 (0x1255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=16F12497E26420BCEFF9D7B56A1B123F70B1121E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:50:6e:f3:ce:29:f0:02:4a:c5:01:cd:ee:
56:70:48:7f:95:d0:47:5d:5b:b7:6d:54:09:d4:cf:
5b:a1:fd:88:a8:6f:c1:b3:59:f4:b6:6f:28:5c:ce:
ae:85:33:aa:fb:a8:72:9c:d7:57:17:d1:cf:f3:54:
db:2d:0b:7b:a0:9f:60:e1:72:58:b3:1f:f0:cf:2a:
07:77:b3:b7:1e:e7:68:f2:7c:b1:76:00:69:a3:c7:
21:8c:1c:12:a4:00:b4:45:18:63:87:e9:4b:b7:de:
e4:7d:f2:59:28:73:8b:10:e1:a6:12:51:e7:ad:4b:
c9:bd:aa:5c:37:db:6c:d9:a3:c9:47:a4:24:53:0e:
f8:77:50:f2:21:40:4d:6d:9a:64:6b:0c:35:82:fa:
06:7c:e6:be:89:94:75:b6:75:3d:aa:fb:ca:c1:d3:
c4:cd:a3:83:18:14:2e:18:9f:d7:cc:4e:e6:01:9c:
6e:aa:84:68:be:dd:db:7b:cb:09:38:7c:c3:9b:da:
04:40:50:2d:d6:c0:81:f6:1e:05:55:db:f3:b5:e9:
d0:9a:1d:ee:27:dc:ca:d1:d0:f7:c4:fc:e7:09:42:
54:86:3a:03:4b:3e:8d:db:27:3c:95:27:ab:d4:ca:
b7:ea:76:52:a6:fd:1b:1b:f0:94:5a:ef:94:6d:54:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:24:97:E2:64:20:BC:EF:F9:D7:B5:6A:1B:12:3F:70:B1:12:1E
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/FvEkl-JkILzv-de1ahsSP3CxEh4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.116.0/24
Signature Algorithm: sha256WithRSAEncryption
33:10:fd:1d:c5:33:08:b5:dc:4c:ad:8b:62:71:0b:2a:f4:ea:
31:6b:31:b1:d5:58:34:4a:84:3b:a1:a2:58:83:67:54:9a:67:
71:96:01:61:a1:73:04:74:be:1c:d2:a4:d5:fa:44:74:38:87:
97:65:1e:6c:0d:ad:b4:bf:37:ec:9d:62:b6:8f:34:4b:ca:bb:
34:d0:55:c3:3e:e5:18:88:7c:ea:e0:aa:e8:c1:79:6c:13:86:
66:f0:e2:4d:30:f6:f4:86:0e:af:c2:57:61:9e:51:82:2f:a8:
34:0f:66:41:ac:ca:8a:18:1b:45:a0:17:0f:8a:52:ee:b4:e3:
4c:06:10:fc:78:2d:69:85:9e:cc:35:36:2a:32:0f:c5:06:de:
83:ce:28:2e:1e:6d:c8:65:51:95:d8:45:bf:eb:92:6f:97:00:
56:fc:eb:1b:fe:53:7a:24:88:75:9b:ee:6a:7e:52:99:30:46:
c2:f8:38:e1:b4:21:6b:66:06:74:60:66:55:03:b6:20:6f:88:
7d:88:45:77:f3:cf:b9:80:a5:9f:92:95:64:c6:af:7b:c2:86:
7d:0a:6f:c7:34:3b:c0:85:eb:b6:51:02:26:1d:bd:4f:b1:e6:
c1:1e:5d:69:fb:c7:79:58:6b:6c:57:b9:fb:a6:91:50:d6:e7:
1f:3e:74:1d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICElUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx
NDE0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2RjEyNDk3RTI2NDIw
QkNFRkY5RDdCNTZBMUIxMjNGNzBCMTEyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcS1Bu884p8AJKxQHN7lZwSH+V0EddW7dtVAnUz1uh/Yiob8Gz
WfS2byhczq6FM6r7qHKc11cX0c/zVNstC3ugn2DhclizH/DPKgd3s7ce52jyfLF2
AGmjxyGMHBKkALRFGGOH6Uu33uR98lkoc4sQ4aYSUeetS8m9qlw322zZo8lHpCRT
Dvh3UPIhQE1tmmRrDDWC+gZ85r6JlHW2dT2q+8rB08TNo4MYFC4Yn9fMTuYBnG6q
hGi+3dt7ywk4fMOb2gRAUC3WwIH2HgVV2/O16dCaHe4n3MrR0PfE/OcJQlSGOgNL
Po3bJzyVJ6vUyrfqdlKm/Rsb8JRa75RtVABTAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUFvEkl+JkILzv+de1ahsSP3CxEh4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9GdkVrbC1Ka0lMenYt
ZGUxYWhzU1AzQ3hFaDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnR0MA0GCSqGSIb3DQEBCwUAA4IBAQAzEP0dxTMItdxMrYticQsq9OoxazGx
1Vg0SoQ7oaJYg2dUmmdxlgFhoXMEdL4c0qTV+kR0OIeXZR5sDa20vzfsnWK2jzRL
yrs00FXDPuUYiHzq4KrowXlsE4Zm8OJNMPb0hg6vwldhnlGCL6g0D2ZBrMqKGBtF
oBcPilLutONMBhD8eC1phZ7MNTYqMg/FBt6DziguHm3IZVGV2EW/65JvlwBW/Osb
/lN6JIh1m+5qflKZMEbC+DjhtCFrZgZ0YGZVA7Ygb4h9iEV388+5gKWfkpVkxq97
woZ9Cm/HNDvAheu2UQImHb1PsebBHl1p+8d5WGtsV7n7ppFQ1ucfPnQd
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:51:52 2025 by rpki-client