Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa
File: _K3XE6xNNPcn3GQfnsOvdzB2V8U.roa (raw, json)
Hash identifier: HlFripZXFoyF0RWDktI7jicdq5pnW59loy8cE55V5Mk=
Subject key identifier: FC:AD:D7:13:AC:4D:34:F7:27:DC:64:1F:9E:C3:AF:77:30:76:57:C5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 1283
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa
Signing time: Mon 10 Feb 2025 14:14:56 +0000
ROA not before: Mon 10 Feb 2025 14:14:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 150.116.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4739 (0x1283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:14:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FCADD713AC4D34F727DC641F9EC3AF77307657C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:1e:ee:76:1e:8c:6e:75:20:a5:0c:1b:3c:
40:bf:19:85:be:fa:22:22:2e:ff:cf:2f:cf:11:66:
9d:36:33:71:53:83:04:aa:08:75:c3:53:82:aa:16:
6b:41:2b:19:7c:cd:a5:62:2f:43:18:d8:c0:0b:ec:
9c:c4:9f:41:6c:4e:d9:83:c1:7c:ba:51:ac:aa:a7:
7d:26:1a:59:9a:7e:7c:0a:1e:76:d2:bc:9f:89:d8:
81:22:24:a2:b2:fe:96:0e:ce:b7:8f:02:56:a0:b1:
86:41:a9:4d:cb:8f:be:74:a5:55:96:2e:91:5a:44:
1b:d0:4c:45:fd:47:95:d8:fb:57:72:9b:94:d1:af:
5c:4c:ee:c9:e5:b6:d2:74:a7:0c:ab:2c:0c:0f:72:
a4:22:4a:90:32:f4:2c:01:9e:17:08:d7:42:37:c1:
6b:e3:7c:a7:0d:9f:d8:a1:d1:8f:f8:5d:b8:60:77:
ca:9b:a4:e6:5f:25:2b:c3:df:85:2f:70:f8:12:b1:
26:eb:80:1c:3a:2f:c5:dd:ce:f8:92:f0:96:5d:99:
fa:f4:56:9a:e0:bc:6d:19:8e:e9:bf:8b:ba:82:72:
8a:dd:59:aa:3c:99:80:a4:3e:a5:ad:6f:54:5f:6d:
ea:e5:55:0a:fa:9f:e4:2e:3d:45:5f:f3:5b:d8:ad:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:D7:13:AC:4D:34:F7:27:DC:64:1F:9E:C3:AF:77:30:76:57:C5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_K3XE6xNNPcn3GQfnsOvdzB2V8U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:d4:8f:b9:bb:e7:8d:3e:0f:e8:29:1a:ff:eb:ee:f7:0b:2d:
d1:3c:5e:00:62:6c:2d:d4:5b:6c:fe:6c:fc:9f:ac:7d:aa:9d:
eb:8f:75:c1:6c:16:86:97:4b:a8:ae:96:5b:d8:a9:33:2c:15:
d7:a7:0d:ea:cd:c4:40:d6:4d:9a:b7:a6:77:a9:ce:fc:ae:06:
36:f1:9a:52:af:4b:2a:11:c9:5b:fd:17:98:c7:76:36:06:03:
a2:47:98:1c:ea:a9:f5:bb:31:9a:7b:54:5d:1b:90:cc:0e:39:
45:22:62:16:69:6c:c6:9d:04:d8:51:bf:ca:43:e3:5e:cd:a6:
f6:77:48:0b:3a:a6:0f:40:b2:be:cb:da:93:23:ae:5b:88:89:
71:f6:95:c3:62:c9:b4:55:8d:ca:c0:d4:4e:d9:7f:a7:3a:59:
ea:c2:2d:3a:36:af:1f:69:24:c1:5b:68:1b:e0:e1:78:64:ca:
8a:c4:0a:3e:7f:ab:86:76:9b:9b:5e:5b:6e:09:d9:7f:d7:5c:
d0:86:4b:ab:87:af:f5:16:55:85:84:ca:ee:90:b6:22:f4:8c:
e6:9d:85:37:7a:da:bf:18:42:61:49:1c:3c:3d:2f:d3:a2:ea:
78:11:ad:32:9f:14:1f:79:a1:9a:50:f6:40:a1:13:e8:ec:b1:
5e:bb:e7:8b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTAyMTAx
NDE0NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDQURENzEzQUM0RDM0
RjcyN0RDNjQxRjlFQzNBRjc3MzA3NjU3QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHax7udh6MbnUgpQwbPEC/GYW++iIiLv/PL88RZp02M3FTgwSq
CHXDU4KqFmtBKxl8zaViL0MY2MAL7JzEn0FsTtmDwXy6Uayqp30mGlmafnwKHnbS
vJ+J2IEiJKKy/pYOzrePAlagsYZBqU3Lj750pVWWLpFaRBvQTEX9R5XY+1dym5TR
r1xM7snlttJ0pwyrLAwPcqQiSpAy9CwBnhcI10I3wWvjfKcNn9ih0Y/4Xbhgd8qb
pOZfJSvD34UvcPgSsSbrgBw6L8XdzviS8JZdmfr0VprgvG0Zjum/i7qCcordWao8
mYCkPqWtb1RfberlVQr6n+QuPUVf81vYrYu5AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU/K3XE6xNNPcn3GQfnsOvdzB2V8UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9fSzNYRTZ4Tk5QY24z
R1FmbnNPdmR6QjJWOFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQClnRwMA0GCSqGSIb3DQEBCwUAA4IBAQCy1I+5u+eNPg/oKRr/6+73Cy3RPF4A
Ymwt1Fts/mz8n6x9qp3rj3XBbBaGl0uorpZb2KkzLBXXpw3qzcRA1k2at6Z3qc78
rgY28ZpSr0sqEclb/ReYx3Y2BgOiR5gc6qn1uzGae1RdG5DMDjlFImIWaWzGnQTY
Ub/KQ+Nezab2d0gLOqYPQLK+y9qTI65biIlx9pXDYsm0VY3KwNRO2X+nOlnqwi06
Nq8faSTBW2gb4OF4ZMqKxAo+f6uGdpubXltuCdl/11zQhkurh6/1FlWFhMrukLYi
9IzmnYU3etq/GEJhSRw8PS/Toup4Ea0ynxQfeaGaUPZAoRPo7LFeu+eL
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client