Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa
File: lT-l9JaDSinTe48NpdY_xaL0NKo.roa (raw, json)
Hash identifier: jbyUVVVFOH9qfrBKSbK/RLBn1kj0xUw78mQMNeMKqOI=
Subject key identifier: 95:3F:A5:F4:96:83:4A:29:D3:7B:8F:0D:A5:D6:3F:C5:A2:F4:34:AA
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 11C2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa
Signing time: Mon 26 Aug 2024 05:11:07 +0000
ROA not before: Mon 26 Aug 2024 05:11:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131627
IP address blocks: 150.116.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4546 (0x11c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Aug 26 05:11:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=953FA5F496834A29D37B8F0DA5D63FC5A2F434AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:e6:25:94:3f:20:d5:53:cf:ad:f9:d3:1a:
70:ad:e9:2b:5a:e0:d5:6a:be:35:b2:ce:08:fb:ea:
4e:ec:f5:3d:c4:d8:c9:b1:e0:b6:e6:c5:9b:94:2c:
a6:5b:47:23:86:64:fb:45:c7:93:4f:f8:94:c1:0a:
d3:3a:e9:c6:45:e7:2e:e3:99:00:c9:1c:2f:57:40:
7e:d6:c4:33:31:94:0a:c9:17:09:85:3d:d3:a2:90:
da:46:31:f9:6d:5e:c5:0e:05:90:e4:47:20:18:74:
6b:31:70:43:eb:cc:55:58:f8:a0:9b:84:b4:b7:97:
5b:0d:da:f1:c5:46:15:6e:57:28:f5:9d:00:ac:e9:
36:6c:32:d0:3c:65:07:39:2f:6f:ee:57:65:94:a8:
63:b0:21:d4:be:bb:78:43:41:9e:34:da:f6:8b:66:
6d:fa:e0:a1:93:62:d7:76:8c:f9:3c:83:e0:2b:b1:
d5:78:9d:92:4e:1c:0f:8b:47:66:d0:9c:2a:12:ba:
cd:47:41:54:ee:0b:85:04:02:81:0f:c0:21:b8:76:
09:59:34:71:fa:02:56:31:c0:bc:ae:73:ed:5e:91:
8b:92:ab:2b:60:a4:a5:f5:81:45:e6:1a:98:3a:c8:
28:c5:a2:3b:c3:18:ab:cd:ed:bc:cb:d2:3a:b8:30:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:A5:F4:96:83:4A:29:D3:7B:8F:0D:A5:D6:3F:C5:A2:F4:34:AA
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lT-l9JaDSinTe48NpdY_xaL0NKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:a7:a5:9c:da:3b:5f:5b:8a:74:36:0c:17:fc:03:f3:1c:85:
88:c8:74:af:86:cb:09:24:28:c8:de:24:78:82:a8:b3:cf:ae:
13:42:73:d4:fc:87:92:66:52:4e:69:ea:36:09:d0:3b:1e:94:
a4:ce:a1:6a:42:71:19:0c:f8:9d:04:14:bc:bc:77:94:75:e7:
af:71:64:30:8b:bd:df:08:b4:45:44:a6:14:a1:1c:72:9b:ef:
98:6d:2f:42:fb:6e:5b:d9:19:63:87:3b:7c:5b:d7:69:47:92:
43:7f:10:ff:7e:c1:22:8f:87:f1:c0:9f:87:ed:4b:0c:6a:ff:
a9:2a:27:7f:c9:f6:d8:26:b7:bb:9c:89:82:b9:50:8a:c8:c4:
2b:8c:5f:8f:32:e9:92:b7:ae:81:4f:ea:59:50:87:7a:4b:08:
d7:19:88:99:ec:d7:c0:a6:c2:47:0a:1e:52:c3:ce:57:ed:22:
c2:0c:ca:2a:b7:cf:aa:62:c2:c3:2e:9b:d0:e4:71:fb:c6:01:
26:a9:19:69:d6:e8:0f:5d:17:b4:50:93:55:e1:dd:cf:c9:aa:
e8:0c:f9:16:8f:fb:e4:50:5a:73:fa:cb:33:53:ba:f9:b1:45:
ea:36:06:d5:ab:99:fe:42:bd:cc:35:d9:0b:17:df:77:26:56:
e9:1a:1a:c4
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw
NTExMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk1M0ZBNUY0OTY4MzRB
MjlEMzdCOEYwREE1RDYzRkM1QTJGNDM0QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfeuYllD8g1VPPrfnTGnCt6Sta4NVqvjWyzgj76k7s9T3E2Mmx
4LbmxZuULKZbRyOGZPtFx5NP+JTBCtM66cZF5y7jmQDJHC9XQH7WxDMxlArJFwmF
PdOikNpGMfltXsUOBZDkRyAYdGsxcEPrzFVY+KCbhLS3l1sN2vHFRhVuVyj1nQCs
6TZsMtA8ZQc5L2/uV2WUqGOwIdS+u3hDQZ402vaLZm364KGTYtd2jPk8g+ArsdV4
nZJOHA+LR2bQnCoSus1HQVTuC4UEAoEPwCG4dglZNHH6AlYxwLyuc+1ekYuSqytg
pKX1gUXmGpg6yCjFojvDGKvN7bzL0jq4MHtXAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUlT+l9JaDSinTe48NpdY/xaL0NKowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9sVC1sOUphRFNpblRl
NDhOcGRZX3hhTDBOS28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQClnToMA0GCSqGSIb3DQEBCwUAA4IBAQAvp6Wc2jtfW4p0NgwX/APzHIWIyHSv
hssJJCjI3iR4gqizz64TQnPU/IeSZlJOaeo2CdA7HpSkzqFqQnEZDPidBBS8vHeU
deevcWQwi73fCLRFRKYUoRxym++YbS9C+25b2Rljhzt8W9dpR5JDfxD/fsEij4fx
wJ+H7UsMav+pKid/yfbYJre7nImCuVCKyMQrjF+PMumSt66BT+pZUId6SwjXGYiZ
7NfApsJHCh5Sw85X7SLCDMoqt8+qYsLDLpvQ5HH7xgEmqRlp1ugPXRe0UJNV4d3P
yaroDPkWj/vkUFpz+sszU7r5sUXqNgbVq5n+Qr3MNdkLF993JlbpGhrE
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:48:59 2025 by rpki-client