Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa
File: karv1ahNl-9MYE6V3Sv2zKBlcu0.roa (raw, json)
Hash identifier: fq9/2jpgg5k8rdC1KEmTpc2RTG5bIn42DAj32nnVUqM=
Subject key identifier: 91:AA:EF:D5:A8:4D:97:EF:4C:60:4E:95:DD:2B:F6:CC:A0:65:72:ED
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0CF3
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa
Signing time: Mon 10 Feb 2025 14:10:19 +0000
ROA not before: Mon 10 Feb 2025 14:10:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 101.0.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3315 (0xcf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Feb 10 14:10:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=91AAEFD5A84D97EF4C604E95DD2BF6CCA06572ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:74:1d:2e:0e:15:59:60:88:38:ac:6f:1f:
b2:c7:44:b8:8b:b9:a9:7b:0f:04:e4:fa:7b:a3:c5:
5c:7e:90:b4:e1:d6:37:49:59:ee:66:37:2f:09:5c:
74:52:5c:cb:4e:b3:d3:6b:6b:e0:86:78:bd:2a:97:
7b:e8:32:50:56:39:74:69:fa:cb:93:7c:44:63:c6:
ff:ed:c0:29:6c:8d:74:26:43:1b:79:4e:2b:a2:75:
92:32:e0:c2:a8:b5:25:dd:2d:9c:89:34:80:46:77:
ca:6c:db:46:3c:d7:e5:b6:99:e2:98:ca:87:47:35:
cd:bd:84:d3:b5:95:38:4f:e7:19:6d:42:9f:eb:59:
b4:72:c0:7a:26:79:ca:a6:87:99:8d:a8:1f:29:ac:
90:09:5c:97:44:cb:01:eb:64:92:40:5e:93:54:3e:
79:33:e9:9a:ab:bd:6f:b4:26:07:ab:a3:71:de:dc:
66:a2:70:90:57:04:57:0a:84:03:fa:f2:74:fb:0c:
d1:77:27:10:49:8c:93:73:d2:cf:e9:b5:6a:c4:5a:
a9:08:ee:27:95:61:d6:61:e4:ac:b4:96:f0:9f:1e:
c6:11:e2:5c:63:be:de:60:fa:30:84:33:dd:b8:f1:
0c:6a:4e:44:54:09:12:f6:9c:c2:3e:66:38:28:a0:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:EF:D5:A8:4D:97:EF:4C:60:4E:95:DD:2B:F6:CC:A0:65:72:ED
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/karv1ahNl-9MYE6V3Sv2zKBlcu0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.232.0/21
Signature Algorithm: sha256WithRSAEncryption
69:59:77:c5:ca:08:74:14:34:22:60:2f:b6:0b:e2:15:41:2c:
09:4a:9f:af:0b:2e:e6:1e:32:3e:87:45:39:9b:a6:45:ba:32:
bf:4e:48:48:88:d4:80:39:19:15:1e:b5:0a:9e:3a:8e:8d:63:
0c:74:5b:6b:c9:f3:b8:97:30:8d:b2:18:29:94:95:8d:cf:66:
4d:92:a8:48:2b:50:72:4c:fb:6a:b0:bf:f3:c4:d5:96:ab:64:
4c:6c:10:75:f6:ae:11:f6:19:54:4f:bf:c5:af:07:a6:74:99:
77:ec:49:30:09:80:8a:11:5e:fa:81:d0:67:06:97:43:53:1f:
6b:f2:e5:25:72:68:a2:bc:c3:e8:1c:57:4c:f2:24:a0:69:e0:
d0:6a:9d:51:71:c0:af:b8:15:f4:03:66:34:99:eb:25:c2:66:
fd:57:4e:0b:5d:c9:ac:9f:a6:91:e1:4d:33:52:15:2f:3d:49:
17:68:d2:4e:06:b8:36:96:a4:49:cd:d6:bd:32:3d:d4:68:70:
5b:d9:b5:32:c2:dd:b7:5f:fc:17:07:4e:f7:d7:97:22:6c:4e:
ea:52:b3:b8:70:2f:41:ac:76:c0:da:99:51:9c:e7:20:dc:ba:
9b:41:6f:83:90:9e:24:49:9b:6e:18:7f:ed:e8:a9:22:a3:09:
fe:dc:1b:30
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNTAyMTAx
NDEwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxQUFFRkQ1QTg0RDk3
RUY0QzYwNEU5NUREMkJGNkNDQTA2NTcyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+qnQdLg4VWWCIOKxvH7LHRLiLual7DwTk+nujxVx+kLTh1jdJ
We5mNy8JXHRSXMtOs9Nra+CGeL0ql3voMlBWOXRp+suTfERjxv/twClsjXQmQxt5
TiuidZIy4MKotSXdLZyJNIBGd8ps20Y81+W2meKYyodHNc29hNO1lThP5xltQp/r
WbRywHomecqmh5mNqB8prJAJXJdEywHrZJJAXpNUPnkz6ZqrvW+0Jgero3He3Gai
cJBXBFcKhAP68nT7DNF3JxBJjJNz0s/ptWrEWqkI7ieVYdZh5Ky0lvCfHsYR4lxj
vt5g+jCEM9248QxqTkRUCRL2nMI+ZjgooAh5AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUkarv1ahNl+9MYE6V3Sv2zKBlcu0wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4va2FydjFhaE5s
LTlNWUU2VjNTdjJ6S0JsY3UwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA2UA6DANBgkqhkiG9w0BAQsFAAOCAQEAaVl3xcoIdBQ0ImAvtgviFUEs
CUqfrwsu5h4yPodFOZumRboyv05ISIjUgDkZFR61Cp46jo1jDHRba8nzuJcwjbIY
KZSVjc9mTZKoSCtQckz7arC/88TVlqtkTGwQdfauEfYZVE+/xa8HpnSZd+xJMAmA
ihFe+oHQZwaXQ1Mfa/LlJXJoorzD6BxXTPIkoGng0GqdUXHAr7gV9ANmNJnrJcJm
/VdOC13JrJ+mkeFNM1IVLz1JF2jSTga4NpakSc3WvTI91GhwW9m1MsLdt1/8FwdO
99eXImxO6lKzuHAvQax2wNqZUZznINy6m0Fvg5CeJEmbbhh/7eipIqMJ/twbMA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:11 2025 by rpki-client