Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa
File: ofvcuxthmQnQctgObeTfbYy1KUo.roa (raw, json)
Hash identifier: tFfI4JeTrQSym/a2AviRbZM4XdkTzpEoX2emFZPM1xo=
Subject key identifier: A1:FB:DC:BB:1B:61:99:09:D0:72:D8:0E:6D:E4:DF:6D:8C:B5:29:4A
Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial: 036D
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa
Signing time: Mon 10 Feb 2025 14:00:25 +0000
ROA not before: Mon 10 Feb 2025 14:00:25 +0000
ROA not after: Thu 28 Aug 2025 15:30:19 +0000
asID: 215262
IP address blocks: 2401:bf60:4ff6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Validity
Not Before: Feb 10 14:00:25 2025 GMT
Not After : Aug 28 15:30:19 2025 GMT
Subject: CN=A1FBDCBB1B619909D072D80E6DE4DF6D8CB5294A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:0e:bf:e0:b7:69:78:ec:4c:9f:2c:99:0a:
57:01:81:86:11:b2:c2:d7:a9:3a:37:e3:9d:f6:b6:
ab:98:38:04:60:8a:be:a5:02:b1:d2:70:08:fc:45:
8e:92:cc:04:cf:96:d2:39:e3:09:97:73:41:56:d0:
97:dc:a8:5c:5c:60:2f:df:00:30:41:a3:96:d3:65:
9a:49:14:03:be:06:c0:1a:cf:5f:36:cf:80:e3:a3:
21:db:9c:63:f7:9e:ed:80:2d:e1:69:25:a0:f5:92:
43:27:31:69:8c:48:fc:76:4f:f6:97:0a:53:ec:0d:
cd:b9:7f:22:ff:78:2f:d4:52:45:3f:89:48:9d:99:
36:4a:28:7e:7c:fd:88:33:60:74:a0:04:b9:1c:8d:
90:55:66:ae:0f:07:37:0d:0c:9a:35:d0:72:1d:b4:
53:52:2e:84:40:9f:7f:b3:58:16:a1:18:5f:e5:5d:
2e:10:81:50:60:ec:98:92:92:29:cd:9c:67:39:32:
3b:e2:6e:c2:50:99:78:72:7e:cc:15:03:29:fd:3c:
a3:08:98:cc:5e:19:8d:c9:4a:65:41:3b:cf:22:fa:
92:69:80:82:aa:48:1e:52:55:21:5f:57:79:f6:24:
e7:c3:8a:cf:22:54:f6:93:0d:d0:e9:6e:4f:01:8b:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:DC:BB:1B:61:99:09:D0:72:D8:0E:6D:E4:DF:6D:8C:B5:29:4A
X509v3 Authority Key Identifier:
keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ofvcuxthmQnQctgObeTfbYy1KUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:bf60:4ff6::/48
Signature Algorithm: sha256WithRSAEncryption
96:a2:f7:3f:b7:d1:4a:78:28:11:47:92:c8:43:d7:52:32:94:
4d:3d:c8:d3:fa:da:ff:3b:74:07:f6:56:7b:54:3f:b0:f2:b6:
6a:3c:0d:45:e4:00:21:53:e8:88:f7:bd:04:2c:92:d0:b5:68:
98:f7:5e:94:5d:00:26:b3:e7:7c:a4:e0:a9:41:39:20:20:d2:
fa:80:46:bb:b1:84:ff:4e:9a:0c:5c:2d:63:f5:e3:e2:82:d1:
08:dd:23:0a:1b:94:85:c6:bb:da:07:d1:49:23:3d:7a:17:ba:
d6:7a:62:d2:78:a5:84:0c:6f:b1:ad:a1:31:e0:a0:51:0f:b9:
33:e5:bb:89:f8:b9:bf:70:11:7c:99:54:25:75:12:30:6d:08:
3a:96:d6:95:cb:9a:d8:b4:fe:c4:46:30:8a:b0:c2:9a:50:95:
e3:32:7c:47:b8:91:1a:67:12:22:a7:69:fa:22:6a:e5:ba:2e:
db:4e:05:cd:31:9c:d8:96:ef:44:a6:f1:cf:86:4a:f4:2e:5c:
e6:4a:fe:8b:03:50:60:b7:2d:e8:3e:4b:e9:07:e3:fe:e0:8a:
d8:1c:7b:92:b4:e5:a6:1a:dd:2e:35:10:7d:49:c5:b8:5d:ec:
25:c0:18:a6:5f:cc:d9:26:8f:4a:c5:69:8e:fc:3e:7d:9f:98:
1a:f6:8f:27
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICA20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy
MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTAyMTAx
NDAwMjVaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKEExRkJEQ0JCMUI2MTk5
MDlEMDcyRDgwRTZERTRERjZEOENCNTI5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGcA6/4LdpeOxMnyyZClcBgYYRssLXqTo34532tquYOARgir6l
ArHScAj8RY6SzATPltI54wmXc0FW0JfcqFxcYC/fADBBo5bTZZpJFAO+BsAaz182
z4DjoyHbnGP3nu2ALeFpJaD1kkMnMWmMSPx2T/aXClPsDc25fyL/eC/UUkU/iUid
mTZKKH58/YgzYHSgBLkcjZBVZq4PBzcNDJo10HIdtFNSLoRAn3+zWBahGF/lXS4Q
gVBg7JiSkinNnGc5MjvibsJQmXhyfswVAyn9PKMImMxeGY3JSmVBO88i+pJpgIKq
SB5SVSFfV3n2JOfDis8iVPaTDdDpbk8Bi1JdAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUofvcuxthmQnQctgObeTfbYy1KUowHwYDVR0jBBgwFoAULCCIGg79BmSlka8w
ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ
VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvb2Z2Y3V4dGht
UW5RY3RnT2JlVGZiWXkxS1VvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQBv2BP9jANBgkqhkiG9w0BAQsFAAOCAQEAlqL3P7fRSngoEUeSyEPX
UjKUTT3I0/ra/zt0B/ZWe1Q/sPK2ajwNReQAIVPoiPe9BCyS0LVomPdelF0AJrPn
fKTgqUE5ICDS+oBGu7GE/06aDFwtY/Xj4oLRCN0jChuUhca72gfRSSM9ehe61npi
0nilhAxvsa2hMeCgUQ+5M+W7ifi5v3ARfJlUJXUSMG0IOpbWlcua2LT+xEYwirDC
mlCV4zJ8R7iRGmcSIqdp+iJq5bou204FzTGc2JbvRKbxz4ZK9C5c5kr+iwNQYLct
6D5L6Qfj/uCK2Bx7krTlphrdLjUQfUnFuF3sJcAYpl/M2SaPSsVpjvw+fZ+YGvaP
Jw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:32:23 2025 by rpki-client