Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa
File: _WKMvY8hJG1qY9tdEsh01WRAOBM.roa (raw, json)
Hash identifier: +JotHMltkyGZR8vZEuoO40BPk/EIlQZykqDMHOLOwQM=
Subject key identifier: FD:62:8C:BD:8F:21:24:6D:6A:63:DB:5D:12:C8:74:D5:64:40:38:13
Certificate issuer: /CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9
Certificate serial: 017E
Authority key identifier: 4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa
Signing time: Mon 10 Feb 2025 13:43:00 +0000
ROA not before: Mon 10 Feb 2025 13:43:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.255.210.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9
Validity
Not Before: Feb 10 13:43:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FD628CBD8F21246D6A63DB5D12C874D564403813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:19:a8:82:4f:c3:43:a8:9b:3e:64:3c:84:
e9:4a:de:fd:56:74:14:d3:ec:12:30:41:f2:42:78:
15:a5:9a:34:9c:ed:15:97:9a:f0:fd:d3:90:c2:21:
88:dc:01:64:76:24:c5:84:87:69:58:a4:b0:f0:15:
1f:43:e1:92:ca:f0:ab:d0:43:1c:92:d2:d0:7c:d2:
6b:3b:61:ca:28:e3:e0:8b:c9:68:bc:07:9b:a8:72:
18:d2:9b:58:6c:47:37:49:f3:63:44:01:60:4d:75:
73:7d:8d:0a:d5:ae:d4:21:d1:9a:05:ff:99:f3:9e:
fe:02:16:54:c6:23:c6:f4:1e:79:4c:bc:7e:81:e1:
cd:34:0f:a4:57:c6:0f:00:75:75:d3:29:d8:43:c7:
7f:c7:ab:15:8d:e6:7a:8b:15:fa:f2:c7:e1:8f:3c:
12:a6:29:b4:ae:d1:fd:a8:ef:2e:73:4e:21:a7:1a:
5a:34:fa:86:80:33:3c:5e:0a:e2:c7:30:5d:ab:60:
02:1d:06:af:91:14:5e:57:45:f8:02:62:43:15:02:
0e:2a:12:1e:70:68:a6:6f:50:d3:d8:1e:16:81:6b:
9f:dd:e5:34:62:99:68:35:34:0f:75:96:2a:c7:12:
6e:84:d4:b8:1e:2d:89:c5:d4:35:54:8e:b3:a2:05:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:62:8C:BD:8F:21:24:6D:6A:63:DB:5D:12:C8:74:D5:64:40:38:13
X509v3 Authority Key Identifier:
keyid:4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/_WKMvY8hJG1qY9tdEsh01WRAOBM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.210.0/23
Signature Algorithm: sha256WithRSAEncryption
24:de:66:4c:e3:5e:49:f3:c5:d8:86:c1:69:17:9c:f5:84:2a:
fb:60:a4:0d:23:c0:e9:d0:f5:96:5a:d1:99:a4:60:9b:4c:85:
10:94:c4:72:9d:8d:8f:2d:67:c0:59:ef:ce:76:f2:e0:04:ef:
33:be:55:14:d0:2d:3c:ef:1a:96:bf:a6:06:8f:30:de:55:8f:
d6:50:2b:0e:d9:43:ef:67:df:e9:2a:50:94:dd:f3:73:c5:da:
82:1d:9b:a1:ae:3d:3d:7e:88:55:9a:5b:f8:16:73:41:67:83:
5e:52:fd:05:5d:95:f1:51:13:d8:af:85:52:50:32:7b:c2:2f:
93:4e:4e:75:8f:7a:e4:ec:0d:f3:b9:11:cc:e2:4c:57:69:d6:
e6:f9:a8:59:da:bb:b5:65:51:49:bf:c4:45:a8:1c:7f:ba:e4:
fd:88:49:77:b1:1b:e1:15:12:46:64:bc:e1:28:f2:ef:46:1e:
46:0d:0d:3e:57:9e:ce:b0:05:9e:40:78:2d:14:b1:45:ca:7a:
af:cd:44:02:67:97:da:99:13:b7:bb:60:b3:aa:c2:35:38:96:
61:3e:0c:74:fc:a6:a8:55:aa:7f:c7:8a:40:37:68:5e:10:8c:
b8:80:5f:b6:96:2b:40:2e:ab:76:8b:96:75:0d:73:cf:47:f4:
13:ba:67:f8
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEE3
QjVGRkY5N0I4OUM4N0JEQkZENDYxNjRFRTkyNEE4N0Q2OTZFOTAeFw0yNTAyMTAx
MzQzMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZENjI4Q0JEOEYyMTI0
NkQ2QTYzREI1RDEyQzg3NEQ1NjQ0MDM4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXuRmogk/DQ6ibPmQ8hOlK3v1WdBTT7BIwQfJCeBWlmjSc7RWX
mvD905DCIYjcAWR2JMWEh2lYpLDwFR9D4ZLK8KvQQxyS0tB80ms7Ycoo4+CLyWi8
B5uochjSm1hsRzdJ82NEAWBNdXN9jQrVrtQh0ZoF/5nznv4CFlTGI8b0HnlMvH6B
4c00D6RXxg8AdXXTKdhDx3/HqxWN5nqLFfryx+GPPBKmKbSu0f2o7y5zTiGnGlo0
+oaAMzxeCuLHMF2rYAIdBq+RFF5XRfgCYkMVAg4qEh5waKZvUNPYHhaBa5/d5TRi
mWg1NA91lirHEm6E1LgeLYnF1DVUjrOiBXRNAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU/WKMvY8hJG1qY9tdEsh01WRAOBMwHwYDVR0jBBgwFoAUSntf/5e4nIe9v9Rh
ZO6SSofWlukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1JPV04v
U250Zl81ZTRuSWU5djlSaFpPNlNTb2ZXbHVrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9TbnRmXzVlNG5JZTl2OVJoWk82U1NvZldsdWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUk9XTi9fV0tNdlk4aEpHMXFZOXRkRXNo
MDFXUkFPQk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ//S
MA0GCSqGSIb3DQEBCwUAA4IBAQAk3mZM415J88XYhsFpF5z1hCr7YKQNI8Dp0PWW
WtGZpGCbTIUQlMRynY2PLWfAWe/OdvLgBO8zvlUU0C087xqWv6YGjzDeVY/WUCsO
2UPvZ9/pKlCU3fNzxdqCHZuhrj09fohVmlv4FnNBZ4NeUv0FXZXxURPYr4VSUDJ7
wi+TTk51j3rk7A3zuRHM4kxXadbm+ahZ2ru1ZVFJv8RFqBx/uuT9iEl3sRvhFRJG
ZLzhKPLvRh5GDQ0+V57OsAWeQHgtFLFFynqvzUQCZ5famRO3u2CzqsI1OJZhPgx0
/KaoVap/x4pAN2heEIy4gF+2litALqt2i5Z1DXPPR/QTumf4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:11 2025 by rpki-client