Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa
File: ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa (raw, json)
Hash identifier: 8BM6aYi6/zq+qcA5TVkLLzaFUCSmUPbOAziKkcLLkwI=
Subject key identifier: 64:F2:8D:FE:B0:EC:86:31:29:75:89:73:93:F7:3E:4D:DD:B2:4A:04
Certificate issuer: /CN=9B062D74C7F512F04AE60955C5456FC19755337F
Certificate serial: 0C96
Authority key identifier: 9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa
Signing time: Mon 10 Feb 2025 14:10:30 +0000
ROA not before: Mon 10 Feb 2025 14:10:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131601
IP address blocks: 114.29.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B062D74C7F512F04AE60955C5456FC19755337F
Validity
Not Before: Feb 10 14:10:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=64F28DFEB0EC86312975897393F73E4DDDB24A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:09:cb:6b:df:35:f0:7d:ae:3b:62:35:2c:
18:c6:bb:06:90:2d:fa:55:87:0e:f4:db:d1:57:4e:
90:f8:3f:0c:30:73:45:cb:23:71:e1:a2:da:87:bb:
03:28:5c:ab:f1:51:f3:70:43:d1:93:10:28:44:70:
d5:80:65:26:10:b1:35:71:de:40:a5:26:1d:2e:47:
bf:9a:3f:73:51:aa:1a:c0:7f:3f:5e:56:01:41:0a:
da:6d:f7:aa:17:df:c1:30:9f:87:a6:49:a8:48:99:
91:b8:f4:87:d5:1d:43:63:1e:2b:3d:be:e9:46:a1:
6f:a0:53:78:69:7a:82:5f:71:a7:51:f1:9f:24:30:
5c:7d:e6:ec:26:b3:fb:71:06:f4:19:3d:c6:c5:22:
c2:01:97:07:e5:41:7d:df:5b:5c:0d:f9:49:f8:b4:
ec:8d:c5:3d:a7:b5:e0:43:cf:5a:7f:22:c7:d9:f2:
85:9c:cd:30:af:50:d1:de:04:5d:57:11:42:c4:5c:
98:d7:8f:4b:4c:c3:78:67:1a:dd:d0:66:85:0a:e6:
3a:6d:9e:33:7f:7b:29:b5:41:7a:5c:9d:54:0c:72:
f5:9d:59:98:60:cb:b8:82:9e:68:d2:93:38:df:fe:
63:1d:14:fc:29:8c:e5:76:ff:1f:c0:4e:3d:92:70:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:8D:FE:B0:EC:86:31:29:75:89:73:93:F7:3E:4D:DD:B2:4A:04
X509v3 Authority Key Identifier:
keyid:9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/ZPKN_rDshjEpdYlzk_c-Td2ySgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.29.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b4:e4:09:13:3a:55:4d:50:52:b7:8b:32:51:55:00:af:d2:
cc:b8:54:b1:f2:eb:3f:64:75:c2:f0:7a:f2:c9:8e:9f:c0:89:
1f:ac:2f:1c:f7:a2:08:d6:49:1b:46:cc:a1:4c:bc:96:ba:00:
b0:4e:4f:3a:ac:3c:44:4e:16:79:35:4d:3b:e2:24:fb:f1:4e:
16:48:b3:44:6a:0a:2e:ab:4e:2a:f8:bc:8d:4d:1c:6e:46:cc:
8b:68:eb:64:98:ea:47:cc:cb:27:f3:ef:12:24:95:72:a6:41:
c8:d4:2f:f2:4c:7e:a2:cc:e1:7e:a6:28:d0:e3:ec:48:0a:cf:
ac:20:20:ed:59:70:6f:53:96:71:61:7d:e0:a0:1e:a8:b9:cf:
37:7c:1b:f8:23:be:16:7a:1d:d8:ed:78:18:2d:ef:73:a3:25:
bf:dc:f9:74:f7:a1:49:3b:52:81:e7:6d:fc:29:ce:ad:8c:cc:
d7:cc:f1:00:20:42:c5:c5:e9:21:a9:79:10:db:99:17:b5:e5:
0b:0b:7f:d6:a0:de:18:12:99:6c:7b:77:9d:31:34:ca:de:1b:
85:f0:84:b6:14:c9:03:fc:83:3c:1b:4d:2c:a8:09:de:19:b3:
e1:33:8a:35:ac:3f:f5:93:78:78:cd:52:ef:c2:60:e4:43:bb:
51:b8:57:6b
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUIw
NjJENzRDN0Y1MTJGMDRBRTYwOTU1QzU0NTZGQzE5NzU1MzM3RjAeFw0yNTAyMTAx
NDEwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0RjI4REZFQjBFQzg2
MzEyOTc1ODk3MzkzRjczRTRERERCMjRBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLBQnLa9818H2uO2I1LBjGuwaQLfpVhw7029FXTpD4Pwwwc0XL
I3HhotqHuwMoXKvxUfNwQ9GTEChEcNWAZSYQsTVx3kClJh0uR7+aP3NRqhrAfz9e
VgFBCtpt96oX38Ewn4emSahImZG49IfVHUNjHis9vulGoW+gU3hpeoJfcadR8Z8k
MFx95uwms/txBvQZPcbFIsIBlwflQX3fW1wN+Un4tOyNxT2nteBDz1p/IsfZ8oWc
zTCvUNHeBF1XEULEXJjXj0tMw3hnGt3QZoUK5jptnjN/eym1QXpcnVQMcvWdWZhg
y7iCnmjSkzjf/mMdFPwpjOV2/x/ATj2ScAVVAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUZPKN/rDshjEpdYlzk/c+Td2ySgQwHwYDVR0jBBgwFoAUmwYtdMf1EvBK5glV
xUVvwZdVM38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL213
WXRkTWYxRXZCSzVnbFZ4VVZ2d1pkVk0zOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
bXdZdGRNZjFFdkJLNWdsVnhVVnZ3WmRWTTM4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL1pQS05fckRzaGpFcGRZbHprX2MtVGQy
eVNnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfQwDQYJ
KoZIhvcNAQELBQADggEBAAq05AkTOlVNUFK3izJRVQCv0sy4VLHy6z9kdcLwevLJ
jp/AiR+sLxz3ogjWSRtGzKFMvJa6ALBOTzqsPEROFnk1TTviJPvxThZIs0RqCi6r
Tir4vI1NHG5GzIto62SY6kfMyyfz7xIklXKmQcjUL/JMfqLM4X6mKNDj7EgKz6wg
IO1ZcG9TlnFhfeCgHqi5zzd8G/gjvhZ6HdjteBgt73OjJb/c+XT3oUk7UoHnbfwp
zq2MzNfM8QAgQsXF6SGpeRDbmRe15QsLf9ag3hgSmWx7d50xNMreG4XwhLYUyQP8
gzwbTSyoCd4Zs+EzijWsP/WTeHjNUu/CYORDu1G4V2s=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:08 2025 by rpki-client