Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa
File: vEABdh9QnNyKGLllW8gMaYux36U.roa (raw, json)
Hash identifier: mgujBs6ejGeJNsujhXWhV77MSQB3Z4fas5aWBgv0rPo=
Subject key identifier: BC:40:01:76:1F:50:9C:DC:8A:18:B9:65:5B:C8:0C:69:8B:B1:DF:A5
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0DB0
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa
Signing time: Mon 10 Feb 2025 14:06:12 +0000
ROA not before: Mon 10 Feb 2025 14:06:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9416
IP address blocks: 115.43.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Feb 10 14:06:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BC4001761F509CDC8A18B9655BC80C698BB1DFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:69:2d:0e:64:4f:57:77:3d:5b:b8:95:30:
ff:19:9f:a5:27:02:d5:ff:3b:ac:61:67:4d:bf:3a:
5f:cf:5c:23:7f:af:44:2b:af:2f:5a:98:02:5b:cd:
78:05:73:dd:3a:98:71:54:85:37:98:fb:8e:65:7a:
8e:ce:22:40:8e:1f:e9:c6:92:49:0b:95:40:71:2f:
25:f7:d1:ae:65:e2:cc:14:a7:bf:b8:02:35:d5:1d:
81:cc:d3:69:7b:1c:ef:38:54:50:24:d7:c0:7b:28:
39:20:55:30:b2:fd:c9:82:9a:c0:50:18:76:cb:c1:
3f:26:ec:0d:d5:c3:1a:7d:ec:8e:45:10:57:a0:de:
86:20:61:cd:16:b5:57:83:70:a8:56:cf:4d:08:a5:
5e:fc:7e:db:61:4c:bb:17:eb:c3:93:d0:d5:80:40:
5c:8a:fd:89:60:81:ce:96:f9:e8:bf:f7:18:cd:20:
22:ce:66:34:2f:41:14:9d:b2:af:b6:bd:94:19:4f:
bd:4e:f2:80:47:1d:9b:7f:a2:a9:f7:8b:01:15:a8:
e3:ab:fd:60:7e:58:d1:8e:4e:b6:89:02:5a:ee:bd:
c5:6e:7b:7d:a4:a6:14:56:c1:2c:b5:b0:b1:f5:fa:
97:40:f2:6c:87:5d:53:67:c2:29:a4:2c:f3:91:23:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:01:76:1F:50:9C:DC:8A:18:B9:65:5B:C8:0C:69:8B:B1:DF:A5
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/vEABdh9QnNyKGLllW8gMaYux36U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6c:b1:dd:2e:8b:2c:6c:4b:b9:29:02:a3:1e:c7:fc:11:00:af:
8f:77:1c:eb:04:b7:49:00:03:a0:6b:8e:5e:c4:8c:07:52:f4:
4f:e8:5f:ed:55:06:f2:a2:3a:0b:2f:7a:81:db:b9:9d:79:4f:
9b:59:e2:7f:d7:0b:4f:eb:42:7e:6c:1d:d3:c9:8a:d2:48:71:
ea:f6:79:b4:55:a5:a2:21:fa:af:72:20:77:0b:65:31:08:62:
dd:6d:5a:65:d1:e8:37:a6:e1:14:07:ce:f9:b2:ad:2a:3f:10:
70:88:a1:85:51:77:91:4d:b2:a4:9e:84:f5:e2:57:7f:98:8a:
f3:e6:f6:f4:34:92:52:f6:17:c6:11:ce:f2:22:9b:17:3d:5a:
11:1e:d0:c0:b2:b5:44:20:80:d7:ce:da:40:07:87:2c:08:a1:
b0:56:2d:39:2e:1a:a4:0c:80:fa:6a:8e:94:50:96:54:e1:48:
b0:4f:15:84:7c:ee:b1:16:51:b5:64:8a:05:63:f5:f3:6b:c3:
8d:1c:03:87:ae:8d:18:06:76:07:f5:bf:c8:40:2a:b2:c9:df:
25:75:34:48:c3:b3:2e:49:7d:a8:2b:4d:2f:ca:c0:4d:b0:d3:
32:21:43:f1:42:29:4d:1e:53:31:11:23:77:9b:e2:11:d2:eb:
3d:ab:37:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTAyMTAx
NDA2MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDNDAwMTc2MUY1MDlD
REM4QTE4Qjk2NTVCQzgwQzY5OEJCMURGQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI22ktDmRPV3c9W7iVMP8Zn6UnAtX/O6xhZ02/Ol/PXCN/r0Qr
ry9amAJbzXgFc906mHFUhTeY+45leo7OIkCOH+nGkkkLlUBxLyX30a5l4swUp7+4
AjXVHYHM02l7HO84VFAk18B7KDkgVTCy/cmCmsBQGHbLwT8m7A3Vwxp97I5FEFeg
3oYgYc0WtVeDcKhWz00IpV78ftthTLsX68OT0NWAQFyK/Ylggc6W+ei/9xjNICLO
ZjQvQRSdsq+2vZQZT71O8oBHHZt/oqn3iwEVqOOr/WB+WNGOTraJAlruvcVue32k
phRWwSy1sLH1+pdA8myHXVNnwimkLPORI7YzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvEABdh9QnNyKGLllW8gMaYux36UwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL3ZFQUJkaDlRbk55S0dMbGxX
OGdNYVl1eDM2VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz
K4AwDQYJKoZIhvcNAQELBQADggEBAGyx3S6LLGxLuSkCox7H/BEAr493HOsEt0kA
A6Brjl7EjAdS9E/oX+1VBvKiOgsveoHbuZ15T5tZ4n/XC0/rQn5sHdPJitJIcer2
ebRVpaIh+q9yIHcLZTEIYt1tWmXR6Dem4RQHzvmyrSo/EHCIoYVRd5FNsqSehPXi
V3+YivPm9vQ0klL2F8YRzvIimxc9WhEe0MCytUQggNfO2kAHhywIobBWLTkuGqQM
gPpqjpRQllThSLBPFYR87rEWUbVkigVj9fNrw40cA4eujRgGdgf1v8hAKrLJ3yV1
NEjDsy5JfagrTS/KwE2w0zIhQ/FCKU0eUzERI3eb4hHS6z2rNyA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:38 2025 by rpki-client