Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa
File: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (raw, json)
Hash identifier: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=
Subject key identifier: 08:BC:2D:3D:EE:9D:C6:93:DD:61:90:67:C3:38:CC:B3:78:B1:D3:31
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DFA
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa
Signing time: Mon 10 Feb 2025 13:59:17 +0000
ROA not before: Mon 10 Feb 2025 13:59:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.78.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3578 (0xdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=08BC2D3DEE9DC693DD619067C338CCB378B1D331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:b2:39:39:19:f8:b7:39:e9:66:a0:e0:7c:
60:bc:1b:63:ab:eb:74:08:1f:50:8e:d8:e0:4a:73:
cf:92:8b:1c:b6:3c:4a:9e:b7:a1:2e:14:9b:f8:9c:
e1:65:b7:22:e6:cd:47:7a:52:0b:da:67:69:86:60:
a3:ac:44:22:3d:1d:3e:3a:6c:12:65:ad:c0:a8:cb:
37:e6:af:35:01:39:76:57:ab:6b:1d:b0:3f:12:99:
31:65:b2:80:c4:e1:23:83:a6:84:43:9c:9b:89:c0:
ea:e7:ed:09:81:03:db:50:e8:dd:ec:6d:90:94:f4:
c7:ca:57:75:0d:17:2c:9d:d5:fd:ed:c9:1d:7d:dc:
b4:56:68:fe:16:70:8d:e6:b4:b9:3a:f3:ab:f7:99:
e8:7b:e0:ca:43:8e:1f:54:0c:e3:f0:31:fa:cc:83:
86:29:39:62:f5:10:6c:25:4a:a8:c2:7f:d7:c3:55:
13:c5:28:8c:6b:87:2c:98:22:26:cd:68:a8:95:1c:
fe:00:98:11:07:95:bf:3c:a1:6d:58:72:6f:73:da:
fc:76:d3:1a:07:e2:55:17:95:d2:3a:a5:ab:46:27:
7a:a5:80:6e:13:58:d1:c3:65:35:6c:37:54:8a:46:
1d:27:4b:1a:30:22:8a:6f:a5:03:44:50:97:5d:1b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:2D:3D:EE:9D:C6:93:DD:61:90:67:C3:38:CC:B3:78:B1:D3:31
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a3:91:a3:c6:dd:2a:5f:2e:1e:e7:78:45:01:99:ca:41:a6:
15:6d:37:76:d6:1a:87:28:0e:b9:6b:34:c5:08:68:cf:9c:ba:
87:d6:e1:5a:fd:65:9d:37:89:51:58:ed:d2:c0:fa:88:75:ce:
41:95:8d:43:46:f9:71:c4:4d:64:47:24:c0:52:26:4d:f9:ec:
c6:60:53:ef:6d:44:18:85:d4:38:04:a6:0b:cd:45:70:cb:54:
3c:ef:e1:ec:45:fa:ce:e6:fe:02:7f:14:0e:06:26:cf:48:71:
ec:fa:cb:bf:0b:5b:27:94:5d:c5:f4:1c:4b:3b:33:9d:db:85:
6a:a8:e1:83:0c:85:98:14:fb:1b:58:bc:ef:6e:74:76:bd:e6:
f8:e6:de:63:a1:4c:0c:7f:a7:e8:b2:82:93:50:70:08:d5:04:
7a:1f:e8:41:79:5d:a8:eb:cf:c2:0b:f6:40:28:46:02:6d:5c:
d2:6c:03:a8:f1:f5:a2:c6:1c:e9:02:5a:ab:f6:05:fc:55:de:
1c:98:86:c7:76:35:e7:dd:1c:00:91:39:74:23:73:16:f8:ff:
8b:d8:3c:74:e7:9e:eb:ba:0d:e4:70:6e:3e:20:1e:2c:7f:43:
ac:e1:a7:c3:c4:a9:02:8b:e1:48:c7:3c:79:3b:40:71:1d:f5:
de:e1:04:89
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx
MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4QkMyRDNERUU5REM2
OTNERDYxOTA2N0MzMzhDQ0IzNzhCMUQzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCst7I5ORn4tznpZqDgfGC8G2Or63QIH1CO2OBKc8+Sixy2PEqe
t6EuFJv4nOFltyLmzUd6UgvaZ2mGYKOsRCI9HT46bBJlrcCoyzfmrzUBOXZXq2sd
sD8SmTFlsoDE4SODpoRDnJuJwOrn7QmBA9tQ6N3sbZCU9MfKV3UNFyyd1f3tyR19
3LRWaP4WcI3mtLk686v3meh74MpDjh9UDOPwMfrMg4YpOWL1EGwlSqjCf9fDVRPF
KIxrhyyYIibNaKiVHP4AmBEHlb88oW1Ycm9z2vx20xoH4lUXldI6patGJ3qlgG4T
WNHDZTVsN1SKRh0nSxowIopvpQNEUJddG3AFAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUCLwtPe6dxpPdYZBnwzjMs3ix0zEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0NMd3RQZTZkeHBQZFlaQm53empNczNp
eDB6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTTggwDQYJ
KoZIhvcNAQELBQADggEBAHmjkaPG3SpfLh7neEUBmcpBphVtN3bWGocoDrlrNMUI
aM+cuofW4Vr9ZZ03iVFY7dLA+oh1zkGVjUNG+XHETWRHJMBSJk357MZgU+9tRBiF
1DgEpgvNRXDLVDzv4exF+s7m/gJ/FA4GJs9Icez6y78LWyeUXcX0HEs7M53bhWqo
4YMMhZgU+xtYvO9udHa95vjm3mOhTAx/p+iygpNQcAjVBHof6EF5Xajrz8IL9kAo
RgJtXNJsA6jx9aLGHOkCWqv2BfxV3hyYhsd2NefdHACROXQjcxb4/4vYPHTnnuu6
DeRwbj4gHix/Q6zhp8PEqQKL4UjHPHk7QHEd9d7hBIk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:21 2025 by rpki-client