Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa
File: Ob04RhHg0XnGKEH-H7TQkTvYSas.roa (raw, json)
Hash identifier: OQeYf9GNnUuRyQvk1EUUupZ7efJwutmvY1ukX4T6K8Y=
Subject key identifier: 39:BD:38:46:11:E0:D1:79:C6:28:41:FE:1F:B4:D0:91:3B:D8:49:AB
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0D6F
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa
Signing time: Mon 26 Aug 2024 05:19:48 +0000
ROA not before: Mon 26 Aug 2024 05:19:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 61.61.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3439 (0xd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Aug 26 05:19:48 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39BD384611E0D179C62841FE1FB4D0913BD849AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:29:e0:f1:52:b6:d1:01:03:54:d4:77:15:
40:a3:f3:54:27:d6:58:71:4f:6d:cd:69:10:6f:a5:
4f:11:56:e3:b3:81:80:44:55:97:22:69:de:b3:e7:
59:ba:4f:6c:4f:27:5f:f4:bf:dc:97:75:46:17:3c:
7d:62:3e:04:4b:a9:11:4c:e7:37:ae:7d:1a:25:a9:
ca:22:05:ad:fc:55:38:e6:64:6e:76:1b:ff:4c:c2:
44:48:26:db:57:9e:ef:fc:2f:fb:7a:0d:cb:0b:76:
25:8e:2d:b5:57:1a:f8:55:2e:f0:0b:1f:7b:cd:b8:
fc:de:c6:6f:4b:53:2f:87:40:28:54:f4:7b:49:86:
8d:f6:a6:23:10:16:96:1b:12:e9:1c:31:1b:3a:38:
d3:a6:31:a1:d8:40:c1:6d:91:6f:5a:4b:50:4c:6d:
d8:c0:2c:b1:57:fc:81:e3:14:28:b0:8c:7e:7c:c0:
8d:1b:54:90:c3:45:94:57:44:12:6b:35:70:1b:22:
a9:b2:f1:ea:69:fc:5f:02:1c:b9:54:b5:ce:9b:cc:
60:05:d8:b8:51:c8:fc:cb:4d:4a:a7:28:ba:64:b3:
70:83:bd:77:1a:c9:f1:43:63:58:e9:2f:55:fb:b6:
1b:d8:53:8c:bf:f3:cd:d1:3e:e6:80:f4:a4:52:fc:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:38:46:11:E0:D1:79:C6:28:41:FE:1F:B4:D0:91:3B:D8:49:AB
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.4.0/23
Signature Algorithm: sha256WithRSAEncryption
81:b3:6a:5e:f7:e6:9e:38:e8:6b:1d:31:72:41:d3:f2:72:30:
f6:a7:45:95:53:64:49:65:d5:ea:ea:65:94:99:46:a2:57:23:
39:91:05:d4:6c:7e:9e:10:67:dd:21:fa:ba:26:ae:98:6a:66:
a8:92:6a:e8:25:68:c9:bb:57:b1:ff:eb:91:55:4e:09:eb:f0:
7c:59:45:ee:10:27:64:64:9e:ae:28:8d:8d:b8:42:3e:c8:b1:
ba:ef:89:d4:92:89:7e:cc:40:77:c6:1d:24:52:41:ac:c0:1c:
6e:0f:46:24:ea:87:84:b6:ee:6f:71:b2:ae:86:6c:61:cc:81:
ec:d8:28:11:38:ea:c0:9c:22:3b:6d:fd:4d:21:d2:ef:31:17:
2d:2d:d3:13:3d:c6:c9:87:71:ba:4f:67:e4:b6:b9:4a:ad:4f:
2f:ae:f6:3e:73:d3:e7:ab:e4:83:f0:a7:06:d2:f1:eb:2c:a3:
63:6d:79:08:c3:4d:f4:fa:6b:13:e8:c7:54:67:11:5c:e4:61:
3f:5a:de:cf:c5:4d:b9:9a:8b:3f:a1:9f:68:e3:24:3e:eb:aa:
39:d4:11:17:8f:e5:bf:c2:e1:03:84:1c:86:bf:4c:df:27:c0:
99:98:cd:50:1c:1c:11:67:a5:1d:fd:54:da:6f:86:2d:53:b1:
6c:95:b5:ea
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw
NTE5NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QkQzODQ2MTFFMEQx
NzlDNjI4NDFGRTFGQjREMDkxM0JEODQ5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOAing8VK20QEDVNR3FUCj81Qn1lhxT23NaRBvpU8RVuOzgYBE
VZciad6z51m6T2xPJ1/0v9yXdUYXPH1iPgRLqRFM5zeufRolqcoiBa38VTjmZG52
G/9MwkRIJttXnu/8L/t6DcsLdiWOLbVXGvhVLvALH3vNuPzexm9LUy+HQChU9HtJ
ho32piMQFpYbEukcMRs6ONOmMaHYQMFtkW9aS1BMbdjALLFX/IHjFCiwjH58wI0b
VJDDRZRXRBJrNXAbIqmy8epp/F8CHLlUtc6bzGAF2LhRyPzLTUqnKLpks3CDvXca
yfFDY1jpL1X7thvYU4y/883RPuaA9KRS/OZ1AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUOb04RhHg0XnGKEH+H7TQkTvYSaswHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL09iMDRSaEhnMFhuR0tFSC1IN1RRa1R2
WVNhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE9PQQwDQYJ
KoZIhvcNAQELBQADggEBAIGzal735p446GsdMXJB0/JyMPanRZVTZEll1erqZZSZ
RqJXIzmRBdRsfp4QZ90h+romrphqZqiSauglaMm7V7H/65FVTgnr8HxZRe4QJ2Rk
nq4ojY24Qj7IsbrvidSSiX7MQHfGHSRSQazAHG4PRiTqh4S27m9xsq6GbGHMgezY
KBE46sCcIjtt/U0h0u8xFy0t0xM9xsmHcbpPZ+S2uUqtTy+u9j5z0+er5IPwpwbS
8esso2NteQjDTfT6axPox1RnEVzkYT9a3s/FTbmaiz+hn2jjJD7rqjnUEReP5b/C
4QOEHIa/TN8nwJmYzVAcHBFnpR39VNpvhi1TsWyVteo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:12:38 2025 by rpki-client