Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa
File: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (raw, json)
Hash identifier: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=
Subject key identifier: FD:5E:8B:A0:CF:FE:3D:1F:24:3B:EF:53:1D:7E:2C:63:07:A6:32:EC
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0DF7
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa
Signing time: Mon 10 Feb 2025 13:59:17 +0000
ROA not before: Mon 10 Feb 2025 13:59:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 61.61.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FD5E8BA0CFFE3D1F243BEF531D7E2C6307A632EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:4e:d4:e8:47:c6:bf:1f:4b:4a:18:a1:9e:
d0:08:0e:64:c0:7f:69:24:c3:8f:03:6a:e7:30:36:
c0:6d:a1:96:0e:0d:a0:39:16:1d:ab:cc:c5:45:99:
84:7a:ab:5b:72:3e:33:f7:47:98:4e:73:87:89:1b:
18:42:6a:7d:46:a8:e7:ff:3a:9a:66:a7:4a:3d:cb:
32:c2:65:af:e2:82:4c:32:2f:54:0f:57:c0:56:c1:
13:66:10:cb:b3:c3:76:07:93:77:88:06:44:b3:74:
7e:77:56:bb:0d:b0:6a:4d:9c:a3:73:9d:94:65:47:
8d:cd:18:9b:69:f7:a4:79:07:ed:04:13:c6:62:22:
4d:08:61:f7:74:0a:de:40:58:55:07:1e:7e:04:9f:
7b:2f:ec:77:21:ef:32:99:0e:1c:77:96:ff:a9:54:
02:cc:a0:f1:4a:af:52:43:dd:96:1d:fd:c1:ed:f2:
e7:b1:b9:5b:d6:91:9a:01:aa:2b:42:f3:68:74:eb:
f4:a5:d4:45:82:6a:b2:ff:d3:15:55:58:97:4e:b5:
14:fc:24:4d:4a:62:89:17:81:ae:29:1f:23:ee:0d:
ac:e9:06:83:3b:bd:c5:84:6c:4f:e8:36:60:1c:9f:
11:e1:b9:33:88:b4:78:6e:0d:1f:eb:2d:6a:c5:e7:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:8B:A0:CF:FE:3D:1F:24:3B:EF:53:1D:7E:2C:63:07:A6:32:EC
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.44.0/22
Signature Algorithm: sha256WithRSAEncryption
69:03:43:3e:b0:7f:7e:b0:d9:02:e5:93:04:8a:8c:ee:52:11:
e4:46:21:e3:65:21:d3:a9:12:ae:ed:3c:69:a1:ba:ef:7f:18:
df:18:18:6f:b0:b2:80:73:d1:ab:40:6f:f3:3b:21:96:c9:14:
18:7f:66:02:17:7c:77:63:a0:26:f8:1e:74:73:a7:e2:63:71:
b3:45:0a:61:83:59:33:38:52:96:cb:2b:71:cf:3b:b1:52:21:
c2:63:1b:df:00:cf:04:83:30:e1:2b:64:11:11:e1:7d:c1:c6:
d5:6d:10:a5:a8:86:b8:05:7e:5e:c4:3f:37:29:50:d0:60:5c:
f4:e3:60:69:3e:78:3c:d6:63:46:39:fe:f8:1e:9b:23:b6:56:
93:77:c2:58:8a:c2:b9:92:85:32:66:51:2b:2f:a0:c2:ac:40:
7b:42:9d:15:12:7a:d9:c1:70:f5:06:14:89:16:9f:f9:cf:8c:
ca:30:3b:4e:54:e2:fc:1a:d9:db:cf:f4:11:de:5d:5b:46:cb:
fd:e4:a3:52:f9:6a:a1:cc:ac:25:70:c0:a1:b6:23:56:22:29:
70:67:f1:ca:c7:3d:5f:93:9f:3f:61:5f:5d:57:ee:90:d7:6b:
9b:01:31:3c:9b:88:2d:79:c4:36:12:1a:5a:70:9a:6f:1e:a8:
b1:b7:b9:01
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx
MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZENUU4QkEwQ0ZGRTNE
MUYyNDNCRUY1MzFEN0UyQzYzMDdBNjMyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwTk7U6EfGvx9LShihntAIDmTAf2kkw48DaucwNsBtoZYODaA5
Fh2rzMVFmYR6q1tyPjP3R5hOc4eJGxhCan1GqOf/Oppmp0o9yzLCZa/igkwyL1QP
V8BWwRNmEMuzw3YHk3eIBkSzdH53VrsNsGpNnKNznZRlR43NGJtp96R5B+0EE8Zi
Ik0IYfd0Ct5AWFUHHn4En3sv7Hch7zKZDhx3lv+pVALMoPFKr1JD3ZYd/cHt8uex
uVvWkZoBqitC82h06/Sl1EWCarL/0xVVWJdOtRT8JE1KYokXga4pHyPuDazpBoM7
vcWEbE/oNmAcnxHhuTOItHhuDR/rLWrF54q3AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU/V6LoM/+PR8kO+9THX4sYwemMuwwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL19WNkxvTV8tUFI4a08tOVRIWDRzWXdl
bU11dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PSwwDQYJ
KoZIhvcNAQELBQADggEBAGkDQz6wf36w2QLlkwSKjO5SEeRGIeNlIdOpEq7tPGmh
uu9/GN8YGG+wsoBz0atAb/M7IZbJFBh/ZgIXfHdjoCb4HnRzp+JjcbNFCmGDWTM4
UpbLK3HPO7FSIcJjG98AzwSDMOErZBER4X3BxtVtEKWohrgFfl7EPzcpUNBgXPTj
YGk+eDzWY0Y5/vgemyO2VpN3wliKwrmShTJmUSsvoMKsQHtCnRUSetnBcPUGFIkW
n/nPjMowO05U4vwa2dvP9BHeXVtGy/3ko1L5aqHMrCVwwKG2I1YiKXBn8crHPV+T
nz9hX11X7pDXa5sBMTybiC15xDYSGlpwmm8eqLG3uQE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:09:56 2025 by rpki-client