Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa
File: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (raw, json)
Hash identifier: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=
Subject key identifier: C6:A5:0E:EB:86:21:8F:1B:E7:C6:9E:BC:6E:C7:52:0E:02:35:84:27
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0E14
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa
Signing time: Mon 10 Feb 2025 13:59:24 +0000
ROA not before: Mon 10 Feb 2025 13:59:24 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 54994
IP address blocks: 61.61.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3604 (0xe14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Feb 10 13:59:24 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C6A50EEB86218F1BE7C69EBC6EC7520E02358427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:af:83:4e:44:2c:06:8d:89:60:42:95:a2:
7c:f4:46:a3:09:a0:9d:3e:90:30:60:78:87:05:27:
d3:45:44:9d:a0:90:c7:87:21:6d:22:0d:80:91:13:
5d:7e:b6:59:58:66:e7:7a:4f:63:76:d1:bf:8d:a1:
fb:0d:10:c2:eb:34:ac:4b:f8:05:7c:a3:ff:0a:fa:
20:71:9d:92:d4:2a:3e:e4:f0:b4:18:23:f8:32:ed:
07:b7:b9:f9:db:e3:9a:d8:04:84:36:c9:b5:9b:a9:
98:2a:44:f9:3c:8b:6f:92:91:5f:f7:78:62:c8:10:
26:22:39:6b:f4:ff:aa:a1:ba:d0:7e:cd:29:1a:70:
77:28:01:02:29:2f:4a:ba:5b:90:d1:6f:a1:81:b1:
86:ae:f1:bc:da:6c:b3:f0:43:da:5e:2a:33:f3:a6:
61:db:0c:d5:51:e6:f9:25:e5:dd:ec:b5:73:54:75:
4b:d6:b5:50:39:b4:ba:82:8b:3d:2f:8a:ba:9c:da:
52:b8:b1:cb:83:43:2b:60:91:42:a4:95:7c:55:c3:
59:2d:50:ac:bf:c8:53:20:c5:6f:45:1a:df:25:37:
1e:a3:9c:d0:a2:f9:2d:b7:c1:1c:e1:f9:71:dc:78:
65:ba:c1:df:f4:5b:ed:9e:be:3f:b8:32:3c:14:c6:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:0E:EB:86:21:8F:1B:E7:C6:9E:BC:6E:C7:52:0E:02:35:84:27
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.163.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3d:26:4b:c6:af:bd:82:82:c4:e5:fc:24:4f:43:1c:19:37:
9c:b5:04:f1:49:76:ee:4c:ec:93:0e:4a:ce:07:01:4d:94:d8:
87:fe:d5:79:63:81:e2:0a:82:46:d0:db:fa:9a:bc:b5:15:b3:
97:40:a3:61:3b:2c:10:e1:73:9d:e2:3f:df:b1:0b:01:bf:11:
51:49:4a:62:af:80:ca:d2:0a:7c:50:a7:46:74:ef:43:f7:0a:
7a:28:35:a9:2a:1a:42:38:63:45:08:31:34:40:f6:09:bd:b1:
98:43:dc:05:3f:30:31:09:01:85:6e:6f:cb:cd:43:82:b6:9c:
3e:c0:6a:5b:fa:f2:15:87:30:a5:0c:08:4f:70:5d:55:ee:c8:
dd:b1:99:77:2d:6c:a3:57:e3:75:1b:49:30:2a:90:14:5b:ab:
71:3b:8f:86:9a:f6:22:38:69:d1:45:1b:df:bf:19:2d:80:95:
e0:1d:bc:45:d2:67:de:eb:bb:97:0c:2d:f8:b6:ef:5d:8f:ce:
83:e8:4c:fa:75:4e:17:ce:6f:54:86:4e:2e:b2:d3:23:ab:42:
e1:94:40:1f:e0:d7:d8:7a:83:65:e7:8b:0c:e8:d7:f1:34:90:
55:37:b8:74:ff:5c:70:58:0c:2e:74:4e:33:6f:ea:eb:17:90:
79:ec:3c:6d
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx
MzU5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2QTUwRUVCODYyMThG
MUJFN0M2OUVCQzZFQzc1MjBFMDIzNTg0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxrK+DTkQsBo2JYEKVonz0RqMJoJ0+kDBgeIcFJ9NFRJ2gkMeH
IW0iDYCRE11+tllYZud6T2N20b+NofsNEMLrNKxL+AV8o/8K+iBxnZLUKj7k8LQY
I/gy7Qe3ufnb45rYBIQ2ybWbqZgqRPk8i2+SkV/3eGLIECYiOWv0/6qhutB+zSka
cHcoAQIpL0q6W5DRb6GBsYau8bzabLPwQ9peKjPzpmHbDNVR5vkl5d3stXNUdUvW
tVA5tLqCiz0virqc2lK4scuDQytgkUKklXxVw1ktUKy/yFMgxW9FGt8lNx6jnNCi
+S23wRzh+XHceGW6wd/0W+2evj+4MjwUxgrDAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUxqUO64Yhjxvnxp68bsdSDgI1hCcwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3hxVU82NFloanh2bnhwNjhic2RTRGdJ
MWhDYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PaMwDQYJ
KoZIhvcNAQELBQADggEBAAc9JkvGr72CgsTl/CRPQxwZN5y1BPFJdu5M7JMOSs4H
AU2U2If+1XljgeIKgkbQ2/qavLUVs5dAo2E7LBDhc53iP9+xCwG/EVFJSmKvgMrS
CnxQp0Z070P3CnooNakqGkI4Y0UIMTRA9gm9sZhD3AU/MDEJAYVub8vNQ4K2nD7A
alv68hWHMKUMCE9wXVXuyN2xmXctbKNX43UbSTAqkBRbq3E7j4aa9iI4adFFG9+/
GS2AleAdvEXSZ97ru5cMLfi2712PzoPoTPp1ThfOb1SGTi6y0yOrQuGUQB/g19h6
g2Xniwzo1/E0kFU3uHT/XHBYDC50TjNv6usXkHnsPG0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:27 2025 by rpki-client