Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKMT/LsKkOaDd5DD2rF79gQf7OSz-TJc.roa
File: LsKkOaDd5DD2rF79gQf7OSz-TJc.roa (raw, json)
Hash identifier: LWJlUOOgutumqgjY0weOgu2bgzVed3/mp3Xm25qEzKM=
Subject key identifier: 2E:C2:A4:39:A0:DD:E4:30:F6:AC:5E:FD:81:07:FB:39:2C:FE:4C:97
Certificate issuer: /CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Certificate serial: 0E20
Authority key identifier: 48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/LsKkOaDd5DD2rF79gQf7OSz-TJc.roa
Signing time: Mon 10 Feb 2025 13:47:30 +0000
ROA not before: Mon 10 Feb 2025 13:47:30 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131645
IP address blocks: 2405:1540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Validity
Not Before: Feb 10 13:47:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2EC2A439A0DDE430F6AC5EFD8107FB392CFE4C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:ab:3c:5a:21:55:91:d6:57:ad:0b:7e:2c:
49:2a:04:9b:02:29:48:b5:bd:65:e0:8b:0c:97:6c:
01:5e:c4:09:eb:03:35:d2:8e:d9:8d:a9:30:6b:f5:
df:f0:9e:fc:0d:0f:e0:e0:52:18:de:57:b5:6d:2a:
be:5d:07:02:53:63:f8:75:43:80:95:c8:f5:ee:1f:
51:00:2d:14:e9:11:33:c4:03:52:76:b5:76:ba:0b:
2d:d5:17:b7:0c:5d:97:1b:40:76:6a:a6:5a:8b:52:
4a:be:50:e0:d6:93:10:ec:28:9b:51:43:6a:0c:0c:
fa:5f:e9:24:cb:79:58:4d:49:3e:69:66:25:11:84:
d0:13:d9:c4:2e:91:f1:9d:79:6d:38:04:47:42:30:
1e:92:be:94:52:cf:56:b0:bc:dd:81:64:e6:2b:b7:
09:f9:8a:0f:72:3e:82:42:1b:38:76:58:2b:16:53:
41:53:83:6d:0b:e2:c1:16:a5:f8:f0:3b:f3:18:a0:
8b:c4:57:9e:80:26:57:11:19:a7:2e:75:c6:c3:8f:
82:7b:d5:ca:7f:60:06:8d:96:ab:82:3b:96:14:64:
30:4f:55:32:ee:71:ce:1b:09:8d:00:33:12:c7:2e:
4d:a7:6f:da:fc:0e:4f:1f:25:41:be:45:be:56:6d:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:A4:39:A0:DD:E4:30:F6:AC:5E:FD:81:07:FB:39:2C:FE:4C:97
X509v3 Authority Key Identifier:
keyid:48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/SFQOE_iyyuhs0fjHJSg5pQePFqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/LsKkOaDd5DD2rF79gQf7OSz-TJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:1540::/32
Signature Algorithm: sha256WithRSAEncryption
7a:23:ca:3a:9f:3e:c7:5f:d6:75:e4:65:f6:6f:46:20:7c:b2:
80:d6:dd:53:25:f7:41:fe:7b:70:1b:ee:8c:76:dc:1e:8b:f5:
4d:2f:db:50:5f:2c:a0:9a:ae:d0:3c:54:85:c8:b3:1f:2b:e7:
e9:2b:d0:fa:35:0f:ad:df:38:05:2a:b9:87:b2:91:94:d0:3d:
aa:47:81:fe:aa:5b:b1:d4:7d:f5:e7:f4:e1:54:3d:0a:32:3b:
62:3f:f9:08:19:e2:dc:a7:97:bc:e3:e5:58:0a:f3:72:32:1b:
c4:54:67:25:1a:c3:a1:9c:21:5a:5c:8b:11:e4:3e:79:df:96:
8f:c7:cf:5e:85:a1:3a:34:5f:a7:d8:90:d3:19:5e:1a:c3:4e:
fe:62:65:c5:37:c9:f9:bd:73:2e:49:37:48:c2:1f:4d:b4:a4:
c1:ce:4d:37:5c:6b:c6:16:06:7b:50:6b:59:2c:cf:f0:32:b0:
a4:58:21:78:9f:30:70:f8:cd:9d:c3:b8:2f:08:14:63:c5:dc:
63:5a:18:d0:b8:c1:62:a9:46:7a:61:75:89:3b:32:b3:48:e6:
94:52:9b:0c:b9:e3:4d:b6:d5:08:3c:80:b1:24:d5:4e:a5:2f:
f4:0a:98:63:e1:54:28:46:b5:f8:35:d8:25:3e:7f:06:4f:1f:
99:66:e5:9f
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg1
NDBFMTNGOEIyQ0FFODZDRDFGOEM3MjUyODM5QTUwNzhGMTZBNTAeFw0yNTAyMTAx
MzQ3MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFQzJBNDM5QTBEREU0
MzBGNkFDNUVGRDgxMDdGQjM5MkNGRTRDOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWTKs8WiFVkdZXrQt+LEkqBJsCKUi1vWXgiwyXbAFexAnrAzXS
jtmNqTBr9d/wnvwND+DgUhjeV7VtKr5dBwJTY/h1Q4CVyPXuH1EALRTpETPEA1J2
tXa6Cy3VF7cMXZcbQHZqplqLUkq+UODWkxDsKJtRQ2oMDPpf6STLeVhNST5pZiUR
hNAT2cQukfGdeW04BEdCMB6SvpRSz1awvN2BZOYrtwn5ig9yPoJCGzh2WCsWU0FT
g20L4sEWpfjwO/MYoIvEV56AJlcRGacudcbDj4J71cp/YAaNlquCO5YUZDBPVTLu
cc4bCY0AMxLHLk2nb9r8Dk8fJUG+Rb5WbRGbAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQULsKkOaDd5DD2rF79gQf7OSz+TJcwHwYDVR0jBBgwFoAUSFQOE/iyyuhs0fjH
JSg5pQePFqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tNVC9T
RlFPRV9peXl1aHMwZmpISlNnNXBRZVBGcVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1NGUU9FX2l5eXVoczBmakhKU2c1cFFlUEZxVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0tLTVQvTHNLa09hRGQ1REQyckY3OWdRZjdP
U3otVEpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFFUAw
DQYJKoZIhvcNAQELBQADggEBAHojyjqfPsdf1nXkZfZvRiB8soDW3VMl90H+e3Ab
7ox23B6L9U0v21BfLKCartA8VIXIsx8r5+kr0Po1D63fOAUquYeykZTQPapHgf6q
W7HUffXn9OFUPQoyO2I/+QgZ4tynl7zj5VgK83IyG8RUZyUaw6GcIVpcixHkPnnf
lo/Hz16FoTo0X6fYkNMZXhrDTv5iZcU3yfm9cy5JN0jCH020pMHOTTdca8YWBntQ
a1ksz/AysKRYIXifMHD4zZ3DuC8IFGPF3GNaGNC4wWKpRnphdYk7MrNI5pRSmwy5
40221Qg8gLEk1U6lL/QKmGPhVChGtfg12CU+fwZPH5lm5Z8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:16 2025 by rpki-client