Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/fzQwaYlgTmJuvcqW7EhWa0q-3EM.roa
File: fzQwaYlgTmJuvcqW7EhWa0q-3EM.roa (raw, json)
Hash identifier: CA26OpEQWixSUo9ubH9McG9pSWEEp1zm0jwiOw99PyQ=
Subject key identifier: 7F:34:30:69:89:60:4E:62:6E:BD:CA:96:EC:48:56:6B:4A:BE:DC:43
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0F4E
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/fzQwaYlgTmJuvcqW7EhWa0q-3EM.roa
Signing time: Mon 26 Aug 2024 05:24:13 +0000
ROA not before: Mon 26 Aug 2024 05:24:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 2404:aac0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3918 (0xf4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Aug 26 05:24:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7F34306989604E626EBDCA96EC48566B4ABEDC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:e7:76:c4:6a:b1:d5:fa:7d:46:d6:6f:be:
e3:9b:7c:2b:a9:b1:32:a3:53:c0:da:b7:54:62:52:
51:6e:ab:72:69:d6:7a:d5:b0:94:cc:36:2a:d6:80:
52:14:b2:28:43:c4:29:2f:7d:57:e0:7c:cd:86:b9:
8e:ae:c0:ca:66:84:15:5a:fb:af:0b:c0:85:0a:1e:
e8:0a:b3:52:41:c8:53:24:87:d9:7d:f1:a8:ac:f4:
74:21:9e:07:e1:74:86:eb:92:53:70:16:ea:f2:b1:
33:9d:99:68:1e:9e:40:d3:69:11:35:87:d2:6d:9f:
7b:e4:1d:9d:5b:75:8f:9a:36:a6:dc:f4:b4:cc:8a:
99:5e:2c:22:27:7f:b8:fb:5c:7a:ff:03:a8:ab:64:
8a:e7:da:e5:d6:f5:e4:cb:86:9c:53:50:b4:e9:df:
50:36:d0:3f:72:c5:78:f1:bd:7a:f5:00:0b:7a:98:
ea:91:0c:9d:92:a8:e6:42:ce:af:93:de:be:0b:50:
f5:22:7c:69:0d:2b:c8:9f:3f:40:54:c3:02:3e:fa:
8a:09:9c:27:d4:35:15:b3:76:f2:23:75:bf:4c:ea:
0a:0f:e1:7b:f8:9f:08:f4:7c:6f:22:cd:38:b7:e2:
81:06:fb:d8:5d:f8:30:da:c4:99:30:ad:32:b9:af:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:30:69:89:60:4E:62:6E:BD:CA:96:EC:48:56:6B:4A:BE:DC:43
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/fzQwaYlgTmJuvcqW7EhWa0q-3EM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
29:e8:f4:39:70:30:51:e0:c6:80:75:0d:b9:72:cb:02:9d:57:
5d:00:ac:02:f6:bd:6e:e9:60:4c:69:29:e6:28:d6:a1:cd:4d:
3d:32:d1:dd:91:50:1d:d5:c1:5a:af:45:21:01:69:2f:3e:8f:
1c:9c:54:39:4c:53:b5:0a:e1:5d:a9:99:1c:ad:86:1e:0f:ac:
03:d8:c0:03:ee:9b:c3:e3:9f:4f:7c:d4:21:10:4e:f0:bf:06:
23:6b:c3:08:dd:a8:56:d3:20:86:5f:e3:b8:46:e3:95:bf:e0:
48:43:c6:68:67:e6:28:fe:90:5a:3a:a6:74:e9:ad:15:9a:6e:
10:6c:ec:57:15:f1:42:f3:94:2b:50:a2:82:a1:4a:f3:74:b5:
3f:c8:15:f4:e1:6a:be:b3:00:ad:e4:e4:6e:b4:2a:cd:bc:8f:
5a:5d:5b:ae:79:c3:39:e7:b2:12:1c:31:41:d7:d6:cc:06:6f:
3f:60:db:65:ee:01:32:60:4d:7d:19:ec:d4:ee:ae:4a:75:30:
e3:8d:b0:79:35:18:dd:1d:b2:5f:c9:bf:ac:fa:2a:5c:fe:b6:
e5:cb:94:5f:09:b0:10:6f:61:3c:6e:a5:1a:a2:2b:c4:4c:52:
5a:a0:5c:9d:39:02:25:17:38:84:78:ba:91:19:26:90:aa:81:
c5:3f:6e:d3
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD04wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0
RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yNDA4MjYw
NTI0MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGMzQzMDY5ODk2MDRF
NjI2RUJEQ0E5NkVDNDg1NjZCNEFCRURDNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPu+d2xGqx1fp9RtZvvuObfCupsTKjU8Dat1RiUlFuq3Jp1nrV
sJTMNirWgFIUsihDxCkvfVfgfM2GuY6uwMpmhBVa+68LwIUKHugKs1JByFMkh9l9
8ais9HQhngfhdIbrklNwFurysTOdmWgenkDTaRE1h9Jtn3vkHZ1bdY+aNqbc9LTM
ipleLCInf7j7XHr/A6irZIrn2uXW9eTLhpxTULTp31A20D9yxXjxvXr1AAt6mOqR
DJ2SqOZCzq+T3r4LUPUifGkNK8ifP0BUwwI++ooJnCfUNRWzdvIjdb9M6goP4Xv4
nwj0fG8izTi34oEG+9hd+DDaxJkwrTK5r74rAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUfzQwaYlgTmJuvcqW7EhWa0q+3EMwHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv
T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV
LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL2Z6UXdhWWxnVG1KdXZjcVc3RWhXYTBx
LTNFTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBKrAMA0G
CSqGSIb3DQEBCwUAA4IBAQAp6PQ5cDBR4MaAdQ25cssCnVddAKwC9r1u6WBMaSnm
KNahzU09MtHdkVAd1cFar0UhAWkvPo8cnFQ5TFO1CuFdqZkcrYYeD6wD2MAD7pvD
459PfNQhEE7wvwYja8MI3ahW0yCGX+O4RuOVv+BIQ8ZoZ+Yo/pBaOqZ06a0Vmm4Q
bOxXFfFC85QrUKKCoUrzdLU/yBX04Wq+swCt5ORutCrNvI9aXVuuecM557ISHDFB
19bMBm8/YNtl7gEyYE19GezU7q5KdTDjjbB5NRjdHbJfyb+s+ipc/rbly5RfCbAQ
b2E8bqUaoivETFJaoFydOQIlFziEeLqRGSaQqoHFP27T
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:33 2025 by rpki-client