Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/1QIB4zUapelWSQjkx3mMlmDlujY.roa
File: 1QIB4zUapelWSQjkx3mMlmDlujY.roa (raw, json)
Hash identifier: 1Foq2n+EgTaDLLvEREMsW+wC69z06cd6pIHlDnhegqI=
Subject key identifier: D5:02:01:E3:35:1A:A5:E9:56:49:08:E4:C7:79:8C:96:60:E5:BA:36
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1353
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/1QIB4zUapelWSQjkx3mMlmDlujY.roa
Signing time: Mon 26 Aug 2024 05:25:28 +0000
ROA not before: Mon 26 Aug 2024 05:25:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 215913
IP address blocks: 2403:aac0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4947 (0x1353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Aug 26 05:25:28 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D50201E3351AA5E9564908E4C7798C9660E5BA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:de:f0:b0:cd:1c:ec:ab:47:73:d5:0e:26:
5f:7f:83:a7:f4:f2:99:ce:0d:a7:25:73:ca:a3:d3:
10:7a:8c:08:62:40:5a:b9:16:03:41:49:ee:89:7b:
f2:30:84:3c:86:0b:bc:95:88:46:d8:5b:e8:2a:f7:
6d:13:80:69:48:a5:96:63:96:f9:80:56:71:09:e4:
89:cc:6c:43:76:e2:e9:25:c7:b9:50:df:6c:8c:46:
18:49:1b:f5:74:ea:7f:8e:e2:c3:b0:f8:34:b8:6a:
a5:51:e0:fd:80:db:21:06:d2:7d:73:60:3d:2b:5c:
44:cf:2f:23:60:09:f0:97:be:7f:13:f2:57:7f:fc:
b2:9b:13:97:f7:a0:b4:fa:ae:b0:c2:54:d9:3e:f3:
b7:b8:ab:05:22:4e:30:ad:e4:b3:5a:1e:9d:2e:61:
b3:82:7e:17:ea:7b:10:d8:b9:57:8a:0d:e3:5d:b7:
7e:bd:c3:28:cc:31:cc:fd:2b:b8:76:b2:1c:18:31:
80:2c:37:aa:c8:de:65:f5:cb:bf:3d:83:7c:81:1c:
40:2b:14:df:62:eb:c3:6d:70:cd:10:76:12:7f:e0:
f9:c4:09:d9:4d:8a:48:bc:29:27:07:fa:8c:32:39:
5d:bf:e2:f6:24:d6:a5:2c:27:9e:ab:3a:f5:f5:50:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:01:E3:35:1A:A5:E9:56:49:08:E4:C7:79:8C:96:60:E5:BA:36
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/1QIB4zUapelWSQjkx3mMlmDlujY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:aac0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:5b:a4:61:82:98:e2:bc:d5:97:8d:f8:62:88:96:eb:dd:09:
b7:e2:31:2d:5c:01:1a:6f:db:9f:37:39:6c:24:63:55:46:de:
cb:0f:20:83:c3:fa:d3:93:ad:80:df:d1:43:dd:3e:6b:fe:d7:
7d:14:3c:35:7f:9b:7a:48:0b:8b:63:c7:90:50:97:f0:d6:dd:
59:6a:db:44:c0:7e:53:fd:95:02:4a:ab:59:fd:7d:61:5b:c0:
b5:a4:95:ff:52:7d:31:75:7f:43:9d:2f:a3:db:2b:b3:d2:b5:
22:20:e2:f6:6f:d0:43:6b:15:8f:13:fc:82:a8:b6:f9:cc:bf:
4a:80:06:6f:5a:8b:5f:02:35:5d:c7:be:fe:79:db:a7:00:2f:
df:f3:b4:a7:c9:3c:9a:ff:33:2e:9b:a2:fe:93:95:19:b8:f7:
72:61:56:74:49:57:f5:5c:f9:b9:70:36:ba:6e:9f:3f:f6:0b:
ab:6a:16:6e:32:80:7a:c5:90:ca:34:93:9e:bf:57:f7:db:94:
16:a3:ea:11:e8:3d:29:ff:bc:ea:dd:d8:ea:38:a3:d8:8e:16:
96:88:e4:b2:a9:fe:8b:83:de:5b:ed:9e:df:d8:63:19:b9:2a:
dd:ed:3d:11:f1:9a:c4:9f:62:fb:2f:ac:0b:ab:8f:73:5a:f2:
f3:65:e0:f2
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICE1MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5
QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw
NTI1MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1MDIwMUUzMzUxQUE1
RTk1NjQ5MDhFNEM3Nzk4Qzk2NjBFNUJBMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+2d7wsM0c7KtHc9UOJl9/g6f08pnODaclc8qj0xB6jAhiQFq5
FgNBSe6Je/IwhDyGC7yViEbYW+gq920TgGlIpZZjlvmAVnEJ5InMbEN24uklx7lQ
32yMRhhJG/V06n+O4sOw+DS4aqVR4P2A2yEG0n1zYD0rXETPLyNgCfCXvn8T8ld/
/LKbE5f3oLT6rrDCVNk+87e4qwUiTjCt5LNaHp0uYbOCfhfqexDYuVeKDeNdt369
wyjMMcz9K7h2shwYMYAsN6rI3mX1y789g3yBHEArFN9i68NtcM0QdhJ/4PnECdlN
iki8KScH+owyOV2/4vYk1qUsJ56rOvX1UEqhAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU1QIB4zUapelWSQjkx3mMlmDlujYwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf
9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv
Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC8xUUlCNHpVYXBlbFdTUWpreDNt
TWxtRGx1alkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOq
wDANBgkqhkiG9w0BAQsFAAOCAQEAo1ukYYKY4rzVl434YoiW690Jt+IxLVwBGm/b
nzc5bCRjVUbeyw8gg8P605OtgN/RQ90+a/7XfRQ8NX+bekgLi2PHkFCX8NbdWWrb
RMB+U/2VAkqrWf19YVvAtaSV/1J9MXV/Q50vo9srs9K1IiDi9m/QQ2sVjxP8gqi2
+cy/SoAGb1qLXwI1Xce+/nnbpwAv3/O0p8k8mv8zLpui/pOVGbj3cmFWdElX9Vz5
uXA2um6fP/YLq2oWbjKAesWQyjSTnr9X99uUFqPqEeg9Kf+86t3Y6jij2I4Wlojk
sqn+i4PeW+2e39hjGbkq3e09EfGaxJ9i+y+sC6uPc1ry82Xg8g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:27 2025 by rpki-client