Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ORAKoHF4NbOaG7pl564VVg8gQno.roa
File: ORAKoHF4NbOaG7pl564VVg8gQno.roa (raw, json)
Hash identifier: qD5B9nqbp/4+zYz4tPBfSXLGNvMLCkIgU9FcK3oytuw=
Subject key identifier: 39:10:0A:A0:71:78:35:B3:9A:1B:BA:65:E7:AE:15:56:0F:20:42:7A
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F08
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ORAKoHF4NbOaG7pl564VVg8gQno.roa
Signing time: Mon 10 Feb 2025 14:16:19 +0000
ROA not before: Mon 10 Feb 2025 14:16:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17716
IP address blocks: 120.96.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3848 (0xf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=39100AA0717835B39A1BBA65E7AE15560F20427A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:d0:fd:fb:60:27:6a:05:41:85:a1:38:8e:
56:f5:96:cb:4a:b0:db:a4:50:9c:22:b1:f5:78:5c:
fb:71:df:21:66:81:f4:1b:51:58:88:32:90:79:db:
7f:79:00:37:ea:81:bc:60:84:d6:d7:81:cf:64:2e:
f9:65:14:e6:8b:45:83:53:e1:8f:84:cc:56:6b:85:
47:64:cb:b4:12:e0:d3:65:cc:fb:13:de:12:f6:cc:
95:cb:c7:f4:48:79:ee:81:18:87:bd:d9:cc:3f:a0:
b4:37:0f:6d:85:68:00:f2:53:1e:48:37:3c:21:b0:
02:8c:83:e4:74:d2:85:17:07:86:27:8f:81:1d:a1:
3d:55:7e:db:05:8c:ae:c5:02:75:95:36:9f:4c:5f:
2a:0f:d2:2a:9e:82:0e:6a:a1:94:e3:df:54:98:6b:
34:7a:11:6b:3a:82:bc:11:66:57:b1:a5:7f:c9:6d:
52:26:62:c8:d9:d2:f3:ee:36:e5:f6:d9:4f:1a:fd:
61:f0:a7:27:ab:b2:09:72:64:c3:0f:0c:2e:d3:b4:
be:9d:9a:92:15:d3:70:9e:1d:94:10:6a:ed:cb:ce:
61:71:b3:03:f7:a3:08:c8:5a:a7:48:83:11:27:23:
40:1f:6c:2c:b5:06:6f:60:e6:ec:a7:43:6c:aa:1d:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:0A:A0:71:78:35:B3:9A:1B:BA:65:E7:AE:15:56:0F:20:42:7A
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ORAKoHF4NbOaG7pl564VVg8gQno.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:48:da:dc:1d:89:0a:de:6b:fe:2f:e9:c0:51:66:4d:13:34:
b5:a3:f2:fd:85:7a:4a:13:cc:30:cf:b8:da:dd:40:7b:61:6c:
f8:80:0f:e9:c2:b2:71:ab:8c:d9:30:e9:25:e0:e2:90:91:a8:
d8:51:97:c2:78:76:07:26:86:a3:f4:2f:41:22:04:6c:97:b2:
3b:fb:e6:a7:fc:1c:df:97:d5:05:c8:9d:9c:1e:38:3e:05:5a:
63:7d:d8:ca:26:46:df:14:18:08:10:29:25:52:ba:5c:75:74:
12:25:e3:04:13:f2:b2:f4:7c:b2:0a:30:ef:e3:a3:53:b0:3c:
8e:0b:60:a7:b7:29:6d:88:ed:f4:3e:1e:5f:0a:94:3b:ed:49:
93:53:8d:b0:09:e0:8e:68:24:0a:64:f4:70:59:8c:27:8a:91:
72:32:f0:44:e4:a8:85:ba:52:78:dc:2b:79:04:29:fc:8b:db:
ef:7f:da:f6:33:59:dc:ae:24:9d:40:3c:68:9a:b3:f9:2b:ea:
3a:3e:13:e2:6a:1d:83:10:9d:d1:22:fd:45:01:f6:d8:ca:dd:
05:f8:fa:57:c2:59:dc:1c:3c:91:c6:ec:ef:2b:15:ec:91:07:
1e:db:2b:a1:b3:ba:61:38:5a:fe:05:0d:d5:3d:91:b6:86:73:
46:fc:1b:70
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx
NDE2MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5MTAwQUEwNzE3ODM1
QjM5QTFCQkE2NUU3QUUxNTU2MEYyMDQyN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE7tD9+2AnagVBhaE4jlb1lstKsNukUJwisfV4XPtx3yFmgfQb
UViIMpB52395ADfqgbxghNbXgc9kLvllFOaLRYNT4Y+EzFZrhUdky7QS4NNlzPsT
3hL2zJXLx/RIee6BGIe92cw/oLQ3D22FaADyUx5INzwhsAKMg+R00oUXB4Ynj4Ed
oT1VftsFjK7FAnWVNp9MXyoP0iqegg5qoZTj31SYazR6EWs6grwRZlexpX/JbVIm
YsjZ0vPuNuX22U8a/WHwpyersglyZMMPDC7TtL6dmpIV03CeHZQQau3LzmFxswP3
owjIWqdIgxEnI0AfbCy1Bm9g5uynQ2yqHYi7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUORAKoHF4NbOaG7pl564VVg8gQnowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9PUkFLb0hGNE5iT2FHN3BsNTY0
VlZnOGdRbm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCeGD4
MA0GCSqGSIb3DQEBCwUAA4IBAQCbSNrcHYkK3mv+L+nAUWZNEzS1o/L9hXpKE8ww
z7ja3UB7YWz4gA/pwrJxq4zZMOkl4OKQkajYUZfCeHYHJoaj9C9BIgRsl7I7++an
/Bzfl9UFyJ2cHjg+BVpjfdjKJkbfFBgIECklUrpcdXQSJeMEE/Ky9HyyCjDv46NT
sDyOC2CntyltiO30Ph5fCpQ77UmTU42wCeCOaCQKZPRwWYwnipFyMvBE5KiFulJ4
3Ct5BCn8i9vvf9r2M1ncriSdQDxomrP5K+o6PhPiah2DEJ3RIv1FAfbYyt0F+PpX
wlncHDyRxuzvKxXskQce2yuhs7phOFr+BQ3VPZG2hnNG/Btw
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:09:50 2025 by rpki-client