Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa
File: nDTizWNduxTTG0hVLtZext4ufa0.roa (raw, json)
Hash identifier: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw=
Subject key identifier: 9C:34:E2:CD:63:5D:BB:14:D3:1B:48:55:2E:D6:5E:C6:DE:2E:7D:AD
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EF9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa
Signing time: Mon 10 Feb 2025 14:16:16 +0000
ROA not before: Mon 10 Feb 2025 14:16:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 203.68.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3833 (0xef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9C34E2CD635DBB14D31B48552ED65EC6DE2E7DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:1d:f9:6a:b6:b1:54:6c:cd:ae:90:e6:03:
f6:dc:7b:69:3a:b4:4a:17:57:a2:66:d1:0a:70:e2:
ff:9e:81:08:ef:35:af:b1:16:c6:28:14:30:7f:21:
ca:ea:7b:d4:3c:77:b3:83:4f:00:04:d8:7f:42:74:
73:2e:99:68:23:cc:fd:50:15:32:20:ae:b0:50:89:
96:8e:e6:77:ce:47:c4:f2:ec:91:ab:02:74:44:f2:
fe:0a:43:28:e7:27:cf:8b:ac:32:1a:2e:71:4a:95:
45:f1:1f:da:5f:07:1f:8f:c2:fb:d5:74:82:87:a5:
b0:93:c0:ae:1c:a2:e3:43:65:fe:32:f6:18:95:a9:
39:50:d0:83:46:b1:3e:1f:e3:0c:71:e9:62:33:dd:
da:f9:97:e2:81:6e:cf:30:c0:77:11:8f:30:96:df:
43:c4:e2:8d:45:ca:69:ec:40:48:85:11:eb:1d:1c:
41:38:e7:4a:57:ac:32:75:65:25:71:9d:77:28:88:
7a:0a:f6:6f:0d:22:99:87:04:2b:96:4f:55:2f:7c:
c5:97:aa:30:da:18:33:b4:82:ab:c8:df:03:cb:11:
6d:82:51:5f:52:8e:a2:e5:be:a4:e4:28:ea:73:a5:
3c:91:3d:b1:ca:c4:b0:de:95:16:e9:71:7d:3e:01:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:E2:CD:63:5D:BB:14:D3:1B:48:55:2E:D6:5E:C6:DE:2E:7D:AD
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/nDTizWNduxTTG0hVLtZext4ufa0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:8c:05:ff:81:23:e6:ea:99:cf:da:2d:20:56:72:ab:00:2e:
30:c7:56:fa:a5:1d:6f:0d:84:cf:74:92:10:56:bd:ea:a9:a5:
27:45:b6:35:bc:0c:e1:63:21:b3:88:83:c5:e8:c2:8e:5a:7f:
95:58:f0:ed:78:91:71:98:18:3c:fa:5a:85:b5:f9:c4:a1:c1:
69:1a:c3:c2:a4:c0:37:51:6a:85:38:4d:e5:d7:a9:60:7e:e1:
86:1c:df:4f:88:38:f9:c6:4d:53:cc:32:bf:d9:0c:17:4f:03:
54:25:b5:90:05:c5:d5:23:84:e5:0a:58:95:77:eb:b4:45:b0:
69:3b:48:3b:94:eb:41:ea:9a:7b:7e:94:4e:71:ce:39:58:90:
4a:c4:db:1f:68:72:87:05:23:3f:5d:49:10:5e:36:8e:f6:aa:
cb:b8:1a:0b:00:b7:85:71:be:5c:00:c4:81:d9:03:98:22:50:
41:2b:2b:a5:aa:37:43:d9:fc:e0:6f:ff:95:a3:b2:09:34:2a:
86:8d:df:8e:94:d5:95:cb:b4:be:a5:e5:63:1a:b4:f4:db:b6:
b5:0f:00:3c:8d:b2:24:fe:0c:e4:b0:dd:24:1a:e2:5b:d6:8e:
91:d5:77:a0:ff:59:d2:00:9d:74:a7:48:5d:a6:ec:e3:37:c9:
19:83:35:4e
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx
NDE2MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDMzRFMkNENjM1REJC
MTREMzFCNDg1NTJFRDY1RUM2REUyRTdEQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCs/x35araxVGzNrpDmA/bce2k6tEoXV6Jm0Qpw4v+egQjvNa+x
FsYoFDB/Icrqe9Q8d7ODTwAE2H9CdHMumWgjzP1QFTIgrrBQiZaO5nfOR8Ty7JGr
AnRE8v4KQyjnJ8+LrDIaLnFKlUXxH9pfBx+PwvvVdIKHpbCTwK4couNDZf4y9hiV
qTlQ0INGsT4f4wxx6WIz3dr5l+KBbs8wwHcRjzCW30PE4o1FymnsQEiFEesdHEE4
50pXrDJ1ZSVxnXcoiHoK9m8NIpmHBCuWT1UvfMWXqjDaGDO0gqvI3wPLEW2CUV9S
jqLlvqTkKOpzpTyRPbHKxLDelRbpcX0+AYDZAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUnDTizWNduxTTG0hVLtZext4ufa0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9uRFRpeldOZHV4VFRHMGhWTHRa
ZXh0NHVmYTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0Qw
DQYJKoZIhvcNAQELBQADggEBAD6MBf+BI+bqmc/aLSBWcqsALjDHVvqlHW8NhM90
khBWveqppSdFtjW8DOFjIbOIg8Xowo5af5VY8O14kXGYGDz6WoW1+cShwWkaw8Kk
wDdRaoU4TeXXqWB+4YYc30+IOPnGTVPMMr/ZDBdPA1QltZAFxdUjhOUKWJV367RF
sGk7SDuU60Hqmnt+lE5xzjlYkErE2x9ococFIz9dSRBeNo72qsu4GgsAt4VxvlwA
xIHZA5giUEErK6WqN0PZ/OBv/5Wjsgk0KoaN346U1ZXLtL6l5WMatPTbtrUPADyN
siT+DOSw3SQa4lvWjpHVd6D/WdIAnXSnSF2m7OM3yRmDNU4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:50:46 2025 by rpki-client