Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa
File: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (raw, json)
Hash identifier: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g=
Subject key identifier: AA:E9:F3:55:2E:6D:07:F0:B2:F0:34:6F:D7:90:9F:81:C4:FF:F3:D7
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0EE7
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa
Signing time: Mon 10 Feb 2025 14:16:12 +0000
ROA not before: Mon 10 Feb 2025 14:16:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 210.62.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3815 (0xee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 10 14:16:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=AAE9F3552E6D07F0B2F0346FD7909F81C4FFF3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:b6:b3:fc:70:07:a0:76:6a:d3:68:9a:7f:
82:ac:f9:88:69:27:05:bc:2e:5c:bd:76:6a:30:03:
95:6d:22:2e:96:86:b4:17:4c:e5:25:8f:85:a6:e0:
ac:9b:e1:0c:eb:f2:ef:ad:c8:7d:fa:46:90:22:a7:
27:66:84:03:3c:b1:84:5b:64:1e:90:d8:63:36:b1:
a4:ba:ea:33:a7:8a:8c:6f:4b:f8:3a:ea:7b:67:70:
9f:93:19:3f:0d:5e:9f:90:c8:e2:17:90:76:16:91:
e7:25:52:be:b0:4a:1e:ee:d9:fa:b3:75:9b:32:e7:
9e:1a:39:92:c9:bc:12:fd:5c:61:a8:28:a2:ca:d0:
5a:ec:c5:00:37:d6:49:5f:e1:9e:04:51:9a:b1:92:
01:38:67:fd:a7:7f:e2:55:dd:12:30:34:70:9c:fd:
f8:51:05:69:c0:14:fa:65:f4:12:a4:f5:f5:73:e3:
d9:7c:06:0c:06:1a:59:05:15:b0:70:42:5d:3c:38:
70:f8:11:e3:4e:67:d7:e7:5f:bf:06:42:34:f7:7d:
99:f8:49:88:0f:9a:e6:0c:5b:d9:ea:a9:86:c9:49:
ca:3c:af:73:f2:0c:4b:f8:8b:bf:09:b6:fc:c0:f2:
d9:35:30:9c:ea:da:93:ec:95:03:70:1c:74:fb:ec:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:F3:55:2E:6D:07:F0:B2:F0:34:6F:D7:90:9F:81:C4:FF:F3:D7
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/qunzVS5tB_Cy8DRv15CfgcT_89c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.64.0/19
Signature Algorithm: sha256WithRSAEncryption
00:ee:ca:9b:5e:48:22:89:0a:40:89:ee:37:01:0e:eb:77:ee:
f4:0a:29:c9:86:f7:a5:d8:71:52:83:92:d3:2e:35:ca:05:17:
8f:97:79:42:19:33:da:7e:af:7e:1f:c1:4c:0d:c3:61:25:69:
47:2b:5e:0a:ce:db:ce:f9:73:8c:cc:b3:b4:e3:b9:11:3b:93:
2f:07:ea:18:e3:5a:1c:28:43:20:10:c4:ec:1f:17:52:d4:e2:
a2:34:7c:bb:73:09:48:3b:7f:24:7e:98:64:fd:b6:0d:1a:53:
07:52:60:ea:bb:39:7c:f4:a1:48:45:aa:2b:ad:4e:c3:25:46:
ce:c5:d1:01:77:1e:36:45:ea:b9:47:5a:fb:12:0b:02:10:56:
f7:28:06:c4:11:ea:eb:cb:b8:fe:11:98:a9:eb:ac:e7:70:c9:
e1:48:45:20:25:93:f5:6c:b0:dc:3b:01:b3:e1:fa:0d:c7:a4:
47:88:84:83:32:0d:1e:a4:57:6f:de:8e:99:cb:30:49:fd:80:
88:cd:05:f1:7f:75:86:14:2a:9d:dc:e6:7b:5b:32:26:89:03:
de:e7:b2:dc:32:e3:ca:51:40:11:89:f5:39:f4:7d:72:4d:3d:
b2:39:b8:88:f5:b1:21:b8:d3:77:b5:4b:63:6c:9a:df:9b:ad:
0b:9e:c3:3d
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDucwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTAx
NDE2MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBRTlGMzU1MkU2RDA3
RjBCMkYwMzQ2RkQ3OTA5RjgxQzRGRkYzRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChg7az/HAHoHZq02iaf4Ks+YhpJwW8Lly9dmowA5VtIi6WhrQX
TOUlj4Wm4Kyb4Qzr8u+tyH36RpAipydmhAM8sYRbZB6Q2GM2saS66jOnioxvS/g6
6ntncJ+TGT8NXp+QyOIXkHYWkeclUr6wSh7u2fqzdZsy554aOZLJvBL9XGGoKKLK
0FrsxQA31klf4Z4EUZqxkgE4Z/2nf+JV3RIwNHCc/fhRBWnAFPpl9BKk9fVz49l8
BgwGGlkFFbBwQl08OHD4EeNOZ9fnX78GQjT3fZn4SYgPmuYMW9nqqYbJSco8r3Py
DEv4i78JtvzA8tk1MJzq2pPslQNwHHT77HdZAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUqunzVS5tB/Cy8DRv15CfgcT/89cwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9xdW56VlM1dEJfQ3k4RFJ2MTVD
ZmdjVF84OWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0j5A
MA0GCSqGSIb3DQEBCwUAA4IBAQAA7sqbXkgiiQpAie43AQ7rd+70CinJhvel2HFS
g5LTLjXKBRePl3lCGTPafq9+H8FMDcNhJWlHK14KztvO+XOMzLO047kRO5MvB+oY
41ocKEMgEMTsHxdS1OKiNHy7cwlIO38kfphk/bYNGlMHUmDquzl89KFIRaorrU7D
JUbOxdEBdx42Req5R1r7EgsCEFb3KAbEEerry7j+EZip66zncMnhSEUgJZP1bLDc
OwGz4foNx6RHiISDMg0epFdv3o6ZyzBJ/YCIzQXxf3WGFCqd3OZ7WzImiQPe57Lc
MuPKUUARifU59H1yTT2yObiI9bEhuNN3tUtjbJrfm60LnsM9
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:18 2025 by rpki-client