Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa
File: v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa (raw, json)
Hash identifier: 9OxkLT/8AGddj4U4ldWh5bB00oXsm5jpq8Oa9mLJsKk=
Subject key identifier: BF:CA:1E:2A:9E:DB:46:EB:90:F2:DB:EB:F0:63:CE:DF:62:8A:1C:F6
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0F5C
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa
Signing time: Tue 18 Feb 2025 01:25:22 +0000
ROA not before: Tue 18 Feb 2025 01:25:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9916
IP address blocks: 120.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3932 (0xf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Feb 18 01:25:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BFCA1E2A9EDB46EB90F2DBEBF063CEDF628A1CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:75:fe:3b:6a:30:af:fc:2e:a4:f4:7f:65:
35:85:da:7c:93:4a:5b:d6:80:1d:c9:e9:27:a5:b0:
7e:45:39:72:11:a6:38:24:d6:ba:19:23:b0:aa:e8:
37:bf:72:74:8c:c4:c8:7a:25:0e:06:0e:65:b7:fd:
12:86:41:65:26:1e:1c:60:3f:61:32:c3:cb:3b:6f:
6a:9a:c5:1b:e2:f5:a2:e1:3d:cd:73:3b:76:b5:7a:
62:07:1a:ba:e6:e7:fa:7e:2b:36:f7:d7:0d:16:ef:
3a:70:24:4f:78:08:d5:d9:83:67:ec:69:fe:2a:cc:
72:cf:cb:17:5a:5c:c5:35:65:af:d1:95:41:2b:ff:
7f:ee:b2:0c:cb:12:92:69:1c:08:26:16:02:be:9f:
76:76:69:9e:e3:9a:f7:28:04:b3:01:6b:3d:fb:4d:
de:1f:55:da:53:47:ff:8f:d0:cb:f4:fd:c9:89:c9:
67:42:6f:9a:d7:25:76:48:1c:7c:27:4e:4c:0c:b8:
84:0c:e8:e5:0d:6b:ad:43:6d:a9:a0:45:5e:ba:50:
9b:3b:75:dc:92:f3:a8:5f:5a:86:84:68:01:f3:60:
68:9d:64:df:70:76:01:85:cb:31:b9:1b:d0:24:ed:
0d:c9:c3:ff:53:a5:bf:80:9a:b3:61:a5:66:32:d0:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:1E:2A:9E:DB:46:EB:90:F2:DB:EB:F0:63:CE:DF:62:8A:1C:F6
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:87:26:c9:7a:4f:6e:3e:c8:fc:a2:20:4d:64:dd:6f:fe:af:
01:b3:06:34:3a:63:01:dc:4d:a9:cd:ea:d3:f5:5f:08:f6:fc:
66:9a:c0:c9:5c:7c:d4:6e:31:b3:6f:7e:9a:3c:e4:b5:05:1c:
be:53:36:ca:7a:e5:d2:a0:f0:e2:78:f7:ae:ce:00:1e:33:7a:
12:02:95:35:4f:4e:91:52:9d:d7:ee:7a:56:10:7f:04:06:07:
58:7e:94:d9:4d:d4:9c:54:dc:cf:32:66:c4:99:29:a3:7d:3e:
6f:5f:14:6f:8e:0c:3f:2e:9a:2b:91:bb:68:0f:af:18:df:2d:
ed:5c:df:95:95:15:6f:f2:e1:d9:54:22:e2:e0:2c:86:61:14:
ae:2d:4e:a3:cd:0c:8e:66:31:0b:0a:3e:c3:13:89:75:ae:41:
7c:3c:7a:7b:4a:d2:68:af:9d:62:42:44:a0:e3:97:0a:c7:40:
c5:fa:af:da:e2:6a:df:f8:2f:73:3b:fd:0f:64:00:1f:8e:4c:
46:82:0c:77:46:70:bb:1f:f6:21:d4:7e:42:71:6f:c9:30:8a:
cc:60:a7:1f:b1:de:04:ca:27:b4:61:3d:4c:60:86:8e:cf:a4:
f3:5a:61:cd:26:88:64:e7:34:bb:ab:b0:66:b0:60:46:0d:c0:
f9:16:0a:bf
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTAyMTgw
MTI1MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGQ0ExRTJBOUVEQjQ2
RUI5MEYyREJFQkYwNjNDRURGNjI4QTFDRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsQHX+O2owr/wupPR/ZTWF2nyTSlvWgB3J6SelsH5FOXIRpjgk
1roZI7Cq6De/cnSMxMh6JQ4GDmW3/RKGQWUmHhxgP2Eyw8s7b2qaxRvi9aLhPc1z
O3a1emIHGrrm5/p+Kzb31w0W7zpwJE94CNXZg2fsaf4qzHLPyxdaXMU1Za/RlUEr
/3/usgzLEpJpHAgmFgK+n3Z2aZ7jmvcoBLMBaz37Td4fVdpTR/+P0Mv0/cmJyWdC
b5rXJXZIHHwnTkwMuIQM6OUNa61DbamgRV66UJs7ddyS86hfWoaEaAHzYGidZN9w
dgGFyzG5G9Ak7Q3Jw/9Tpb+AmrNhpWYy0Au1AgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUv8oeKp7bRuuQ8tvr8GPO32KKHPYwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC92OG9lS3A3YlJ1dVE4dHZyOEdQ
TzMyS0tIUFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeGgw
DQYJKoZIhvcNAQELBQADggEBAJ6HJsl6T24+yPyiIE1k3W/+rwGzBjQ6YwHcTanN
6tP1Xwj2/GaawMlcfNRuMbNvfpo85LUFHL5TNsp65dKg8OJ4967OAB4zehIClTVP
TpFSndfuelYQfwQGB1h+lNlN1JxU3M8yZsSZKaN9Pm9fFG+ODD8umiuRu2gPrxjf
Le1c35WVFW/y4dlUIuLgLIZhFK4tTqPNDI5mMQsKPsMTiXWuQXw8entK0mivnWJC
RKDjlwrHQMX6r9riat/4L3M7/Q9kAB+OTEaCDHdGcLsf9iHUfkJxb8kwisxgpx+x
3gTKJ7RhPUxgho7PpPNaYc0miGTnNLursGawYEYNwPkWCr8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:08 2025 by rpki-client