Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa
File: wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa (raw, json)
Hash identifier: yZF63z6ohbGtAwtmuzOgxyUcGIa0I4paanlHiuijYCk=
Subject key identifier: C0:AE:6A:0E:BA:8D:C9:9B:31:5E:2D:E2:55:49:2F:39:65:01:96:9D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0E5D
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa
Signing time: Mon 26 Aug 2024 05:27:20 +0000
ROA not before: Mon 26 Aug 2024 05:27:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 1659
IP address blocks: 203.68.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Aug 26 05:27:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C0AE6A0EBA8DC99B315E2DE255492F396501969D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:02:15:43:bf:d2:52:4c:3b:4f:bf:8b:37:
ec:30:6a:e1:ce:f0:f0:4d:a2:02:cc:5c:fe:89:00:
0f:50:6c:31:49:e3:43:cb:bc:ea:26:1c:ba:68:12:
70:39:96:a7:ad:b3:67:0c:56:0a:16:5b:80:de:b6:
18:42:4a:04:a7:5e:61:fa:81:ca:0d:0f:9f:9c:b0:
80:d3:61:34:1f:12:df:c2:76:27:b0:5c:5c:b1:88:
53:d4:4f:3d:e6:35:69:1b:8a:b0:47:4d:eb:6c:4e:
29:e2:e4:f8:10:c4:9a:81:17:46:57:6f:c0:d2:80:
84:84:86:b8:b8:dd:88:68:cb:b8:22:6f:bd:d4:10:
09:4b:88:e2:3c:a0:1c:cb:35:64:94:0f:3b:88:bd:
33:42:ab:0f:9b:4d:51:84:f1:5c:64:18:2d:c3:90:
2e:ad:03:46:66:9b:e2:13:ed:6b:47:13:21:10:62:
ee:ea:e1:00:17:c9:a4:92:01:64:11:25:cb:da:6b:
5a:1a:f8:1c:42:a8:2c:7c:65:78:6e:57:66:68:91:
32:c0:66:1c:6b:85:ca:66:5e:c0:b6:e2:fc:8a:a1:
3c:41:32:05:1d:8b:31:57:f5:ca:44:81:b6:08:dc:
42:a5:c4:e0:0b:1c:50:17:e2:d9:de:e6:f7:2b:e4:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:6A:0E:BA:8D:C9:9B:31:5E:2D:E2:55:49:2F:39:65:01:96:9D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.68.203.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e1:d7:1c:1d:47:af:90:67:0a:c1:bc:48:db:f7:e5:ed:a0:
b6:e6:87:f3:3d:c0:0b:dd:25:a7:97:0f:1c:b0:89:d2:32:15:
2f:7c:2a:98:0e:5f:1c:fc:14:ec:f3:f7:57:9f:5e:bb:5e:91:
ac:2b:e9:d0:5a:f9:f3:17:7f:a6:cf:5d:d9:8f:61:64:67:cf:
df:91:de:61:a7:5c:be:1a:fd:92:fb:03:a0:fb:5b:8b:c6:9b:
6d:48:99:50:6f:09:9b:23:0b:01:d9:a0:bc:f8:1a:8f:5a:00:
be:98:09:3f:cf:62:f0:ec:10:02:47:10:f9:d6:0f:a0:8f:7d:
00:91:ff:8c:54:ab:40:37:30:32:28:b8:2f:3d:f7:73:01:0e:
0b:0d:2f:26:b4:7f:07:25:ea:64:08:40:bd:34:ba:61:10:ff:
b5:f5:ed:ea:ac:58:6c:09:3e:e7:80:20:b7:b2:02:9a:ba:b6:
29:6e:13:04:70:c1:a5:6f:12:72:dc:47:27:01:95:1c:ce:d1:
03:c5:0c:e8:de:66:87:42:91:87:46:be:d6:ec:29:fb:57:73:
b4:7e:b5:f8:46:bf:09:66:9b:39:f9:01:4b:d7:7e:06:18:ee:
f5:9a:39:e0:76:91:26:bc:c6:39:36:7f:bb:bc:15:d5:6a:f1:
1e:02:bc:68
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw
NTI3MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwQUU2QTBFQkE4REM5
OUIzMTVFMkRFMjU1NDkyRjM5NjUwMTk2OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0QQIVQ7/SUkw7T7+LN+wwauHO8PBNogLMXP6JAA9QbDFJ40PL
vOomHLpoEnA5lqets2cMVgoWW4DethhCSgSnXmH6gcoND5+csIDTYTQfEt/Cdiew
XFyxiFPUTz3mNWkbirBHTetsTini5PgQxJqBF0ZXb8DSgISEhri43Yhoy7gib73U
EAlLiOI8oBzLNWSUDzuIvTNCqw+bTVGE8VxkGC3DkC6tA0Zmm+IT7WtHEyEQYu7q
4QAXyaSSAWQRJcvaa1oa+BxCqCx8ZXhuV2ZokTLAZhxrhcpmXsC24vyKoTxBMgUd
izFX9cpEgbYI3EKlxOALHFAX4tne5vcr5IbRAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwK5qDrqNyZsxXi3iVUkvOWUBlp0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC93SzVxRHJxTnlac3hYaTNpVlVr
dk9XVUJscDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0TL
MA0GCSqGSIb3DQEBCwUAA4IBAQCI4dccHUevkGcKwbxI2/fl7aC25ofzPcAL3SWn
lw8csInSMhUvfCqYDl8c/BTs8/dXn167XpGsK+nQWvnzF3+mz13Zj2FkZ8/fkd5h
p1y+Gv2S+wOg+1uLxpttSJlQbwmbIwsB2aC8+BqPWgC+mAk/z2Lw7BACRxD51g+g
j30Akf+MVKtANzAyKLgvPfdzAQ4LDS8mtH8HJepkCEC9NLphEP+19e3qrFhsCT7n
gCC3sgKaurYpbhMEcMGlbxJy3EcnAZUcztEDxQzo3maHQpGHRr7W7Cn7V3O0frX4
Rr8JZps5+QFL134GGO71mjngdpEmvMY5Nn+7vBXVavEeArxo
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:20:33 2025 by rpki-client