Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/EtzpmMPk9OXlb0MJxeYHIjNzlZQ.roa
File: EtzpmMPk9OXlb0MJxeYHIjNzlZQ.roa (raw, json)
Hash identifier: S+sYZ2Azx0j7y2LYxd2iJMQH14MPU6tkgNz/JiPxxmk=
Subject key identifier: 12:DC:E9:98:C3:E4:F4:E5:E5:6F:43:09:C5:E6:07:22:33:73:95:94
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0D3F
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/EtzpmMPk9OXlb0MJxeYHIjNzlZQ.roa
Signing time: Mon 10 Feb 2025 14:05:22 +0000
ROA not before: Mon 10 Feb 2025 14:05:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.58.157.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Feb 10 14:05:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=12DCE998C3E4F4E5E56F4309C5E6072233739594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:c7:9a:12:e9:a3:e3:8c:d5:ed:a7:1b:fe:
d3:d1:e6:98:41:bd:e2:b5:39:24:34:3b:45:b1:d0:
bd:a9:7a:82:a6:33:30:3d:fa:58:8a:33:4e:22:91:
2e:8f:f2:75:59:83:7b:e8:6e:b9:67:b5:59:8c:9a:
50:d3:3c:d6:89:c8:16:42:e9:87:ef:79:f5:94:8a:
05:23:e9:b9:f0:7f:97:d1:ec:c2:5f:a4:da:5b:87:
38:76:3a:dc:5a:d0:f3:b8:6a:f6:6a:b0:1b:93:35:
9e:2f:0f:d5:68:92:39:be:dc:f3:a1:06:ef:3c:71:
51:ce:38:00:b1:17:67:b1:16:e9:38:86:77:99:6b:
8c:ed:7b:e6:fd:5c:45:76:7a:35:7e:f6:75:e3:ee:
f3:70:3f:88:90:bb:3b:78:50:26:b1:22:ae:7b:cc:
56:16:6e:03:75:6c:e1:07:4a:ff:4f:ad:97:29:29:
f6:c6:2a:1b:43:ab:2d:6d:7b:fe:43:25:e6:2c:79:
d3:47:1e:7e:9b:76:31:27:38:4e:85:5f:f2:98:b2:
db:db:d2:7c:67:04:48:33:45:87:bc:1b:f3:7d:f5:
29:ba:dc:7d:8b:16:44:96:4b:24:47:6a:bd:3f:95:
b2:9a:3f:3e:25:87:3a:81:98:2d:f7:c1:d2:3d:1b:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:E9:98:C3:E4:F4:E5:E5:6F:43:09:C5:E6:07:22:33:73:95:94
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/EtzpmMPk9OXlb0MJxeYHIjNzlZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:80:0f:aa:c0:6f:4d:7a:e8:50:55:75:ea:ca:fe:68:7f:fd:
fa:0c:d4:81:72:0c:d7:d6:4a:a9:41:c3:f8:31:a9:a9:6c:94:
62:38:17:e2:7c:26:53:f4:7f:ec:4f:37:4d:b4:a6:c6:7c:72:
63:4f:18:8e:b4:ab:d3:bd:b5:cb:22:41:1d:43:56:37:57:78:
07:fa:36:58:0f:4a:16:ef:fe:22:78:27:1e:79:0e:2f:96:23:
f2:15:f4:58:a3:8a:96:63:13:33:73:12:4e:c3:91:9d:13:81:
41:83:db:ba:90:9d:67:8d:ec:6a:91:63:b9:33:6d:e7:f1:0a:
d0:de:84:4f:11:47:70:58:51:e6:fe:55:9f:92:4a:ff:d5:a2:
8f:7f:95:f7:18:30:7c:1c:b0:5c:27:10:c9:33:d1:2e:ae:22:
77:6a:41:00:29:f5:5f:c4:2b:f1:7e:d3:58:74:69:f9:1e:aa:
2b:e0:42:e3:f0:f1:c1:7b:82:5c:20:8d:c8:23:6e:d5:05:6a:
ec:83:90:eb:c3:4f:4d:ac:1e:32:01:c1:d5:25:3a:bd:0e:61:
de:4b:41:b7:81:ef:9d:cd:d2:10:8a:e3:9b:1c:48:43:92:6c:
4e:43:8f:a8:52:a0:a8:f0:e9:8c:73:88:b0:23:75:32:b9:4e:
0e:02:d0:9a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNTAyMTAx
NDA1MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyRENFOTk4QzNFNEY0
RTVFNTZGNDMwOUM1RTYwNzIyMzM3Mzk1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6X8eaEumj44zV7acb/tPR5phBveK1OSQ0O0Wx0L2peoKmMzA9
+liKM04ikS6P8nVZg3vobrlntVmMmlDTPNaJyBZC6YfvefWUigUj6bnwf5fR7MJf
pNpbhzh2Otxa0PO4avZqsBuTNZ4vD9Vokjm+3POhBu88cVHOOACxF2exFuk4hneZ
a4zte+b9XEV2ejV+9nXj7vNwP4iQuzt4UCaxIq57zFYWbgN1bOEHSv9PrZcpKfbG
KhtDqy1te/5DJeYsedNHHn6bdjEnOE6FX/KYstvb0nxnBEgzRYe8G/N99Sm63H2L
FkSWSyRHar0/lbKaPz4lhzqBmC33wdI9G3vRAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUEtzpmMPk9OXlb0MJxeYHIjNzlZQwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvRXR6cG1NUGs5T1hsYjBNSnhlWUhJ
ak56bFpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD06nTAN
BgkqhkiG9w0BAQsFAAOCAQEAi4APqsBvTXroUFV16sr+aH/9+gzUgXIM19ZKqUHD
+DGpqWyUYjgX4nwmU/R/7E83TbSmxnxyY08YjrSr0721yyJBHUNWN1d4B/o2WA9K
Fu/+IngnHnkOL5Yj8hX0WKOKlmMTM3MSTsORnROBQYPbupCdZ43sapFjuTNt5/EK
0N6ETxFHcFhR5v5Vn5JK/9Wij3+V9xgwfBywXCcQyTPRLq4id2pBACn1X8Qr8X7T
WHRp+R6qK+BC4/DxwXuCXCCNyCNu1QVq7IOQ68NPTaweMgHB1SU6vQ5h3ktBt4Hv
nc3SEIrjmxxIQ5JsTkOPqFKgqPDpjHOIsCN1MrlODgLQmg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:49 2025 by rpki-client