Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mv9h1Sak_3olm8EAo4voNnEdN9o.roa
File: mv9h1Sak_3olm8EAo4voNnEdN9o.roa (raw, json)
Hash identifier: akfN9BeGCj0HAFejtwIxjbYANBsk4Pa0Mh2cAhAiznw=
Subject key identifier: 9A:FF:61:D5:26:A4:FF:7A:25:9B:C1:00:A3:8B:E8:36:71:1D:37:DA
Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial: 0CCA
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mv9h1Sak_3olm8EAo4voNnEdN9o.roa
Signing time: Mon 10 Feb 2025 14:15:25 +0000
ROA not before: Mon 10 Feb 2025 14:15:25 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17408
IP address blocks: 2403:ad40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3274 (0xcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Validity
Not Before: Feb 10 14:15:25 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9AFF61D526A4FF7A259BC100A38BE836711D37DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:c2:b9:ad:e0:f4:e6:53:00:7c:de:5f:b0:
35:5b:22:35:e6:c8:31:15:66:78:62:3f:e0:a7:5d:
26:38:5b:d6:c1:56:5a:2c:20:59:6d:3e:db:0c:af:
84:f3:97:ad:82:3a:0f:c5:f0:56:a6:56:a8:c4:87:
a8:d0:cc:01:66:89:cf:70:75:65:d2:71:14:45:3b:
c5:4d:85:c5:c9:a8:03:3b:b3:00:d5:d1:15:47:11:
14:3f:21:87:e3:f5:73:a3:c1:fb:38:6b:39:31:4d:
3a:97:c6:1e:1b:be:15:b0:e4:1a:8e:b4:02:cc:7c:
d4:aa:fb:6a:d4:2e:de:b6:2b:a4:2e:e6:aa:27:7b:
01:8c:de:04:be:2f:b3:83:29:ad:1c:bd:76:38:07:
39:8a:1a:4f:ca:97:e7:f2:a0:42:81:db:ef:c4:0e:
5a:86:9d:32:64:75:92:34:fa:6b:b3:1e:cb:0a:72:
9d:14:f5:9a:3e:a8:41:31:61:93:c9:cd:49:4d:53:
a5:f1:c6:4b:62:0d:03:37:70:b9:02:f0:f2:49:d5:
3a:f4:eb:2c:91:c3:b6:4c:35:87:27:d9:ea:15:8c:
51:88:74:58:df:e7:db:d2:80:af:15:57:b7:b9:0e:
51:10:ec:32:4d:31:8d:c0:cf:ce:8f:c9:23:c9:68:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FF:61:D5:26:A4:FF:7A:25:9B:C1:00:A3:8B:E8:36:71:1D:37:DA
X509v3 Authority Key Identifier:
keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/mv9h1Sak_3olm8EAo4voNnEdN9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
10:65:b2:25:18:97:ab:8c:dc:22:20:dc:85:2e:30:ca:d7:dc:
03:b1:27:49:9a:f0:0a:84:4b:79:01:74:bc:4f:4e:19:e3:12:
1d:26:2b:10:f2:f8:92:42:84:7e:51:d8:96:25:24:ea:99:b4:
c2:05:c2:30:ed:0b:4a:33:d8:a3:2b:44:a7:d4:70:46:05:c7:
64:ff:68:59:f1:d2:cf:a7:72:ea:08:bc:1c:3e:f3:87:a9:a7:
bb:50:22:72:2d:5d:40:18:d3:ae:f0:e0:85:60:03:04:8d:bf:
b6:1a:9b:ac:e6:95:34:c6:fc:4c:b7:57:f6:0f:d3:4c:5e:79:
18:16:6e:c8:1d:26:7f:89:ca:81:f1:2a:63:d9:41:62:86:57:
38:0c:c6:9a:96:78:91:ff:98:91:55:86:2f:1d:0c:d7:62:45:
37:b9:e7:75:2f:67:07:ca:75:64:d0:a1:09:73:5e:d5:15:3e:
ad:66:1f:cb:f8:fd:a5:72:07:2d:a7:4b:45:67:6d:b6:f7:f5:
d3:34:8f:da:29:bc:6e:c7:31:73:ac:71:7e:4e:08:b0:92:22:
a9:db:3a:15:66:bd:75:9d:f8:0d:d1:89:9f:0f:ed:4c:27:61:
07:c4:db:11:7f:12:1b:16:55:67:e1:be:76:3d:90:72:a2:35:
6d:fb:77:be
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw
QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTAyMTAx
NDE1MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBRkY2MUQ1MjZBNEZG
N0EyNTlCQzEwMEEzOEJFODM2NzExRDM3REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqCMK5reD05lMAfN5fsDVbIjXmyDEVZnhiP+CnXSY4W9bBVlos
IFltPtsMr4Tzl62COg/F8FamVqjEh6jQzAFmic9wdWXScRRFO8VNhcXJqAM7swDV
0RVHERQ/IYfj9XOjwfs4azkxTTqXxh4bvhWw5BqOtALMfNSq+2rULt62K6Qu5qon
ewGM3gS+L7ODKa0cvXY4BzmKGk/Kl+fyoEKB2+/EDlqGnTJkdZI0+muzHssKcp0U
9Zo+qEExYZPJzUlNU6XxxktiDQM3cLkC8PJJ1Tr06yyRw7ZMNYcn2eoVjFGIdFjf
59vSgK8VV7e5DlEQ7DJNMY3Az86PySPJaEyDAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUmv9h1Sak/3olm8EAo4voNnEdN9owHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz
phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU
RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvbXY5aDFTYWtfM29sbThF
QW80dm9ObkVkTjlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQDrUAwDQYJKoZIhvcNAQELBQADggEBABBlsiUYl6uM3CIg3IUuMMrX3AOxJ0ma
8AqES3kBdLxPThnjEh0mKxDy+JJChH5R2JYlJOqZtMIFwjDtC0oz2KMrRKfUcEYF
x2T/aFnx0s+ncuoIvBw+84epp7tQInItXUAY067w4IVgAwSNv7Yam6zmlTTG/Ey3
V/YP00xeeRgWbsgdJn+JyoHxKmPZQWKGVzgMxpqWeJH/mJFVhi8dDNdiRTe553Uv
ZwfKdWTQoQlzXtUVPq1mH8v4/aVyBy2nS0Vnbbb39dM0j9opvG7HMXOscX5OCLCS
IqnbOhVmvXWd+A3RiZ8P7UwnYQfE2xF/EhsWVWfhvnY9kHKiNW37d74=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client