Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/QW82A6aM9JupYQKWQZeNxUy7zvQ.roa
File: QW82A6aM9JupYQKWQZeNxUy7zvQ.roa (raw, json)
Hash identifier: GdACV82LTHfKd8hnHDGcAur1PtI43T2daRlNsrbpm4Y=
Subject key identifier: 41:6F:36:03:A6:8C:F4:9B:A9:61:02:96:41:97:8D:C5:4C:BB:CE:F4
Certificate issuer: /CN=069CE651DD7D716A89A8EE84873DCCBF41354799
Certificate serial: EC
Authority key identifier: 06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/QW82A6aM9JupYQKWQZeNxUy7zvQ.roa
Signing time: Thu 09 Jan 2025 15:34:14 +0000
ROA not before: Thu 09 Jan 2025 15:34:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18041
IP address blocks: 2401:7a60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069CE651DD7D716A89A8EE84873DCCBF41354799
Validity
Not Before: Jan 9 15:34:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=416F3603A68CF49BA961029641978DC54CBBCEF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:51:ad:9f:91:d6:07:e7:dc:4c:45:d6:b7:
b8:7a:8c:4b:65:c6:7f:eb:42:1e:fa:d8:c5:fc:b5:
84:2b:33:88:7b:7a:bb:6e:85:3c:1e:b1:b1:5b:8c:
0a:af:35:06:7d:e6:cb:b8:ad:3b:4a:1f:98:6f:50:
f5:46:ce:31:fe:17:09:29:7d:a6:4d:36:9d:23:b0:
2e:6b:7d:a6:6c:94:8b:2c:b1:59:28:11:55:72:9b:
ae:31:04:a4:e4:b8:e5:60:fd:1f:06:63:41:c6:ee:
5d:b9:3d:8a:d6:a4:2a:56:84:72:08:5c:c8:87:ce:
1d:f5:3c:a7:4e:17:73:eb:bd:ed:e6:5d:d9:20:94:
c6:3e:44:ed:74:02:c1:bf:c7:fe:b2:60:39:0d:e2:
9e:28:38:2a:74:bd:22:36:cd:cb:76:c5:93:80:3d:
0e:f2:9b:c6:23:0a:bb:4e:d9:f2:c4:ac:ed:6d:95:
8b:23:d0:8b:83:f3:dc:80:ed:41:03:58:fb:cf:ca:
b9:d4:e9:85:19:64:a7:13:e6:02:18:e0:ad:ae:1e:
e0:26:dc:f7:98:39:74:a4:22:17:c0:45:9a:f1:bc:
62:2e:45:6b:df:84:75:cb:3a:c3:5f:a2:63:96:ae:
7b:74:a1:f6:b8:fb:ce:7c:93:88:f4:9c:be:be:92:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:36:03:A6:8C:F4:9B:A9:61:02:96:41:97:8D:C5:4C:BB:CE:F4
X509v3 Authority Key Identifier:
keyid:06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/QW82A6aM9JupYQKWQZeNxUy7zvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7a60::/32
Signature Algorithm: sha256WithRSAEncryption
e8:ad:4d:34:09:e5:2e:9a:1d:ce:e3:af:ea:88:ec:c1:86:5c:
08:e5:0d:be:91:66:bd:d8:14:a2:fd:05:d1:6a:ae:7b:7d:4e:
87:e9:e8:86:d7:17:c9:e5:67:dd:35:95:39:88:bf:57:2a:0d:
ec:21:9f:4c:b2:b7:91:79:83:bf:8c:9f:2d:65:07:3a:e5:d5:
35:a4:d5:ff:0e:41:2b:7d:ef:bf:3f:76:4c:52:e2:26:ba:f5:
9a:12:e2:d3:cd:71:ec:a1:3e:63:46:e0:62:64:7b:ba:3b:6b:
61:04:82:b9:d8:b9:ac:eb:b9:95:9a:5e:87:98:b1:68:86:be:
7d:78:a1:90:b5:d2:7e:f6:06:c8:a3:ba:cd:23:b1:1f:de:bb:
a9:f8:51:b7:7b:af:cb:55:5f:33:b2:d4:0b:c8:0b:8e:41:6a:
94:e1:60:ca:a5:b0:96:ab:d7:57:52:b4:e4:f1:04:8c:be:91:
3b:f5:96:f6:1a:38:ca:fd:04:e5:63:5b:c0:94:41:16:d8:60:
74:60:f2:ba:ff:0a:69:0b:8e:c6:75:0e:56:41:77:b1:5c:92:
ff:36:19:78:49:1e:74:7a:9e:ec:3f:4e:72:6e:7d:fa:e6:40:
10:73:b5:57:f0:3a:68:b6:6e:64:0b:a2:ae:03:bb:42:2d:dc:
57:78:22:f1
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDY5
Q0U2NTFERDdENzE2QTg5QThFRTg0ODczRENDQkY0MTM1NDc5OTAeFw0yNTAxMDkx
NTM0MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQxNkYzNjAzQTY4Q0Y0
OUJBOTYxMDI5NjQxOTc4REM1NENCQkNFRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZWVGtn5HWB+fcTEXWt7h6jEtlxn/rQh762MX8tYQrM4h7ertu
hTwesbFbjAqvNQZ95su4rTtKH5hvUPVGzjH+FwkpfaZNNp0jsC5rfaZslIsssVko
EVVym64xBKTkuOVg/R8GY0HG7l25PYrWpCpWhHIIXMiHzh31PKdOF3Prve3mXdkg
lMY+RO10AsG/x/6yYDkN4p4oOCp0vSI2zct2xZOAPQ7ym8YjCrtO2fLErO1tlYsj
0IuD89yA7UEDWPvPyrnU6YUZZKcT5gIY4K2uHuAm3PeYOXSkIhfARZrxvGIuRWvf
hHXLOsNfomOWrnt0ofa4+858k4j0nL6+kr4PAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUQW82A6aM9JupYQKWQZeNxUy7zvQwHwYDVR0jBBgwFoAUBpzmUd19cWqJqO6E
hz3Mv0E1R5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVJDSEUv
QnB6bVVkMTljV3FKcU82RWh6M012MEUxUjVrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9CcHptVWQxOWNXcUpxTzZFaHozTXYwRTFSNWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BUkNIRS9RVzgyQTZhTTlKdXBZUUtXUVpl
TnhVeTd6dlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAF6
YDANBgkqhkiG9w0BAQsFAAOCAQEA6K1NNAnlLpodzuOv6ojswYZcCOUNvpFmvdgU
ov0F0Wque31Oh+nohtcXyeVn3TWVOYi/VyoN7CGfTLK3kXmDv4yfLWUHOuXVNaTV
/w5BK33vvz92TFLiJrr1mhLi081x7KE+Y0bgYmR7ujtrYQSCudi5rOu5lZpeh5ix
aIa+fXihkLXSfvYGyKO6zSOxH967qfhRt3uvy1VfM7LUC8gLjkFqlOFgyqWwlqvX
V1K05PEEjL6RO/WW9ho4yv0E5WNbwJRBFthgdGDyuv8KaQuOxnUOVkF3sVyS/zYZ
eEkedHqe7D9Ocm59+uZAEHO1V/A6aLZuZAuirgO7Qi3cV3gi8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:37:25 2025 by rpki-client