Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa
File: 9T1iDWTvQF6NWCziNrO3RAHNA5M.roa (raw, json)
Hash identifier: T3L4Mo6xEnNzr8wKP1vMXBOX2CPg5HJsZVJkTc36ASU=
Subject key identifier: F5:3D:62:0D:64:EF:40:5E:8D:58:2C:E2:36:B3:B7:44:01:CD:03:93
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1065
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa
Signing time: Mon 26 Aug 2024 05:16:22 +0000
ROA not before: Mon 26 Aug 2024 05:16:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4197 (0x1065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Aug 26 05:16:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F53D620D64EF405E8D582CE236B3B74401CD0393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:50:5d:e9:68:17:80:1c:b6:2c:d5:a9:34:
82:1d:2b:72:00:92:55:50:c4:18:3e:16:2e:12:8e:
f8:30:86:a3:c3:a1:2c:ad:cd:fa:12:92:7c:e0:f7:
db:47:02:7f:01:74:c2:d9:ce:54:62:27:16:2f:44:
d6:67:5f:05:32:4e:50:6c:ca:ac:c7:e5:33:73:7c:
e9:d0:7f:34:aa:9b:91:77:62:01:fb:c6:57:ff:70:
6e:bb:4d:fa:e1:f8:ff:80:fc:6f:51:fc:49:0c:e8:
39:f3:bd:46:de:34:a8:92:d1:2e:44:7d:9f:f7:c4:
9a:fd:25:7a:f6:fc:d1:67:8e:39:45:34:db:6f:48:
eb:51:20:dd:83:11:db:2a:ef:75:aa:1f:0b:de:1a:
99:1d:d4:78:6d:4a:bf:62:2a:eb:a6:fa:91:66:72:
25:33:e2:7d:34:4a:d7:4a:0f:e9:06:3c:a6:60:37:
1b:cc:55:48:01:33:b9:ac:dc:f7:2a:76:04:92:e5:
3e:4f:99:09:3f:a2:5d:95:5c:6c:30:97:44:83:8e:
19:d5:7d:f6:27:ab:e8:f8:9f:26:3c:ad:a5:45:4b:
1c:b1:30:cc:1a:fe:8b:16:c2:3b:86:e2:09:f1:66:
95:a5:48:7b:65:94:dd:29:b7:2b:2c:40:a8:cc:bb:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:62:0D:64:EF:40:5E:8D:58:2C:E2:36:B3:B7:44:01:CD:03:93
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:ee:43:8a:d0:5d:27:9d:4d:e3:a7:ec:e8:cb:66:b1:5e:4e:
f5:b7:d4:27:eb:48:36:39:22:75:2b:a3:b3:2b:b8:74:28:f0:
9b:30:89:f2:8e:21:cb:a2:24:85:46:07:4b:5c:de:9b:22:38:
ec:b8:d1:2d:96:1f:e5:e0:27:9e:56:49:96:2a:91:f0:4d:79:
cf:59:a3:47:f2:6c:2a:48:16:27:eb:86:33:15:b4:7a:4a:22:
25:af:32:5e:d5:b9:4c:bf:51:3a:b2:42:a2:ee:02:7e:74:d7:
be:8f:3a:a3:fa:1c:14:36:bb:62:5f:f6:b3:b8:6a:c0:9b:e8:
bd:0d:e3:b0:ef:47:29:60:40:38:62:5b:2a:7d:6b:a4:df:9d:
76:70:c5:9f:2e:c5:ed:60:65:95:74:57:e0:b5:e9:27:16:6c:
37:3b:4a:32:3c:70:97:9d:0a:a2:da:f1:f8:b9:78:c9:4f:fb:
9a:54:80:58:e3:c8:c4:5d:a7:b8:bd:7a:2b:d5:2b:5a:79:6f:
66:e4:97:ee:8e:ab:89:29:85:a1:22:cc:a6:83:27:c6:65:e9:
37:b8:04:c0:b7:28:95:f2:58:55:a5:23:d3:c8:38:68:04:51:
fa:0f:0f:ce:f5:1f:1d:4a:67:90:da:b4:89:1a:77:d7:fd:fe:
0f:3c:bd:25
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICEGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw
NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1M0Q2MjBENjRFRjQw
NUU4RDU4MkNFMjM2QjNCNzQ0MDFDRDAzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXIlBd6WgXgBy2LNWpNIIdK3IAklVQxBg+Fi4SjvgwhqPDoSyt
zfoSknzg99tHAn8BdMLZzlRiJxYvRNZnXwUyTlBsyqzH5TNzfOnQfzSqm5F3YgH7
xlf/cG67Tfrh+P+A/G9R/EkM6DnzvUbeNKiS0S5EfZ/3xJr9JXr2/NFnjjlFNNtv
SOtRIN2DEdsq73WqHwveGpkd1HhtSr9iKuum+pFmciUz4n00StdKD+kGPKZgNxvM
VUgBM7ms3PcqdgSS5T5PmQk/ol2VXGwwl0SDjhnVffYnq+j4nyY8raVFSxyxMMwa
/osWwjuG4gnxZpWlSHtllN0ptyssQKjMu5rBAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU9T1iDWTvQF6NWCziNrO3RAHNA5MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzlUMWlEV1R2UUY2TldDemlOck8zUkFI
TkE1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ
KoZIhvcNAQELBQADggEBAJ7uQ4rQXSedTeOn7OjLZrFeTvW31CfrSDY5InUro7Mr
uHQo8JswifKOIcuiJIVGB0tc3psiOOy40S2WH+XgJ55WSZYqkfBNec9Zo0fybCpI
FifrhjMVtHpKIiWvMl7VuUy/UTqyQqLuAn50176POqP6HBQ2u2Jf9rO4asCb6L0N
47DvRylgQDhiWyp9a6TfnXZwxZ8uxe1gZZV0V+C16ScWbDc7SjI8cJedCqLa8fi5
eMlP+5pUgFjjyMRdp7i9eivVK1p5b2bkl+6Oq4kphaEizKaDJ8Zl6Te4BMC3KJXy
WFWlI9PIOGgEUfoPD871Hx1KZ5DatIkad9f9/g88vSU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:40:45 2025 by rpki-client