Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/3SScGQxJlAy-o0pYTf1YUlSckqk.roa
File: 3SScGQxJlAy-o0pYTf1YUlSckqk.roa (raw, json)
Hash identifier: KKQMgJ57ctMFEG2BUvG7rC2LFWw613Ld194+f09xalw=
Subject key identifier: DD:24:9C:19:0C:49:94:0C:BE:A3:4A:58:4D:FD:58:52:54:9C:92:A9
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0C96
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/3SScGQxJlAy-o0pYTf1YUlSckqk.roa
Signing time: Mon 26 Aug 2024 05:17:13 +0000
ROA not before: Mon 26 Aug 2024 05:17:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4782
IP address blocks: 124.199.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Aug 26 05:17:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DD249C190C49940CBEA34A584DFD5852549C92A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1f:95:55:b6:80:cd:37:26:32:6f:8b:99:58:
a7:f0:22:c5:d7:ab:43:ac:49:00:0a:ec:ad:79:1a:
3c:11:fa:1e:79:e1:ec:8d:ec:7a:bb:09:99:38:cd:
d5:0b:ad:e2:92:ab:6a:45:bd:55:ca:d7:ae:8e:04:
57:e9:a1:df:d5:7f:a4:2b:ff:c1:71:3e:a1:b8:db:
f9:74:e5:17:3d:01:31:37:58:a1:73:af:df:ff:23:
60:bb:17:f8:4a:29:00:85:fb:28:7a:43:98:8b:8d:
ca:72:57:a8:f5:06:61:6d:9a:33:1b:2c:15:70:b6:
c5:4e:a3:ad:4f:a8:73:bb:c2:3f:9a:a3:4b:19:f8:
c5:37:41:1f:28:b7:b3:bb:24:85:b4:ed:58:ca:bc:
ca:89:95:8f:97:dc:7d:f1:52:61:ac:de:a6:ec:eb:
4a:5e:1c:fc:1b:90:ff:89:51:2f:b8:6b:b8:d1:3e:
22:63:8e:7e:d9:13:79:da:48:3a:ee:99:f4:ed:34:
5e:8b:d7:25:ed:b1:c2:7f:5d:bb:d7:37:81:5a:2d:
86:10:18:57:59:3b:ef:9a:02:81:c3:8e:8b:0d:45:
87:69:d1:a2:c9:13:5e:16:bc:77:5b:8e:5a:4d:47:
c3:a2:04:91:fc:e8:0d:26:2b:84:7e:09:9b:df:eb:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:24:9C:19:0C:49:94:0C:BE:A3:4A:58:4D:FD:58:52:54:9C:92:A9
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/3SScGQxJlAy-o0pYTf1YUlSckqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.199.96.0/20
Signature Algorithm: sha256WithRSAEncryption
05:f0:f1:2c:9b:bf:83:7e:db:80:a1:d3:4d:8d:fb:0f:4d:bc:
19:55:35:d1:9f:50:7f:f4:11:17:d4:c6:28:d2:fb:f1:e3:41:
93:c6:e3:44:03:2b:da:7f:10:99:18:eb:3f:1b:61:73:15:0b:
43:28:ff:ee:ea:af:5d:c3:b7:48:fa:f0:d9:a4:c5:fd:89:9f:
c9:b4:be:08:b6:bd:21:d8:b0:db:bb:c4:79:4e:12:ab:c7:2b:
46:a3:96:1b:3b:46:92:12:16:66:60:8e:54:b2:10:16:53:69:
fb:f0:a2:89:36:37:ba:00:c0:47:62:01:6f:75:43:ca:35:19:
57:e7:b2:02:ca:a9:60:ca:e9:4e:16:ad:a1:53:a1:b2:19:46:
51:f9:4d:58:d6:ad:a6:78:ea:80:e9:6f:c8:28:56:fd:83:79:
3a:a9:e3:68:60:d2:2e:18:02:65:d4:cf:9f:2f:a4:56:67:c2:
a0:b4:ac:c9:ce:d3:ba:5b:79:1d:84:94:41:11:14:4b:a2:7b:
04:ac:25:cb:b2:82:2f:cd:f2:64:68:f1:b8:9c:7a:95:4c:62:
73:80:35:7c:23:ea:6a:9b:ce:e8:89:5d:a6:42:ed:37:35:8d:
19:7d:c4:46:c0:6d:36:37:41:e9:a2:22:93:fe:7b:5a:a5:f1:
db:9d:e0:b4
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNDA4MjYw
NTE3MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREMjQ5QzE5MEM0OTk0
MENCRUEzNEE1ODRERkQ1ODUyNTQ5QzkyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpH5VVtoDNNyYyb4uZWKfwIsXXq0OsSQAK7K15GjwR+h554eyN
7Hq7CZk4zdULreKSq2pFvVXK166OBFfpod/Vf6Qr/8FxPqG42/l05Rc9ATE3WKFz
r9//I2C7F/hKKQCF+yh6Q5iLjcpyV6j1BmFtmjMbLBVwtsVOo61PqHO7wj+ao0sZ
+MU3QR8ot7O7JIW07VjKvMqJlY+X3H3xUmGs3qbs60peHPwbkP+JUS+4a7jRPiJj
jn7ZE3naSDrumfTtNF6L1yXtscJ/XbvXN4FaLYYQGFdZO++aAoHDjosNRYdp0aLJ
E14WvHdbjlpNR8OiBJH86A0mK4R+CZvf63ohAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU3SScGQxJlAy+o0pYTf1YUlSckqkwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOLzNTU2NHUXhKbEF5LW8wcFlUZjFZVWxT
Y2txay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR8x2AwDQYJ
KoZIhvcNAQELBQADggEBAAXw8Sybv4N+24Ch002N+w9NvBlVNdGfUH/0ERfUxijS
+/HjQZPG40QDK9p/EJkY6z8bYXMVC0Mo/+7qr13Dt0j68Nmkxf2Jn8m0vgi2vSHY
sNu7xHlOEqvHK0ajlhs7RpISFmZgjlSyEBZTafvwook2N7oAwEdiAW91Q8o1GVfn
sgLKqWDK6U4WraFTobIZRlH5TVjWraZ46oDpb8goVv2DeTqp42hg0i4YAmXUz58v
pFZnwqC0rMnO07pbeR2ElEERFEuiewSsJcuygi/N8mRo8bicepVMYnOANXwj6mqb
zuiJXaZC7Tc1jRl9xEbAbTY3QemiIpP+e1ql8dud4LQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:46:58 2025 by rpki-client