Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa
File: ixT9r0spqrGofW3Le-Bacw2i0_I.roa (raw, json)
Hash identifier: dRUvX9Ci9v+WUoyEgzfes30PMZ9zkLKhK4WcV9yaPBc=
Subject key identifier: 8B:14:FD:AF:4B:29:AA:B1:A8:7D:6D:CB:7B:E0:5A:73:0D:A2:D3:F2
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0E56
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa
Signing time: Mon 10 Feb 2025 14:03:26 +0000
ROA not before: Mon 10 Feb 2025 14:03:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18429
IP address blocks: 27.147.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3670 (0xe56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Feb 10 14:03:26 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8B14FDAF4B29AAB1A87D6DCB7BE05A730DA2D3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:4d:3e:90:26:ce:59:65:91:3e:ad:d7:19:
b0:6a:cc:f7:5e:d6:cf:f1:1f:1f:0e:50:0e:4d:30:
fe:63:fd:3f:da:5c:13:34:80:e5:b6:81:06:06:9a:
d7:e8:75:9a:54:60:46:55:cd:c8:72:2c:e2:b7:50:
e1:57:43:35:4d:0d:a0:86:8c:e8:c4:78:97:7a:c8:
f8:a8:06:51:b0:ab:5a:34:67:1a:da:f6:6d:16:34:
d5:f6:be:1a:c1:cd:bb:2c:c5:63:38:d3:7d:9b:64:
e4:06:1b:e6:0d:6f:84:ca:0e:82:fd:e2:5f:5e:97:
c2:fb:ad:5b:6d:3a:fd:f8:6b:50:09:d5:ee:3b:ae:
03:f5:51:c4:09:38:b4:a3:02:44:e6:b4:15:3e:29:
12:e0:2d:0d:28:a4:7e:b5:e6:ca:8c:7d:f2:df:93:
a4:65:0e:5a:c2:ba:ed:92:e2:c1:52:8a:4c:a0:25:
9d:da:80:d9:0e:9a:fd:cc:29:b0:46:cc:ed:a6:39:
56:f6:79:76:f2:01:93:d2:d8:aa:1f:89:be:38:90:
6f:13:d7:98:a3:29:2a:4f:8a:e7:ce:a8:4d:48:c0:
f5:7b:a2:d3:b8:f7:a1:07:22:bc:e3:29:03:e9:b1:
2d:5b:fa:ec:5f:67:02:64:04:5e:13:58:36:9c:84:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:FD:AF:4B:29:AA:B1:A8:7D:6D:CB:7B:E0:5A:73:0D:A2:D3:F2
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ixT9r0spqrGofW3Le-Bacw2i0_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:b6:b2:c5:f2:66:d2:1c:ce:35:76:7a:27:60:34:1f:7f:65:
3d:66:db:f1:a3:21:1b:de:fd:10:77:21:4f:a3:44:a1:2d:9c:
57:c0:4e:af:72:38:e7:ee:a5:da:9e:a9:83:d6:df:1d:b6:0c:
3f:3e:40:7a:76:b2:54:db:10:b0:f9:45:ca:cc:45:d0:cf:6a:
ec:ab:6e:02:35:73:a3:bf:fd:41:b9:2a:98:ae:bb:07:7a:50:
20:ae:07:6a:b9:1c:8a:6e:f2:9b:d6:0d:a6:cc:bd:94:1c:28:
17:d5:f5:e5:be:a6:ba:be:f8:bc:03:f4:eb:bf:8e:fb:ae:5a:
85:76:e2:69:27:10:76:11:79:c6:65:80:e1:29:fe:ea:61:7b:
2e:56:98:65:db:28:fb:57:6e:31:c0:4b:33:3a:92:f3:1c:21:
1f:1d:2f:44:35:7d:5d:b0:3f:12:5d:2a:0b:87:35:b9:94:3e:
d0:9c:3b:9c:4f:f9:3f:d9:0d:a2:be:bd:9c:05:43:17:67:74:
05:12:ec:ed:6e:28:bb:77:09:e2:38:46:de:2b:f2:15:cd:1c:
5a:dc:f2:f0:24:2c:8f:64:59:87:ef:fc:61:93:c1:30:db:4a:
e7:aa:45:85:e0:b2:3d:a3:ab:42:b4:fe:66:1f:6c:ba:fb:07:
c2:61:ee:33
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTAyMTAx
NDAzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCMTRGREFGNEIyOUFB
QjFBODdENkRDQjdCRTA1QTczMERBMkQzRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt2U0+kCbOWWWRPq3XGbBqzPde1s/xHx8OUA5NMP5j/T/aXBM0
gOW2gQYGmtfodZpUYEZVzchyLOK3UOFXQzVNDaCGjOjEeJd6yPioBlGwq1o0Zxra
9m0WNNX2vhrBzbssxWM4032bZOQGG+YNb4TKDoL94l9el8L7rVttOv34a1AJ1e47
rgP1UcQJOLSjAkTmtBU+KRLgLQ0opH615sqMffLfk6RlDlrCuu2S4sFSikygJZ3a
gNkOmv3MKbBGzO2mOVb2eXbyAZPS2Kofib44kG8T15ijKSpPiufOqE1IwPV7otO4
96EHIrzjKQPpsS1b+uxfZwJkBF4TWDachOK/AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUixT9r0spqrGofW3Le+Bacw2i0/IwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9peFQ5cjBzcHFyR29mVzNMZS1C
YWN3MmkwX0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBG5M+
MA0GCSqGSIb3DQEBCwUAA4IBAQAdtrLF8mbSHM41dnonYDQff2U9ZtvxoyEb3v0Q
dyFPo0ShLZxXwE6vcjjn7qXanqmD1t8dtgw/PkB6drJU2xCw+UXKzEXQz2rsq24C
NXOjv/1BuSqYrrsHelAgrgdquRyKbvKb1g2mzL2UHCgX1fXlvqa6vvi8A/Trv477
rlqFduJpJxB2EXnGZYDhKf7qYXsuVphl2yj7V24xwEszOpLzHCEfHS9ENX1dsD8S
XSoLhzW5lD7QnDucT/k/2Q2ivr2cBUMXZ3QFEuztbii7dwniOEbeK/IVzRxa3PLw
JCyPZFmH7/xhk8Ew20rnqkWF4LI9o6tCtP5mH2y6+wfCYe4z
-----END CERTIFICATE-----
Generated at Mon Aug 11 15:00:25 2025 by rpki-client