Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa
File: 4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa (raw, json)
Hash identifier: pkAp58QSTGact7glnmsf6/uBLuma68Aitv2QN4Qy0Mg=
Subject key identifier: E0:2D:D0:72:C0:96:8E:1C:D3:A4:E2:6D:AC:80:05:10:7B:D3:8F:9B
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0CA9
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa
Signing time: Mon 10 Feb 2025 13:55:53 +0000
ROA not before: Mon 10 Feb 2025 13:55:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 10135
IP address blocks: 2405:5600::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Feb 10 13:55:53 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E02DD072C0968E1CD3A4E26DAC8005107BD38F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:88:c0:2f:43:a4:64:ef:30:cf:ab:65:ae:
15:07:ed:86:e1:a5:68:19:6a:9b:28:87:a3:c1:a6:
d7:fd:6c:59:7f:00:7e:97:b7:ba:5f:c7:d1:b6:b2:
a9:7d:7d:8a:20:ba:c6:c5:01:60:03:74:fd:31:14:
45:c0:ad:c9:04:4c:16:7f:5f:1e:35:7a:28:62:9e:
c7:94:a4:42:c7:19:f6:40:76:08:db:f8:83:24:a4:
2a:92:ba:e7:36:b8:50:cd:42:3b:b5:b0:9b:72:9e:
0e:91:1b:1e:99:ab:76:78:b1:38:59:32:e7:e9:e3:
f2:0b:f3:98:91:5e:32:31:15:b0:79:c9:55:1b:1d:
45:0b:4c:b3:9a:ee:b9:a5:6e:9b:40:57:cc:af:06:
3d:9a:49:60:b5:61:03:56:20:87:87:56:3a:0c:ae:
d5:24:20:d3:e7:7b:39:cd:17:ac:a2:b8:4a:ed:75:
6f:b0:03:a9:8f:42:50:8e:58:f7:5f:a4:1d:52:70:
3f:a7:c6:8e:8e:46:88:3d:da:70:5b:49:5f:1b:a5:
f1:59:85:76:9d:53:0f:ff:1f:17:53:86:a5:10:0b:
68:87:a2:c0:44:be:0f:6c:9f:7d:69:b2:ac:3c:bb:
de:5b:3e:57:a0:ee:33:9b:8a:c0:40:f8:4c:a4:f3:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:D0:72:C0:96:8E:1C:D3:A4:E2:6D:AC:80:05:10:7B:D3:8F:9B
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/4C3QcsCWjhzTpOJtrIAFEHvTj5s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:5600::/32
Signature Algorithm: sha256WithRSAEncryption
77:13:94:64:24:74:f1:53:6b:40:7e:99:a2:06:42:46:ff:08:
9b:d0:67:b2:42:e6:16:df:9f:da:17:24:83:e9:e1:47:3e:43:
34:12:ae:8c:3f:21:aa:ec:48:b8:88:0a:94:ab:fa:67:b9:c3:
d8:95:6c:b5:ee:ff:e4:e9:07:06:b7:42:a0:03:86:e5:c8:80:
4a:7f:89:e0:30:92:97:47:ca:9f:09:f7:10:8f:32:a5:ec:24:
75:6a:b0:f3:4c:81:19:a8:df:b4:21:3e:4d:8e:c6:a1:d0:bd:
d7:29:6c:d8:ac:e7:4d:e8:c6:42:6f:45:38:db:48:9d:17:f4:
fd:17:67:3f:ba:b1:46:b5:4f:f3:fe:fd:f0:39:ef:37:69:f9:
d3:f6:d5:9c:0d:d6:eb:af:d1:98:d1:d8:49:45:69:90:9c:c8:
7b:c0:26:a4:72:2e:a3:80:10:2b:23:90:ae:8d:ff:45:3b:71:
cc:3a:de:ba:68:fe:8f:4e:5e:6d:34:93:83:a4:a8:d7:8f:44:
cc:16:b3:a9:bf:38:e2:0b:00:b9:8b:14:e1:4b:45:af:77:6a:
19:72:29:2b:11:cc:0c:ac:ea:9c:3a:ef:03:0f:99:28:62:01:
df:06:38:66:81:fc:5b:da:73:a7:28:8d:dd:21:14:9a:d7:48:
70:34:7e:e9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTUy
QjE2MTY0QzM2MTA0MEQ4OEYzMkQzNjUwOTQ0OENGM0JCOUQyNTAeFw0yNTAyMTAx
MzU1NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwMkREMDcyQzA5NjhF
MUNEM0E0RTI2REFDODAwNTEwN0JEMzhGOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3DojAL0OkZO8wz6tlrhUH7YbhpWgZapsoh6PBptf9bFl/AH6X
t7pfx9G2sql9fYogusbFAWADdP0xFEXArckETBZ/Xx41eihinseUpELHGfZAdgjb
+IMkpCqSuuc2uFDNQju1sJtyng6RGx6Zq3Z4sThZMufp4/IL85iRXjIxFbB5yVUb
HUULTLOa7rmlbptAV8yvBj2aSWC1YQNWIIeHVjoMrtUkINPneznNF6yiuErtdW+w
A6mPQlCOWPdfpB1ScD+nxo6ORog92nBbSV8bpfFZhXadUw//HxdThqUQC2iHosBE
vg9sn31psqw8u95bPleg7jObisBA+Eyk82hNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU4C3QcsCWjhzTpOJtrIAFEHvTj5swHwYDVR0jBBgwFoAUVSsWFkw2EEDYjzLT
ZQlEjPO7nSUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUFTUE5F
VC9WU3NXRmt3MkVFRFlqekxUWlFsRWpQTzduU1UuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1ZTc1dGa3cyRUVEWWp6TFRaUWxFalBPN25TVS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0VBU1BORVQvNEMzUWNzQ1dqaHpUcE9K
dHJJQUZFSHZUajVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQFVgAwDQYJKoZIhvcNAQELBQADggEBAHcTlGQkdPFTa0B+maIGQkb/CJvQZ7JC
5hbfn9oXJIPp4Uc+QzQSrow/IarsSLiICpSr+me5w9iVbLXu/+TpBwa3QqADhuXI
gEp/ieAwkpdHyp8J9xCPMqXsJHVqsPNMgRmo37QhPk2OxqHQvdcpbNis503oxkJv
RTjbSJ0X9P0XZz+6sUa1T/P+/fA57zdp+dP21ZwN1uuv0ZjR2ElFaZCcyHvAJqRy
LqOAECsjkK6N/0U7ccw63rpo/o9OXm00k4OkqNePRMwWs6m/OOILALmLFOFLRa93
ahlyKSsRzAys6pw67wMPmShiAd8GOGaB/Fvac6cojd0hFJrXSHA0fuk=
-----END CERTIFICATE-----
Generated at Mon Aug 11 14:46:54 2025 by rpki-client