Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa
File: 3__B6FtZH3zWG0oKIof9g0XlIJ0.roa (raw, json)
Hash identifier: CTPdO0BiAeIufBmUXMkcIVJnY/G6mm4e+AtHAnO31ms=
Subject key identifier: DF:FF:C1:E8:5B:59:1F:7C:D6:1B:4A:0A:22:87:FD:83:45:E5:20:9D
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1121
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa
Signing time: Mon 10 Feb 2025 13:56:51 +0000
ROA not before: Mon 10 Feb 2025 13:56:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 113.61.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4385 (0x1121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DFFFC1E85B591F7CD61B4A0A2287FD8345E5209D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:f6:15:6b:10:09:8f:88:bc:58:0c:d3:ba:
46:e0:72:b6:72:59:b9:4f:7d:7a:ea:cb:25:45:f3:
e3:af:23:18:b7:8d:72:c5:95:f6:5d:d4:56:ca:7f:
7c:4e:96:a9:9a:91:1e:a0:71:a3:fd:31:08:76:41:
7e:5a:fd:4e:78:a0:0e:cd:48:07:3a:4a:f4:14:37:
9b:b8:2c:8f:b6:1b:8e:ac:b9:8d:b7:c5:f1:a2:b4:
37:08:23:9e:45:f9:c9:87:34:ae:17:5e:f8:91:a2:
86:4c:61:10:4c:99:65:17:a6:e0:81:2e:ee:fb:3e:
05:53:ae:32:8f:57:03:6d:a9:ad:8e:52:2f:6f:f3:
d5:43:b9:3e:d3:cd:cf:77:d4:ec:28:8a:1c:30:81:
75:d1:b1:da:02:d5:43:be:a6:dc:18:22:bb:4c:26:
d8:c9:b1:d3:a8:ca:42:b4:dc:94:56:26:21:51:31:
13:3a:4c:fa:6d:de:c8:6b:b3:e0:ea:fe:11:0b:1b:
1d:08:19:f8:6d:23:c1:15:d9:4f:30:dd:ad:dc:1d:
f4:a8:7b:b8:7f:b4:55:20:d2:0c:dc:3b:ee:53:c2:
91:c4:3b:80:9b:69:4c:29:62:68:3a:ad:10:42:10:
a0:ec:27:e5:67:e5:fb:61:1e:a8:1f:0b:4c:04:11:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:C1:E8:5B:59:1F:7C:D6:1B:4A:0A:22:87:FD:83:45:E5:20:9D
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3__B6FtZH3zWG0oKIof9g0XlIJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0f:51:a0:ab:62:29:04:d9:da:e8:55:6f:82:eb:7b:96:67:b9:
47:c0:ab:5f:bf:a0:b7:8d:d7:72:32:9c:f4:07:49:c7:64:38:
ef:52:80:ed:8e:0f:79:30:ae:f4:95:b5:71:ba:26:aa:97:c3:
81:86:59:f5:06:6f:f3:dc:38:2f:5e:f1:c5:30:44:48:40:40:
30:7c:6e:b7:66:04:e1:cf:dc:52:bf:3f:77:bb:94:48:03:9f:
ea:98:5e:8c:0f:52:78:62:e0:e1:f2:71:0f:29:0a:36:6a:9e:
af:68:2d:63:75:b7:97:1d:93:24:5b:3a:ef:41:bf:39:59:62:
a5:f5:f7:fd:d3:c2:41:06:04:5d:ff:f1:da:a5:ee:aa:e7:4e:
3c:16:94:9f:c7:27:c5:ba:67:39:33:a3:76:55:b5:4a:57:fc:
af:19:2d:2f:81:aa:3c:08:c5:39:1d:6b:f4:2e:d7:86:3f:ee:
4e:b2:b5:da:4e:31:0e:3f:81:e8:48:44:3f:a9:f3:b8:77:59:
36:03:db:e9:04:ec:61:4c:0e:23:8b:f2:0b:a4:cd:17:f2:c8:
86:4d:3b:88:a4:15:0b:6b:fc:3e:0b:be:dd:af:1a:de:19:7b:
3f:2e:19:40:7b:2f:11:6c:02:1e:73:3e:6a:8a:d0:8a:1e:13:
b1:6e:c7:23
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICESEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx
MzU2NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGRkZDMUU4NUI1OTFG
N0NENjFCNEEwQTIyODdGRDgzNDVFNTIwOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyyfYVaxAJj4i8WAzTukbgcrZyWblPfXrqyyVF8+OvIxi3jXLF
lfZd1FbKf3xOlqmakR6gcaP9MQh2QX5a/U54oA7NSAc6SvQUN5u4LI+2G46suY23
xfGitDcII55F+cmHNK4XXviRooZMYRBMmWUXpuCBLu77PgVTrjKPVwNtqa2OUi9v
89VDuT7Tzc931OwoihwwgXXRsdoC1UO+ptwYIrtMJtjJsdOoykK03JRWJiFRMRM6
TPpt3shrs+Dq/hELGx0IGfhtI8EV2U8w3a3cHfSoe7h/tFUg0gzcO+5TwpHEO4Cb
aUwpYmg6rRBCEKDsJ+Vn5fthHqgfC0wEEfnBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU3//B6FtZH3zWG0oKIof9g0XlIJ0wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvM19fQjZGdFpIM3pXRzBvS0lvZjln
MFhsSUowLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXE9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAD1Ggq2IpBNna6FVvgut7lme5R8CrX7+gt43XcjKc
9AdJx2Q471KA7Y4PeTCu9JW1cbomqpfDgYZZ9QZv89w4L17xxTBESEBAMHxut2YE
4c/cUr8/d7uUSAOf6phejA9SeGLg4fJxDykKNmqer2gtY3W3lx2TJFs670G/OVli
pfX3/dPCQQYEXf/x2qXuqudOPBaUn8cnxbpnOTOjdlW1Slf8rxktL4GqPAjFOR1r
9C7Xhj/uTrK12k4xDj+B6EhEP6nzuHdZNgPb6QTsYUwOI4vyC6TNF/LIhk07iKQV
C2v8Pgu+3a8a3hl7Py4ZQHsvEWwCHnM+aorQih4TsW7HIw==
-----END CERTIFICATE-----
Generated at Wed Jun 25 02:41:40 2025 by rpki-client