Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa
File: _oUNMSypNZ45z9h6DIRrEJx7N8s.roa (raw, json)
Hash identifier: hBfcrOk8ASmGEsiyPaKfjNNwQBYUk6DXqEjYNJ3O6e0=
Subject key identifier: FE:85:0D:31:2C:A9:35:9E:39:CF:D8:7A:0C:84:6B:10:9C:7B:37:CB
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 08A6
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa
Signing time: Mon 10 Feb 2025 14:03:49 +0000
ROA not before: Mon 10 Feb 2025 14:03:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131674
IP address blocks: 2405:e4c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Feb 10 14:03:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FE850D312CA9359E39CFD87A0C846B109C7B37CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:ee:d4:e7:92:2e:ee:55:16:88:c9:0c:bc:
22:6c:3b:19:4e:bc:5e:83:59:33:03:8a:f6:52:5f:
46:35:4c:cf:40:f8:ff:8f:55:fc:19:1b:29:0e:75:
95:69:7d:51:b1:76:b8:0d:e2:73:e2:87:14:33:88:
bf:3d:46:30:bb:11:23:81:b9:d2:e4:7c:81:1b:c4:
51:62:fa:0e:79:a0:c3:2b:83:9d:09:61:70:84:29:
5d:dc:23:d4:2d:46:71:22:15:f9:2b:10:71:bb:a2:
5d:7b:83:d4:36:23:76:54:08:ff:60:c4:99:67:e4:
d8:32:44:aa:b2:be:a2:56:d7:4e:e9:4c:7a:3a:02:
67:62:70:96:b2:5c:80:f8:37:63:fb:26:7f:e4:72:
23:76:45:b3:ab:d6:0d:7d:ed:1e:91:b3:cf:44:22:
84:4e:bf:f8:ba:36:76:62:5a:63:85:e2:ce:e6:78:
67:77:ec:8e:f5:57:76:0b:9c:35:8b:1c:42:3d:02:
5d:f2:e0:27:9e:f0:a0:36:d9:e0:ec:f6:88:7f:6e:
92:a7:f5:8b:70:f6:3c:ca:5b:a9:26:52:e6:ad:33:
65:b8:79:1a:45:d6:c3:5e:38:72:2f:ee:07:1e:e5:
2d:e5:e4:96:8b:97:96:0b:6f:b4:51:92:fe:a0:51:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:85:0D:31:2C:A9:35:9E:39:CF:D8:7A:0C:84:6B:10:9C:7B:37:CB
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/_oUNMSypNZ45z9h6DIRrEJx7N8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:1b:56:a2:b2:c3:77:67:de:d2:d7:40:b8:44:bb:86:75:94:
3b:7e:33:eb:b2:00:4e:0f:b2:69:48:99:e0:c1:4b:20:02:f9:
62:cd:1e:0a:5a:ce:97:5e:78:ac:e5:48:a1:50:9f:5e:15:67:
ec:4d:a4:5e:6d:41:d1:9b:d8:38:82:74:cb:5a:b5:23:72:c9:
3d:96:92:b2:9b:17:da:1b:2e:2d:78:14:13:33:8a:8f:37:97:
62:74:d1:ee:82:a2:16:36:96:50:0b:cd:95:3b:f3:2b:e0:57:
db:e8:94:78:08:b9:97:6f:a5:3c:9e:3f:86:78:6a:5f:19:8a:
1b:40:64:aa:ff:7e:1c:13:6b:6e:39:ae:b4:80:a0:01:34:13:
07:be:52:5d:89:ac:59:f1:69:a2:87:6c:ed:42:e6:02:35:32:
ec:cc:b4:35:35:57:88:8c:4a:3a:67:82:c3:04:bf:17:d9:5d:
a3:ce:00:86:35:88:b0:9a:92:6e:27:ab:b6:94:4b:69:f1:aa:
8a:70:ae:ef:de:0f:03:43:1a:f6:49:aa:36:e3:bd:23:92:84:
70:97:0b:b7:5a:2d:7f:c1:04:de:be:42:63:e7:cb:e8:55:35:
d7:81:99:b8:0c:36:55:96:e7:f0:82:6c:14:9c:6d:b3:19:2c:
0e:91:96:f6
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNTAyMTAx
NDAzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFODUwRDMxMkNBOTM1
OUUzOUNGRDg3QTBDODQ2QjEwOUM3QjM3Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNFu7U55Iu7lUWiMkMvCJsOxlOvF6DWTMDivZSX0Y1TM9A+P+P
VfwZGykOdZVpfVGxdrgN4nPihxQziL89RjC7ESOBudLkfIEbxFFi+g55oMMrg50J
YXCEKV3cI9QtRnEiFfkrEHG7ol17g9Q2I3ZUCP9gxJln5NgyRKqyvqJW107pTHo6
AmdicJayXID4N2P7Jn/kciN2RbOr1g197R6Rs89EIoROv/i6NnZiWmOF4s7meGd3
7I71V3YLnDWLHEI9Al3y4Cee8KA22eDs9oh/bpKn9Ytw9jzKW6kmUuatM2W4eRpF
1sNeOHIv7gce5S3l5JaLl5YLb7RRkv6gUTChAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU/oUNMSypNZ45z9h6DIRrEJx7N8swHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw
5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP
Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvX29VTk1TeXBOWjQ1ejlo
NkRJUnJFSng3TjhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQF5MAwDQYJKoZIhvcNAQELBQADggEBAA0bVqKyw3dn3tLXQLhEu4Z1lDt+M+uy
AE4PsmlImeDBSyAC+WLNHgpazpdeeKzlSKFQn14VZ+xNpF5tQdGb2DiCdMtatSNy
yT2WkrKbF9obLi14FBMzio83l2J00e6CohY2llALzZU78yvgV9volHgIuZdvpTye
P4Z4al8ZihtAZKr/fhwTa245rrSAoAE0Ewe+Ul2JrFnxaaKHbO1C5gI1MuzMtDU1
V4iMSjpngsMEvxfZXaPOAIY1iLCakm4nq7aUS2nxqopwru/eDwNDGvZJqjbjvSOS
hHCXC7daLX/BBN6+QmPny+hVNdeBmbgMNlWW5/CCbBScbbMZLA6RlvY=
-----END CERTIFICATE-----
Generated at Wed Jun 25 02:48:47 2025 by rpki-client