Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa
File: GDBlaIVU81HsutM3S94EGYXc0e4.roa (raw, json)
Hash identifier: v694n1H8lmMweS6xaELimPeEwNdmJmJeSO45xF4D9TQ=
Subject key identifier: 18:30:65:68:85:54:F3:51:EC:BA:D3:37:4B:DE:04:19:85:DC:D1:EE
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0D51
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa
Signing time: Mon 10 Feb 2025 14:12:15 +0000
ROA not before: Mon 10 Feb 2025 14:12:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3409 (0xd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Feb 10 14:12:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=183065688554F351ECBAD3374BDE041985DCD1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:70:52:10:8d:29:e2:e6:d8:16:31:a2:c8:0d:
cc:07:3a:28:40:05:03:17:fe:37:c2:71:b3:64:93:
dc:a3:b9:79:74:21:b3:e9:08:1d:3a:8e:a7:c5:95:
6f:08:61:42:86:72:0c:ea:80:cc:53:09:51:ce:5e:
3f:4c:13:b5:76:7d:a8:4a:95:e0:80:f1:e8:dc:c4:
da:76:b8:02:de:f7:20:f1:0a:37:87:e9:7f:6b:bf:
fb:3f:d4:e8:3b:07:88:62:3b:a5:a6:49:36:5c:4f:
d8:a1:a0:5b:d0:e7:ac:04:10:cc:58:36:a3:03:59:
d4:77:81:54:bd:3f:87:e3:89:39:63:15:a2:7a:3f:
3f:e9:bc:e4:4e:29:47:5d:e3:1e:cf:22:71:a8:21:
d5:e9:4e:d7:00:10:c5:16:bc:b1:10:a7:98:a7:92:
af:b6:72:44:96:5e:6f:4d:b0:e1:f2:22:36:2c:06:
ed:d5:d2:c3:3c:0c:81:88:44:fb:0c:95:44:cb:69:
be:08:b1:9f:f1:e6:55:1d:ae:52:9e:17:4f:56:ef:
3d:0b:d8:1e:a9:b7:c2:3a:d9:e7:27:87:db:9a:53:
70:09:5c:0b:44:4c:98:89:57:d6:e4:19:b0:07:29:
f7:9e:9e:c9:56:a8:32:a8:4f:28:89:1a:23:7e:6f:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:30:65:68:85:54:F3:51:EC:BA:D3:37:4B:DE:04:19:85:DC:D1:EE
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/GDBlaIVU81HsutM3S94EGYXc0e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
32:94:b3:14:13:eb:5e:85:57:91:64:6f:22:fd:3c:e6:0c:aa:
77:89:87:33:02:08:5c:5d:50:ae:32:38:4d:97:6c:c1:9c:e1:
62:af:bb:1d:94:c4:59:c7:31:af:de:94:cb:9c:00:58:eb:78:
b6:89:8c:3b:65:d8:e4:52:9c:2d:05:32:27:bf:5f:1e:cd:53:
d0:1e:26:1c:a9:ea:73:f4:93:57:10:4a:45:4c:fe:b7:14:81:
b7:37:71:38:e9:cc:6d:e4:8a:0c:9c:da:72:a4:97:82:7b:91:
3c:d5:76:0c:1b:77:6f:63:94:ac:1b:a9:4e:4e:38:f3:39:a0:
f2:2f:a3:d4:4f:d5:d6:3f:27:96:ae:f4:e8:58:f7:9d:c5:b9:
bb:29:1b:c2:db:38:93:3f:93:0a:67:95:b8:32:ef:9d:03:8a:
6c:bf:76:e7:5e:31:d0:8a:68:34:f4:f8:d1:83:da:2b:db:24:
19:25:f2:6a:b1:4d:72:83:2b:3f:8d:83:dc:2f:83:a3:33:2a:
72:51:a4:ae:98:eb:c0:68:5b:ec:38:a9:4f:e9:e3:e8:54:2c:
cd:79:37:31:4c:dd:23:14:d7:91:e1:07:59:b0:22:d6:85:01:
77:1a:7b:29:5a:a6:c2:15:54:48:9b:c8:25:9f:1b:26:a2:23:
cf:35:73:0b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTAyMTAx
NDEyMTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MzA2NTY4ODU1NEYz
NTFFQ0JBRDMzNzRCREUwNDE5ODVEQ0QxRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwcFIQjSni5tgWMaLIDcwHOihABQMX/jfCcbNkk9yjuXl0IbPp
CB06jqfFlW8IYUKGcgzqgMxTCVHOXj9ME7V2fahKleCA8ejcxNp2uALe9yDxCjeH
6X9rv/s/1Og7B4hiO6WmSTZcT9ihoFvQ56wEEMxYNqMDWdR3gVS9P4fjiTljFaJ6
Pz/pvOROKUdd4x7PInGoIdXpTtcAEMUWvLEQp5inkq+2ckSWXm9NsOHyIjYsBu3V
0sM8DIGIRPsMlUTLab4IsZ/x5lUdrlKeF09W7z0L2B6pt8I62ecnh9uaU3AJXAtE
TJiJV9bkGbAHKfeenslWqDKoTyiJGiN+byy5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUGDBlaIVU81HsutM3S94EGYXc0e4wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9HREJsYUlWVTgxSHN1dE0zUzk0
RUdZWGMwZTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTzA
MA0GCSqGSIb3DQEBCwUAA4IBAQAylLMUE+tehVeRZG8i/TzmDKp3iYczAghcXVCu
MjhNl2zBnOFir7sdlMRZxzGv3pTLnABY63i2iYw7ZdjkUpwtBTInv18ezVPQHiYc
qepz9JNXEEpFTP63FIG3N3E46cxt5IoMnNpypJeCe5E81XYMG3dvY5SsG6lOTjjz
OaDyL6PUT9XWPyeWrvToWPedxbm7KRvC2ziTP5MKZ5W4Mu+dA4psv3bnXjHQimg0
9PjRg9or2yQZJfJqsU1ygys/jYPcL4OjMypyUaSumOvAaFvsOKlP6ePoVCzNeTcx
TN0jFNeR4QdZsCLWhQF3GnspWqbCFVRIm8glnxsmoiPPNXML
-----END CERTIFICATE-----
Generated at Tue May 6 17:49:38 2025 by rpki-client