Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa
File: wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa (raw, json)
Hash identifier: cAKYw96vd80FWOvb0GYcqCBieVFrf4EGv0eM+MCiss8=
Subject key identifier: C2:3C:EA:54:93:D9:50:74:CA:82:46:71:7D:C6:8F:EA:22:76:94:FA
Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial: 01C4
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa
Signing time: Mon 10 Feb 2025 14:17:16 +0000
ROA not before: Mon 10 Feb 2025 14:17:16 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 63897
IP address blocks: 103.178.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Validity
Not Before: Feb 10 14:17:16 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C23CEA5493D95074CA8246717DC68FEA227694FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:b9:53:66:86:37:f7:3d:93:46:93:97:66:
8b:19:ef:db:2c:20:3d:d6:a2:c0:03:1a:8c:18:82:
ca:dd:d7:f5:0a:79:9b:db:70:95:61:60:79:7f:b8:
dd:ff:5b:79:06:26:52:fc:b9:d2:40:03:db:e4:b7:
a3:b2:bf:3e:3a:9a:e8:32:16:33:be:21:51:19:75:
6f:f0:af:a1:04:d7:59:62:5e:5f:b0:1b:94:1e:a1:
44:e9:ed:3e:ed:09:2e:8a:be:3e:b7:05:75:51:8b:
76:cc:f1:b9:57:a0:bf:c9:b2:99:29:b3:15:03:84:
b0:58:83:ef:b5:c9:9b:42:0f:eb:9f:1d:f3:60:4f:
32:7d:1c:96:d0:f8:d9:e8:60:9a:c8:7a:b5:6a:a2:
d3:66:8a:ca:f8:7d:71:45:7d:e4:60:e2:73:ed:bd:
a5:fd:42:d5:ff:2c:1c:b7:d3:46:3d:c4:ed:ed:91:
48:e4:d0:2e:bb:e2:d1:45:14:72:c5:1b:9a:65:02:
12:06:1b:e1:12:88:07:57:9e:97:26:24:1f:80:95:
67:08:da:89:ca:ad:56:db:df:3b:a2:e6:04:14:b0:
9a:a6:d6:1f:1b:15:fe:e2:86:e5:f7:c6:6b:7b:b3:
2e:35:d1:ff:af:a5:01:58:61:22:8d:41:17:dc:f8:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:EA:54:93:D9:50:74:CA:82:46:71:7D:C6:8F:EA:22:76:94:FA
X509v3 Authority Key Identifier:
keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/wjzqVJPZUHTKgkZxfcaP6iJ2lPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:eb:a1:4d:c9:73:f7:99:a3:1b:73:62:cf:98:6b:b2:cc:3c:
9a:fc:79:1e:a9:6e:59:52:8d:ab:fe:54:bd:ef:fa:47:ea:08:
22:df:6e:13:bb:fe:04:82:ac:1b:1c:95:10:35:17:75:44:97:
e5:c5:c5:d4:55:39:af:f0:d7:cc:49:08:cd:92:96:1e:91:c0:
ec:a7:a0:56:ab:4a:24:83:a2:74:4c:bc:4f:eb:ef:0f:e1:83:
4b:38:4a:48:d8:a8:7d:09:8b:c2:33:8f:4d:30:40:8d:58:5b:
90:00:49:a1:4f:22:a9:64:be:2f:ee:6e:6e:1a:ae:11:b2:5e:
01:07:91:4f:89:90:e4:c1:1e:05:b3:9c:0a:ff:13:8c:58:23:
4b:65:50:e9:33:63:ca:d1:78:ea:28:96:84:70:c1:e4:1b:5d:
c6:24:95:17:c2:04:e8:07:af:7e:7c:91:23:81:6d:83:2f:f4:
23:2a:d0:9c:b8:8c:0a:f7:6b:b1:0a:31:ab:e0:76:0b:90:0f:
f4:e8:a8:01:00:15:70:84:ba:8a:f0:af:37:69:0c:d5:96:9d:
b3:aa:92:3c:ad:ef:46:7f:7d:f9:14:2a:64:a8:5e:b2:71:a3:
43:7a:4f:07:21:cc:33:b5:e2:3a:d4:57:54:a5:81:8a:c5:ae:
68:d7:a9:9c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUU4
NDcxMDhFQkEwQjU1MEJDMDIwRkQ5QjFEQzZERUIyOUUwREJFRjAeFw0yNTAyMTAx
NDE3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyM0NFQTU0OTNEOTUw
NzRDQTgyNDY3MTdEQzY4RkVBMjI3Njk0RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSu7lTZoY39z2TRpOXZosZ79ssID3WosADGowYgsrd1/UKeZvb
cJVhYHl/uN3/W3kGJlL8udJAA9vkt6Oyvz46mugyFjO+IVEZdW/wr6EE11liXl+w
G5QeoUTp7T7tCS6Kvj63BXVRi3bM8blXoL/JspkpsxUDhLBYg++1yZtCD+ufHfNg
TzJ9HJbQ+NnoYJrIerVqotNmisr4fXFFfeRg4nPtvaX9QtX/LBy300Y9xO3tkUjk
0C674tFFFHLFG5plAhIGG+ESiAdXnpcmJB+AlWcI2onKrVbb3zui5gQUsJqm1h8b
Ff7ihuX3xmt7sy410f+vpQFYYSKNQRfc+ADFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUwjzqVJPZUHTKgkZxfcaP6iJ2lPowHwYDVR0jBBgwFoAUnoRxCOugtVC8Ag/Z
sdxt6yng2+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVk9DT00v
bm9SeENPdWd0VkM4QWdfWnNkeHQ2eW5nMi04LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ub1J4Q091Z3RWQzhBZ19ac2R4dDZ5bmcyLTguY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WT0NPTS93anpxVkpQWlVIVEtna1p4ZmNh
UDZpSjJsUG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7Il
MA0GCSqGSIb3DQEBCwUAA4IBAQCd66FNyXP3maMbc2LPmGuyzDya/HkeqW5ZUo2r
/lS97/pH6ggi324Tu/4EgqwbHJUQNRd1RJflxcXUVTmv8NfMSQjNkpYekcDsp6BW
q0okg6J0TLxP6+8P4YNLOEpI2Kh9CYvCM49NMECNWFuQAEmhTyKpZL4v7m5uGq4R
sl4BB5FPiZDkwR4Fs5wK/xOMWCNLZVDpM2PK0XjqKJaEcMHkG13GJJUXwgToB69+
fJEjgW2DL/QjKtCcuIwK92uxCjGr4HYLkA/06KgBABVwhLqK8K83aQzVlp2zqpI8
re9Gf335FCpkqF6ycaNDek8HIcwzteI61FdUpYGKxa5o16mc
-----END CERTIFICATE-----
Generated at Sun May 18 14:44:35 2025 by rpki-client