Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa
File: poyDiTS31SHy4NfHlt2RKjtlnb8.roa (raw, json)
Hash identifier: rxF4v8Ua8shCmp6WwJXIfiNLWyzEU9Lvw8G82HQDC8c=
Subject key identifier: A6:8C:83:89:34:B7:D5:21:F2:E0:D7:C7:96:DD:91:2A:3B:65:9D:BF
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 043D
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa
Signing time: Fri 01 Sep 2023 08:03:45 +0000
ROA not before: Fri 01 Sep 2023 08:03:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7480
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A68C838934B7D521F2E0D7C796DD912A3B659DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:e6:c1:cf:4b:c0:8c:dd:39:c9:59:c5:e9:
19:2e:fc:05:e3:bc:37:f2:b9:02:71:7a:7e:06:b9:
58:36:5b:8b:85:4d:44:89:df:f3:e1:18:42:79:a7:
fa:64:45:81:d5:bf:d3:39:8a:d3:fe:fd:10:bd:c0:
75:9f:83:93:e3:c2:6a:c0:62:c4:29:56:7c:66:ae:
81:3b:4b:5d:89:b5:ec:3e:b7:5c:a4:0f:cb:38:0e:
e1:d9:b3:09:cb:98:42:0a:30:e4:42:cc:6f:2d:d5:
47:f2:6b:18:4a:3f:05:34:6d:0f:1b:d7:d7:94:d9:
65:bc:1f:cd:e9:5f:a5:e2:99:b0:a5:2e:ac:65:11:
3b:0a:2e:9e:4f:ab:c1:7a:b8:62:82:5a:02:6f:5a:
ca:34:9c:cb:05:6f:d6:ee:86:28:5c:74:08:0f:49:
83:ee:90:0c:6b:d3:3e:b5:ec:6f:b6:9b:37:df:f5:
06:8d:b7:b5:f8:bc:5f:2d:d3:91:c4:69:60:73:19:
1c:f0:fd:a9:7e:5c:dc:fd:33:81:b2:ec:25:6b:f5:
b3:3e:d8:6e:a0:b4:06:e9:8b:2c:9d:1d:85:b7:44:
bd:7e:35:ff:fd:5c:02:c6:a3:18:a8:78:8f:67:d1:
08:d4:04:ba:47:aa:3c:86:ce:e8:c2:b3:ac:04:c8:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:83:89:34:B7:D5:21:F2:E0:D7:C7:96:DD:91:2A:3B:65:9D:BF
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cd:88:c7:0d:a3:b3:38:00:9d:c0:b4:a8:e9:a4:c3:b9:67:
2c:fb:b1:62:16:94:87:b0:34:93:e6:b5:61:de:55:d8:a5:b5:
cc:8a:b9:7e:f0:9b:18:cd:8e:6a:53:1d:34:ba:69:7b:67:fd:
24:21:41:9b:d6:62:d2:ba:10:d2:6b:49:cf:6a:ab:99:32:37:
5c:bd:cd:f1:4c:e3:65:0e:9e:54:37:83:c1:89:d3:71:54:e9:
d8:c6:31:34:ce:5a:a1:14:e4:04:4b:21:94:47:92:b5:e0:83:
d3:22:10:17:7a:7f:86:f7:11:05:a4:2c:8b:97:a4:c1:a8:b9:
17:d4:f0:17:3b:40:0b:18:41:26:6f:96:03:89:93:be:bc:cc:
3d:6e:84:1e:1d:b7:a8:e2:e7:bb:ee:62:9e:d2:d3:d1:da:2f:
0c:5c:5b:be:d8:91:a1:b9:41:9a:39:be:b3:2d:0e:c3:8b:12:
ce:88:59:53:ee:fd:7c:e3:8b:51:d6:ea:37:c8:35:eb:a0:e7:
e1:fb:73:77:20:4f:57:b9:f4:9d:e0:2f:af:d9:b4:c5:8d:d8:
a4:51:03:1b:4f:e4:41:73:96:c8:9a:89:4a:ac:54:2b:83:ba:
18:3d:85:2d:fd:fb:c8:01:44:50:18:d1:f5:ba:dd:74:b2:2b:
d2:cf:63:88
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw
ODAzNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2OEM4Mzg5MzRCN0Q1
MjFGMkUwRDdDNzk2REQ5MTJBM0I2NTlEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPJubBz0vAjN05yVnF6Rku/AXjvDfyuQJxen4GuVg2W4uFTUSJ
3/PhGEJ5p/pkRYHVv9M5itP+/RC9wHWfg5PjwmrAYsQpVnxmroE7S12Jtew+t1yk
D8s4DuHZswnLmEIKMORCzG8t1UfyaxhKPwU0bQ8b19eU2WW8H83pX6XimbClLqxl
ETsKLp5Pq8F6uGKCWgJvWso0nMsFb9buhihcdAgPSYPukAxr0z617G+2mzff9QaN
t7X4vF8t05HEaWBzGRzw/al+XNz9M4Gy7CVr9bM+2G6gtAbpiyydHYW3RL1+Nf/9
XALGoxioeI9n0QjUBLpHqjyGzujCs6wEyPZBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUpoyDiTS31SHy4NfHlt2RKjtlnb8wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvcG95RGlUUzMxU0h5NE5m
SGx0MlJLanRsbmI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAJs2Ixw2jszgAncC0qOmkw7lnLPuxYhaU
h7A0k+a1Yd5V2KW1zIq5fvCbGM2OalMdNLppe2f9JCFBm9Zi0roQ0mtJz2qrmTI3
XL3N8UzjZQ6eVDeDwYnTcVTp2MYxNM5aoRTkBEshlEeSteCD0yIQF3p/hvcRBaQs
i5ekwai5F9TwFztACxhBJm+WA4mTvrzMPW6EHh23qOLnu+5intLT0dovDFxbvtiR
oblBmjm+sy0Ow4sSzohZU+79fOOLUdbqN8g166Dn4ftzdyBPV7n0neAvr9m0xY3Y
pFEDG0/kQXOWyJqJSqxUK4O6GD2FLf37yAFEUBjR9brddLIr0s9jiA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org