Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/yOLkKJ_AoqVrUaEXlEBL_NFThjY.roa
File: yOLkKJ_AoqVrUaEXlEBL_NFThjY.roa (raw, json)
Hash identifier: E2lc+gdlGRg5wyiHlbKRc+SUtGwo/WZdMTI5TgRR7i0=
Subject key identifier: C8:E2:E4:28:9F:C0:A2:A5:6B:51:A1:17:94:40:4B:FC:D1:53:86:36
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0951
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/yOLkKJ_AoqVrUaEXlEBL_NFThjY.roa
Signing time: Wed 29 Sep 2021 02:51:30 +0000
ROA not before: Wed 29 Sep 2021 02:51:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24167
IP address blocks: 2400:4500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 02:51:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C8E2E4289FC0A2A56B51A11794404BFCD1538636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:17:fc:c3:8e:86:9e:02:06:f4:a9:b9:47:
b0:ae:d5:ab:a9:78:41:4b:76:d1:96:ce:7b:83:f6:
13:58:bd:c2:32:21:1f:4e:a5:69:2d:28:12:7f:22:
47:d0:96:f9:c2:73:79:20:3a:68:4e:51:3e:e4:96:
74:3f:05:7b:4b:25:94:bc:fe:25:42:9a:a6:a5:7d:
a1:be:cb:31:35:98:80:8b:19:65:c3:31:2b:69:2e:
dd:a5:21:f6:d0:0b:1f:20:a8:9b:a9:b5:c1:d8:23:
1a:fc:89:30:c2:4d:a6:2f:fa:cd:4e:d7:91:c0:39:
3f:b2:15:31:98:f8:af:0b:c8:2a:5a:ee:e4:2f:37:
ee:b8:b6:e7:f5:63:91:f4:bc:00:66:86:6b:9a:0c:
62:a1:bc:70:35:8e:14:6a:6e:88:a7:97:24:11:59:
d7:23:09:23:94:50:73:d1:ea:b3:a9:d6:e9:61:58:
5c:18:ba:19:b6:3a:7f:50:1e:46:1c:59:9f:98:b9:
75:02:81:cf:d0:17:c2:92:92:c0:3f:9e:8e:5a:13:
59:85:b5:ba:16:a7:d5:21:f9:1b:db:53:e4:6d:ec:
d6:9b:2d:45:1e:57:3d:09:b8:e2:4f:b3:d6:0e:c7:
4e:26:fe:b3:fd:70:52:84:f7:d3:45:f1:a1:57:50:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:E4:28:9F:C0:A2:A5:6B:51:A1:17:94:40:4B:FC:D1:53:86:36
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/yOLkKJ_AoqVrUaEXlEBL_NFThjY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500::/32
Signature Algorithm: sha256WithRSAEncryption
e9:01:7f:91:85:77:10:42:64:03:7b:9e:3c:48:11:92:3f:d6:
dc:92:fa:a7:ea:ce:dc:46:73:f5:2a:30:e6:7c:78:1c:c9:2a:
af:36:6b:fd:5e:16:46:dc:b2:be:22:fe:2f:cb:6e:93:93:ad:
df:cf:a2:17:7f:36:fc:3f:2d:c2:ee:4f:0b:d3:e5:50:89:b5:
c8:14:c3:0f:04:e2:58:f8:1a:a4:fb:03:a7:92:64:87:e3:06:
11:e7:ce:66:2f:22:25:e7:e5:cf:65:5c:09:4d:f6:0b:51:8e:
db:47:e4:10:eb:f8:33:93:35:ca:98:16:10:b5:60:94:5d:7e:
38:7e:f1:ba:62:26:a3:53:06:54:b7:48:9b:ab:5b:12:13:3d:
93:85:20:36:1b:19:3e:05:3e:04:cd:08:1a:c6:cd:fb:d5:ac:
ba:5f:5e:d3:99:df:2d:ce:47:97:04:17:d0:53:1c:23:bb:e3:
a2:ba:a9:0c:24:6d:cb:35:e9:5a:9f:f0:c5:e7:50:70:63:35:
17:36:2a:18:d4:b5:4f:84:6b:b8:ba:13:b8:50:58:66:ab:c8:
40:4e:a0:cb:1a:cf:45:a1:ce:7a:3c:8e:81:12:51:57:4d:d8:
7a:cc:78:a1:0c:58:56:33:06:07:a4:1b:d5:ce:4c:9e:43:dd:
94:9a:11:73
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzYw
RUE5Rjc4MzNFREM2MzY2RkQ1RTIzQTQyNkJDRjYyQkIwMUU2QzAeFw0yMTA5Mjkw
MjUxMzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM4RTJFNDI4OUZDMEEy
QTU2QjUxQTExNzk0NDA0QkZDRDE1Mzg2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYIxf8w46GngIG9Km5R7Cu1aupeEFLdtGWznuD9hNYvcIyIR9O
pWktKBJ/IkfQlvnCc3kgOmhOUT7klnQ/BXtLJZS8/iVCmqalfaG+yzE1mICLGWXD
MStpLt2lIfbQCx8gqJuptcHYIxr8iTDCTaYv+s1O15HAOT+yFTGY+K8LyCpa7uQv
N+64tuf1Y5H0vABmhmuaDGKhvHA1jhRqboinlyQRWdcjCSOUUHPR6rOp1ulhWFwY
uhm2On9QHkYcWZ+YuXUCgc/QF8KSksA/no5aE1mFtboWp9Uh+RvbU+Rt7NabLUUe
Vz0JuOJPs9YOx04m/rP9cFKE99NF8aFXUI8jAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUyOLkKJ/AoqVrUaEXlEBL/NFThjYwHwYDVR0jBBgwFoAUdg6p94M+3GNm/V4j
pCa89iuwHmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNHQy9k
ZzZwOTRNLTNHTm1fVjRqcENhODlpdXdIbXcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2RnNnA5NE0tM0dObV9WNGpwQ2E4OWl1d0htdy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FTR0MveU9Ma0tKX0FvcVZyVWFFWGxFQkxf
TkZUaGpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQARQAw
DQYJKoZIhvcNAQELBQADggEBAOkBf5GFdxBCZAN7njxIEZI/1tyS+qfqztxGc/Uq
MOZ8eBzJKq82a/1eFkbcsr4i/i/LbpOTrd/Pohd/Nvw/LcLuTwvT5VCJtcgUww8E
4lj4GqT7A6eSZIfjBhHnzmYvIiXn5c9lXAlN9gtRjttH5BDr+DOTNcqYFhC1YJRd
fjh+8bpiJqNTBlS3SJurWxITPZOFIDYbGT4FPgTNCBrGzfvVrLpfXtOZ3y3OR5cE
F9BTHCO746K6qQwkbcs16Vqf8MXnUHBjNRc2KhjUtU+Ea7i6E7hQWGaryEBOoMsa
z0Whzno8joESUVdN2HrMeKEMWFYzBgekG9XOTJ5D3ZSaEXM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:38 2025 by rpki-client