Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/c-6-uLDpCa2ezcmjT_zTDWVNL6E.roa
File: c-6-uLDpCa2ezcmjT_zTDWVNL6E.roa (raw, json)
Hash identifier: KWlQD/R5eQNegqdxQCQh7WMz5FTGZ5R/nryDdIxYgJc=
Subject key identifier: 73:EE:BE:B8:B0:E9:09:AD:9E:CD:C9:A3:4F:FC:D3:0D:65:4D:2F:A1
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0C1F
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/c-6-uLDpCa2ezcmjT_zTDWVNL6E.roa
Signing time: Fri 26 Jul 2024 07:58:27 +0000
ROA not before: Fri 26 Jul 2024 07:58:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9264
IP address blocks: 117.103.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Jul 26 07:58:27 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73EEBEB8B0E909AD9ECDC9A34FFCD30D654D2FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:57:a1:a6:eb:04:e4:03:92:67:f2:af:bd:
12:e8:d6:36:47:79:b4:44:c4:29:c4:12:51:f7:51:
91:ee:ea:32:10:c9:6c:af:fc:e6:3c:7d:db:35:0c:
b5:67:5c:91:53:34:24:7e:3b:38:8e:52:7b:46:2a:
fc:15:6b:e6:76:72:ac:15:48:43:2f:1e:e5:bd:96:
4e:8a:95:4a:71:99:05:cb:6d:73:65:d1:9c:dc:ca:
d5:8a:a7:d8:6f:5c:ce:c5:75:f0:f8:14:51:3d:6d:
34:73:8e:c2:7c:62:6e:54:eb:5c:71:3a:7d:2c:44:
4f:d4:7c:44:87:2c:d6:87:55:95:4f:40:10:30:f1:
8e:fe:5f:f3:15:51:07:2c:61:35:d4:48:83:fb:f3:
0e:3e:e5:4c:e4:45:cb:72:0d:98:6c:57:66:bd:56:
b5:a6:8a:42:98:19:ea:a1:ff:e8:38:20:d9:0e:c9:
52:5a:e7:0f:aa:16:7d:08:d6:ef:cc:cb:3b:50:10:
df:71:19:e0:2b:67:48:ca:20:75:fa:f4:19:0a:83:
f9:36:ba:01:4e:02:3a:3b:ed:57:6d:cf:c2:59:b0:
9b:cb:65:46:9d:e4:6d:fd:4f:45:cd:00:f2:65:da:
1a:f6:bc:68:b8:30:fb:59:f4:9c:e3:a5:33:72:f3:
24:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EE:BE:B8:B0:E9:09:AD:9E:CD:C9:A3:4F:FC:D3:0D:65:4D:2F:A1
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/c-6-uLDpCa2ezcmjT_zTDWVNL6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.103.96.0/20
Signature Algorithm: sha256WithRSAEncryption
cc:7a:7f:e1:b6:c9:38:2a:e9:71:79:05:27:b3:48:11:0f:01:
61:8a:e5:00:61:e5:7d:d0:8b:6d:00:69:5c:6e:b1:d6:9b:63:
2e:b2:03:b3:74:31:d9:b1:a1:51:d3:14:1a:80:d9:67:24:ea:
7d:8f:25:15:2f:ba:d4:a9:fc:fd:3a:2d:f1:6f:1b:2f:98:f0:
72:6d:91:e5:0b:e5:10:f5:e7:73:1d:cd:2b:09:b1:2b:e3:cd:
43:d3:cf:bd:4e:5b:22:9f:ca:92:1d:4a:4d:db:86:04:13:8e:
1b:7d:a0:6d:04:97:28:22:99:6a:fa:18:e5:ad:c3:df:3f:b9:
0d:b3:7d:87:8f:70:d2:23:79:2e:30:d6:d6:06:5c:20:b1:d2:
26:43:74:b9:76:7d:24:e4:1b:15:98:70:44:20:f1:bd:30:ff:
82:2d:2e:26:75:2d:22:21:aa:bc:84:a0:0c:e0:37:f1:3d:27:
8c:50:a5:93:6b:2a:4c:7a:10:34:7a:02:6c:f8:9b:01:1c:32:
be:65:89:11:40:7e:fa:44:15:44:b3:f3:a2:7b:b1:34:1a:91:
2b:10:e7:fd:4a:73:fc:0b:41:27:89:04:10:ce:18:1c:ec:74:
1a:de:d8:b4:8d:f1:b3:0d:49:50:ad:53:dc:d3:bc:cb:db:60:
e4:0c:f5:36
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5
ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNDA3MjYw
NzU4MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczRUVCRUI4QjBFOTA5
QUQ5RUNEQzlBMzRGRkNEMzBENjU0RDJGQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq7VehpusE5AOSZ/KvvRLo1jZHebRExCnEElH3UZHu6jIQyWyv
/OY8fds1DLVnXJFTNCR+OziOUntGKvwVa+Z2cqwVSEMvHuW9lk6KlUpxmQXLbXNl
0ZzcytWKp9hvXM7FdfD4FFE9bTRzjsJ8Ym5U61xxOn0sRE/UfESHLNaHVZVPQBAw
8Y7+X/MVUQcsYTXUSIP78w4+5UzkRctyDZhsV2a9VrWmikKYGeqh/+g4INkOyVJa
5w+qFn0I1u/MyztQEN9xGeArZ0jKIHX69BkKg/k2ugFOAjo77Vdtz8JZsJvLZUad
5G39T0XNAPJl2hr2vGi4MPtZ9JzjpTNy8yTjAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUc+6+uLDpCa2ezcmjT/zTDWVNL6EwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj
U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv
Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC9jLTYtdUxEcENhMmV6Y21qVF96
VERXVk5MNkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEdWdg
MA0GCSqGSIb3DQEBCwUAA4IBAQDMen/htsk4KulxeQUns0gRDwFhiuUAYeV90Itt
AGlcbrHWm2MusgOzdDHZsaFR0xQagNlnJOp9jyUVL7rUqfz9Oi3xbxsvmPBybZHl
C+UQ9edzHc0rCbEr481D08+9Tlsin8qSHUpN24YEE44bfaBtBJcoIplq+hjlrcPf
P7kNs32Hj3DSI3kuMNbWBlwgsdImQ3S5dn0k5BsVmHBEIPG9MP+CLS4mdS0iIaq8
hKAM4DfxPSeMUKWTaypMehA0egJs+JsBHDK+ZYkRQH76RBVEs/Oie7E0GpErEOf9
SnP8C0EniQQQzhgc7HQa3ti0jfGzDUlQrVPc07zL22DkDPU2
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org