Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/xV2tjTqqInVJhPDGBSae0ZuUpPc.roa
File: xV2tjTqqInVJhPDGBSae0ZuUpPc.roa (raw, json)
Hash identifier: NemA6YGVF4FkslFeAw0B4F56Mq0E6SfGMRafvCvs7H8=
Subject key identifier: C5:5D:AD:8D:3A:AA:22:75:49:84:F0:C6:05:26:9E:D1:9B:94:A4:F7
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0B2D
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/xV2tjTqqInVJhPDGBSae0ZuUpPc.roa
Signing time: Fri 01 Sep 2023 08:24:02 +0000
ROA not before: Fri 01 Sep 2023 08:24:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9264
IP address blocks: 2001:c08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2861 (0xb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Sep 1 08:24:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C55DAD8D3AAA22754984F0C605269ED19B94A4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:f2:d5:6d:8e:47:dc:f6:ae:18:98:71:0a:
d7:bb:57:d8:94:35:3e:bc:99:16:a3:3f:5e:01:40:
a8:34:b7:75:1f:6d:ec:a7:7b:38:41:d9:d3:ad:de:
d8:24:48:bc:11:4d:2a:05:ce:a7:70:da:0b:8c:76:
3e:96:2c:80:c4:4b:fc:47:4d:f4:cf:62:d6:e9:de:
2d:5a:c4:8d:c1:de:10:ef:8f:34:53:31:ab:49:d9:
9b:f7:3c:38:6d:75:38:27:03:76:7b:96:85:b2:92:
43:67:b2:2f:7d:1b:b3:b0:52:37:79:03:a4:28:30:
af:b3:35:e4:59:06:3d:e1:ac:fa:5d:91:c3:8e:cc:
37:e0:4f:a1:54:04:e6:ed:38:0d:ef:f9:49:00:fc:
90:ec:1a:8b:c2:34:93:71:f6:6c:f4:1a:3e:f4:af:
99:ea:9a:ad:08:61:94:c4:0a:a8:0c:ba:b7:6d:8b:
80:28:61:ce:7b:c0:f3:76:c9:d2:d7:85:c9:b8:da:
c4:73:6a:6e:17:1c:f5:d7:7c:0e:bf:25:05:1a:c5:
9a:f0:f5:e5:64:69:5f:a9:f7:35:27:e4:15:d9:46:
0d:90:db:af:7f:2c:6a:e6:8e:da:3d:d4:56:7b:56:
d4:65:8c:9a:90:e3:91:21:6a:e6:e8:b5:2e:ae:33:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:AD:8D:3A:AA:22:75:49:84:F0:C6:05:26:9E:D1:9B:94:A4:F7
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/xV2tjTqqInVJhPDGBSae0ZuUpPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:c08::/32
Signature Algorithm: sha256WithRSAEncryption
30:8e:d0:48:9c:9d:61:df:85:6c:c2:b3:7f:01:88:ff:c5:74:
a3:86:3f:64:84:22:b6:22:62:52:7d:e2:49:b7:e5:4c:b1:ee:
ef:75:b1:d9:19:47:b7:44:a4:e9:61:50:88:26:20:4e:bc:80:
2d:c9:3f:df:bc:95:2a:8f:0d:d8:84:10:2f:21:4d:c4:ce:8a:
3b:13:7b:99:10:68:ad:1f:51:4b:d7:dc:c6:e0:83:fc:d5:03:
80:ae:1a:6c:59:38:48:2f:72:d3:80:de:b5:48:b4:14:b3:bf:
b1:b7:6a:25:92:3d:09:ba:10:f1:27:8e:06:c2:df:fd:d3:fd:
20:19:44:c2:a2:33:4d:f7:08:0c:4f:72:b5:87:de:a4:14:2d:
3e:9d:09:dc:a5:ce:df:c2:c4:ca:83:06:9d:fe:fd:03:43:4b:
f1:4d:c9:39:bd:0b:37:9f:96:c6:0d:e6:b6:75:ef:ef:64:08:
16:03:b8:64:ab:3d:af:c2:06:a9:94:72:bb:98:50:0c:43:d6:
b9:c9:15:1c:da:31:5e:63:02:15:b1:49:82:e7:46:97:ca:be:
1c:ec:d8:61:82:3d:37:1b:48:54:36:9c:42:50:3e:52:b6:70:
58:25:45:e1:f5:43:cd:73:82:f4:e1:12:a9:a3:30:88:57:85:
99:9e:f9:83
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5
ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yMzA5MDEw
ODI0MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM1NURBRDhEM0FBQTIy
NzU0OTg0RjBDNjA1MjY5RUQxOUI5NEE0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU6fLVbY5H3PauGJhxCte7V9iUNT68mRajP14BQKg0t3Ufbeyn
ezhB2dOt3tgkSLwRTSoFzqdw2guMdj6WLIDES/xHTfTPYtbp3i1axI3B3hDvjzRT
MatJ2Zv3PDhtdTgnA3Z7loWykkNnsi99G7OwUjd5A6QoMK+zNeRZBj3hrPpdkcOO
zDfgT6FUBObtOA3v+UkA/JDsGovCNJNx9mz0Gj70r5nqmq0IYZTECqgMurdti4Ao
Yc57wPN2ydLXhcm42sRzam4XHPXXfA6/JQUaxZrw9eVkaV+p9zUn5BXZRg2Q269/
LGrmjto91FZ7VtRljJqQ45EhaubotS6uMwFlAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUxV2tjTqqInVJhPDGBSae0ZuUpPcwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj
U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv
Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC94VjJ0alRxcUluVkpoUERHQlNh
ZTBadVVwUGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEM
CDANBgkqhkiG9w0BAQsFAAOCAQEAMI7QSJydYd+FbMKzfwGI/8V0o4Y/ZIQitiJi
Un3iSbflTLHu73Wx2RlHt0Sk6WFQiCYgTryALck/37yVKo8N2IQQLyFNxM6KOxN7
mRBorR9RS9fcxuCD/NUDgK4abFk4SC9y04DetUi0FLO/sbdqJZI9CboQ8SeOBsLf
/dP9IBlEwqIzTfcIDE9ytYfepBQtPp0J3KXO38LEyoMGnf79A0NL8U3JOb0LN5+W
xg3mtnXv72QIFgO4ZKs9r8IGqZRyu5hQDEPWuckVHNoxXmMCFbFJgudGl8q+HOzY
YYI9NxtIVDacQlA+UrZwWCVF4fVDzXOC9OESqaMwiFeFmZ75gw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org