Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa
File: 7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa (raw, json)
Hash identifier: wUSd0lfRocOIds6Jfvva8/UjaZMGN74dyCgimeTzlXY=
Subject key identifier: EC:C8:39:B9:0B:D4:3B:3B:4E:21:EE:84:AB:4D:05:D5:C1:E5:22:A1
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C57
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa
Signing time: Fri 01 Sep 2023 08:26:26 +0000
ROA not before: Fri 01 Sep 2023 08:26:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 124.155.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3159 (0xc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ECC839B90BD43B3B4E21EE84AB4D05D5C1E522A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:21:14:78:a4:a6:08:7c:fc:12:75:ac:e4:
ea:ac:ee:a3:b9:23:13:d7:bb:00:fe:15:9f:06:d9:
a8:1f:8f:ac:e5:7a:da:fe:79:47:e2:6d:0b:af:b5:
33:4a:af:2d:0a:6d:d2:54:ef:b5:91:8f:84:44:01:
00:9b:87:1a:28:a0:9c:77:5a:2c:8a:ae:4d:1c:c5:
31:e6:38:b3:25:2b:94:47:2e:6b:9a:1c:3a:30:a8:
42:91:d8:6a:d1:92:b4:64:b7:f6:34:a8:31:76:4b:
63:cb:e1:20:9d:31:58:b2:01:6d:02:9b:f7:20:9d:
d1:7d:db:15:a5:d5:c8:85:da:95:0a:aa:87:b6:17:
d2:3d:73:97:6e:e0:bc:ac:73:f5:d4:41:e3:de:35:
8a:2e:54:a9:48:a2:86:b5:f7:eb:9f:22:d2:d2:73:
ab:bc:ae:49:62:eb:84:b5:9e:af:e8:c6:2c:59:5f:
a6:a3:20:e3:56:9f:36:88:82:81:5a:67:76:10:ee:
85:b3:f8:e3:65:b8:a3:20:14:dd:65:f4:4a:8a:b9:
15:2c:f5:70:7f:31:ae:02:4d:f3:39:aa:ee:7c:95:
ed:51:7e:35:99:70:20:c0:0d:0c:4c:6d:82:6f:13:
91:30:71:69:cf:a6:4f:ff:ec:3e:63:ad:64:35:f6:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:39:B9:0B:D4:3B:3B:4E:21:EE:84:AB:4D:05:D5:C1:E5:22:A1
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.155.168.0/21
Signature Algorithm: sha256WithRSAEncryption
85:13:4f:b7:b2:ac:b0:a8:80:39:8d:91:de:48:c8:43:74:38:
8b:3b:a1:43:b4:95:b9:7c:3d:9b:70:07:71:de:83:27:f0:61:
03:94:9b:f6:63:e8:a7:2c:c3:26:35:f4:0d:27:94:19:e0:2b:
0c:33:8d:83:fb:b0:a9:6f:5e:a9:02:65:90:89:87:93:37:1c:
57:10:e2:b1:19:40:45:66:6a:ab:c8:56:ed:7e:32:35:f9:ae:
34:e0:b2:a8:8e:5d:a2:14:30:94:00:df:68:15:47:79:4e:f7:
f1:06:23:ab:4a:51:ad:08:90:34:ea:c4:67:c6:a7:79:c4:46:
94:53:85:0b:a9:f1:31:b9:ed:1b:2b:07:ed:00:43:d2:0c:69:
78:d4:91:47:3b:a2:8a:83:37:e3:aa:2a:ab:4b:7b:bd:9b:38:
87:80:c4:e1:b7:3a:25:f2:2b:d8:47:c9:ab:1d:9f:d4:f3:98:
49:6a:00:ad:37:d4:7d:7d:3e:db:f3:e7:3a:fe:eb:18:97:db:
5a:ee:22:00:7d:50:a5:7c:bd:8a:b0:ed:de:5c:96:c4:b3:a5:
b8:c8:f4:56:38:6a:d1:39:d5:15:db:74:7e:7a:9a:c1:b8:d5:
9d:ba:5f:12:94:ef:7f:8e:6b:24:49:05:42:70:84:cc:d8:ae:
15:64:cd:c0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw
ODI2MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVDQzgzOUI5MEJENDNC
M0I0RTIxRUU4NEFCNEQwNUQ1QzFFNTIyQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkKyEUeKSmCHz8EnWs5Oqs7qO5IxPXuwD+FZ8G2agfj6zletr+
eUfibQuvtTNKry0KbdJU77WRj4REAQCbhxoooJx3WiyKrk0cxTHmOLMlK5RHLmua
HDowqEKR2GrRkrRkt/Y0qDF2S2PL4SCdMViyAW0Cm/cgndF92xWl1ciF2pUKqoe2
F9I9c5du4Lysc/XUQePeNYouVKlIooa19+ufItLSc6u8rkli64S1nq/oxixZX6aj
IONWnzaIgoFaZ3YQ7oWz+ONluKMgFN1l9EqKuRUs9XB/Ma4CTfM5qu58le1RfjWZ
cCDADQxMbYJvE5EwcWnPpk//7D5jrWQ19qd7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU7Mg5uQvUOztOIe6Eq00F1cHlIqEwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC83TWc1dVF2VU96dE9JZTZFcTAw
RjFjSGxJcUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDfJuo
MA0GCSqGSIb3DQEBCwUAA4IBAQCFE0+3sqywqIA5jZHeSMhDdDiLO6FDtJW5fD2b
cAdx3oMn8GEDlJv2Y+inLMMmNfQNJ5QZ4CsMM42D+7Cpb16pAmWQiYeTNxxXEOKx
GUBFZmqryFbtfjI1+a404LKojl2iFDCUAN9oFUd5TvfxBiOrSlGtCJA06sRnxqd5
xEaUU4ULqfExue0bKwftAEPSDGl41JFHO6KKgzfjqiqrS3u9mziHgMThtzol8ivY
R8mrHZ/U85hJagCtN9R9fT7b8+c6/usYl9ta7iIAfVClfL2KsO3eXJbEs6W4yPRW
OGrROdUV23R+eprBuNWdul8SlO9/jmskSQVCcITM2K4VZM3A
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org