Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa
File: gRpwspNHRemQRuP7MNV5av2EKLw.roa (raw, json)
Hash identifier: f/6b43C03FNe+5i+nMxLdExiB6JakTcF5b5ShLwr4yY=
Subject key identifier: 81:1A:70:B2:93:47:45:E9:90:46:E3:FB:30:D5:79:6A:FD:84:28:BC
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C5D
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa
Signing time: Fri 01 Sep 2023 08:26:28 +0000
ROA not before: Fri 01 Sep 2023 08:26:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 27.147.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=811A70B2934745E99046E3FB30D5796AFD8428BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:17:3f:18:5b:13:2e:39:c0:78:23:37:e3:
26:26:9d:16:49:b7:b3:52:1e:d9:51:98:69:94:eb:
83:b5:b9:7c:98:b9:b7:3e:f3:1d:0b:8c:7a:cb:2d:
87:1d:69:0c:24:d3:7e:eb:f3:ee:39:f0:5f:3c:51:
1f:70:69:25:72:cd:8c:8b:5c:c9:34:2b:eb:17:74:
15:37:28:77:d9:f8:95:2e:fa:73:4d:a3:b7:9d:a9:
ea:db:b7:9f:d9:3e:82:e9:ae:88:50:b5:ff:cc:60:
cc:f8:dd:e3:8f:a1:a0:e0:e0:a7:b4:3e:63:6d:0a:
99:2e:b4:d1:3c:97:6a:b9:a7:b7:8e:11:c8:e5:72:
b2:6e:25:e9:df:da:81:13:69:d9:e1:af:10:db:c6:
df:06:e0:b9:e7:88:fe:c9:d9:5e:a1:a0:f6:70:77:
12:2f:92:fd:8b:80:12:27:a4:12:36:9a:f0:e2:f4:
73:85:78:66:68:76:e9:b1:a4:da:14:76:9e:b8:b2:
08:02:4d:45:aa:c6:62:5d:d4:7f:7f:60:6a:f6:f1:
eb:e9:7b:0e:af:1c:f6:46:80:e3:7b:ae:ab:82:eb:
59:49:8f:41:a1:64:97:09:1c:bb:59:65:6f:ff:b6:
4c:58:3a:ae:08:fd:ec:0b:d3:54:3c:51:d3:23:6a:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:70:B2:93:47:45:E9:90:46:E3:FB:30:D5:79:6A:FD:84:28:BC
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/gRpwspNHRemQRuP7MNV5av2EKLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
17:dd:c4:27:4a:9a:a8:70:a2:86:7d:20:41:1f:e9:08:b2:d7:
1e:0a:29:47:65:16:88:e7:74:7f:fc:a7:7f:54:2d:f9:82:cf:
db:2a:64:15:d7:46:48:ca:47:5b:ef:9d:30:21:3d:3d:26:32:
65:17:db:cd:96:51:7c:3b:09:6d:b9:aa:68:17:32:12:1c:aa:
bb:35:0f:e8:e4:58:a1:01:45:c5:83:25:52:df:13:da:40:ff:
3e:54:ef:cb:c1:ba:e4:f4:8f:f6:a5:05:75:e2:e4:f6:3b:25:
93:75:14:14:23:93:2f:0e:bf:64:04:84:66:c7:6d:12:d0:fd:
5f:ee:24:2d:bb:54:53:ff:38:a1:70:22:51:d9:13:4b:e4:d3:
99:93:9c:10:ec:48:9a:57:48:08:3d:85:30:5d:74:31:eb:04:
4e:a4:be:44:b9:4e:dd:93:bb:e9:01:3b:ca:3c:98:90:cc:89:
ce:07:c3:30:90:b4:8c:3d:68:57:9e:ae:10:67:74:5b:50:67:
8e:54:d4:5e:c5:be:de:7d:39:76:58:39:c8:7e:7f:70:c6:32:
88:ef:ae:47:b1:7e:a4:3d:99:a0:26:1e:26:ff:07:90:be:32:
34:64:35:60:ce:11:a2:be:17:99:10:e5:40:af:35:17:b3:65:
a3:46:fd:91
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw
ODI2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxMUE3MEIyOTM0NzQ1
RTk5MDQ2RTNGQjMwRDU3OTZBRkQ4NDI4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2eBc/GFsTLjnAeCM34yYmnRZJt7NSHtlRmGmU64O1uXyYubc+
8x0LjHrLLYcdaQwk037r8+458F88UR9waSVyzYyLXMk0K+sXdBU3KHfZ+JUu+nNN
o7edqerbt5/ZPoLprohQtf/MYMz43eOPoaDg4Ke0PmNtCpkutNE8l2q5p7eOEcjl
crJuJenf2oETadnhrxDbxt8G4LnniP7J2V6hoPZwdxIvkv2LgBInpBI2mvDi9HOF
eGZodumxpNoUdp64sggCTUWqxmJd1H9/YGr28evpew6vHPZGgON7rquC61lJj0Gh
ZJcJHLtZZW//tkxYOq4I/ewL01Q8UdMjakjPAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUgRpwspNHRemQRuP7MNV5av2EKLwwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9nUnB3c3BOSFJlbVFSdVA3TU5W
NWF2MkVLTHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAG5M+
MA0GCSqGSIb3DQEBCwUAA4IBAQAX3cQnSpqocKKGfSBBH+kIstceCilHZRaI53R/
/Kd/VC35gs/bKmQV10ZIykdb750wIT09JjJlF9vNllF8OwltuapoFzISHKq7NQ/o
5FihAUXFgyVS3xPaQP8+VO/Lwbrk9I/2pQV14uT2OyWTdRQUI5MvDr9kBIRmx20S
0P1f7iQtu1RT/zihcCJR2RNL5NOZk5wQ7EiaV0gIPYUwXXQx6wROpL5EuU7dk7vp
ATvKPJiQzInOB8MwkLSMPWhXnq4QZ3RbUGeOVNRexb7efTl2WDnIfn9wxjKI765H
sX6kPZmgJh4m/weQvjI0ZDVgzhGivheZEOVArzUXs2WjRv2R
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org