Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/s8bSSqyCGMGHfghAiuFSP3W9Qx8.roa
File: s8bSSqyCGMGHfghAiuFSP3W9Qx8.roa (raw, json)
Hash identifier: V6eWZr6fZyCLXst0Fh64JF49OIRANa9oE9a36JrRjrU=
Subject key identifier: B3:C6:D2:4A:AC:82:18:C1:87:7E:08:40:8A:E1:52:3F:75:BD:43:1F
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C80
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/s8bSSqyCGMGHfghAiuFSP3W9Qx8.roa
Signing time: Fri 01 Sep 2023 08:26:39 +0000
ROA not before: Fri 01 Sep 2023 08:26:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 123.50.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3200 (0xc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B3C6D24AAC8218C1877E08408AE1523F75BD431F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:50:92:de:91:d5:5c:48:8b:4c:ff:bb:1d:
57:88:36:fd:42:54:98:91:13:fb:0c:89:85:91:73:
0d:1a:90:7f:47:00:1c:5a:11:f3:cd:d9:f3:3f:47:
70:e2:d9:d4:d7:6a:ae:7e:11:cf:b1:f2:f8:b4:7c:
46:2f:e4:18:11:7d:16:76:ca:16:25:51:4c:47:c5:
c0:59:cc:3d:44:df:80:a3:47:f9:e4:5f:9e:1e:3f:
8c:26:87:33:f4:6d:1b:96:c1:bd:57:72:14:0c:3d:
b3:f4:d6:c9:3d:35:bd:14:bb:55:13:dd:fb:e4:be:
4b:d6:3f:88:9c:05:40:48:ed:07:ea:8a:c8:f0:b5:
01:d0:bb:ae:e2:1e:a7:ea:f5:5c:8b:59:cc:32:26:
66:be:fe:83:a7:6e:07:ba:91:6e:95:fb:1a:77:2d:
2e:86:2d:04:ff:e3:3e:be:51:2d:2f:aa:50:ea:94:
70:98:46:d1:11:5a:8f:c5:b4:1a:2e:35:b2:c4:da:
9e:5e:65:40:23:d8:72:33:18:ea:89:fd:85:e0:99:
45:3e:b5:70:8d:1f:a8:80:5b:71:62:09:01:2d:a7:
22:d5:2c:2f:39:49:ce:ad:26:b8:e3:d7:6f:51:93:
fc:26:15:3e:2e:67:e7:a2:3e:d0:06:23:14:09:1c:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:D2:4A:AC:82:18:C1:87:7E:08:40:8A:E1:52:3F:75:BD:43:1F
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/s8bSSqyCGMGHfghAiuFSP3W9Qx8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.50.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8d:3f:78:95:12:f8:c3:f4:8e:c2:f1:16:59:e8:82:d9:25:75:
ae:1c:91:4c:48:bb:36:54:bf:4d:bc:b6:0d:24:e2:88:a7:e8:
f0:b6:56:6c:bb:62:48:13:6a:db:0b:62:c3:56:27:b7:1c:4b:
c3:39:94:4c:a0:61:1e:0c:f8:bc:0d:25:cb:a1:d4:d6:d3:04:
fa:45:59:1b:72:51:66:2a:c1:7b:23:ec:09:a3:89:d4:20:ce:
c8:6b:1d:65:ad:1b:bd:0d:33:ed:51:e2:42:5a:f3:f9:4a:de:
27:9a:58:81:30:9a:64:fd:72:d0:68:87:59:1e:f3:ef:8b:c5:
26:5b:1c:d9:c5:91:cd:dd:e9:cb:df:1a:77:29:90:33:bb:21:
5e:00:4e:41:35:3d:ec:4e:be:f3:1d:c0:c5:c6:ed:67:0e:64:
8b:24:67:b3:0f:e1:bb:04:88:92:6f:37:14:4a:ad:12:23:9b:
49:25:59:d4:da:9f:8a:27:22:5a:42:db:d9:fa:87:3a:0f:7f:
47:e2:5e:b5:ad:47:12:fe:81:cd:ca:58:72:05:ff:4b:52:d6:
a0:0d:d0:f6:fe:28:48:63:a3:4a:80:0a:6c:b7:3d:c5:7e:20:
5c:aa:c3:db:ea:a1:44:da:c7:2f:de:de:92:3e:67:64:25:77:
bc:85:51:34
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw
ODI2MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzQzZEMjRBQUM4MjE4
QzE4NzdFMDg0MDhBRTE1MjNGNzVCRDQzMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3UlCS3pHVXEiLTP+7HVeINv1CVJiRE/sMiYWRcw0akH9HABxa
EfPN2fM/R3Di2dTXaq5+Ec+x8vi0fEYv5BgRfRZ2yhYlUUxHxcBZzD1E34CjR/nk
X54eP4wmhzP0bRuWwb1XchQMPbP01sk9Nb0Uu1UT3fvkvkvWP4icBUBI7Qfqisjw
tQHQu67iHqfq9VyLWcwyJma+/oOnbge6kW6V+xp3LS6GLQT/4z6+US0vqlDqlHCY
RtERWo/FtBouNbLE2p5eZUAj2HIzGOqJ/YXgmUU+tXCNH6iAW3FiCQEtpyLVLC85
Sc6tJrjj129Rk/wmFT4uZ+eiPtAGIxQJHPw7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUs8bSSqyCGMGHfghAiuFSP3W9Qx8wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9zOGJTU3F5Q0dNR0hmZ2hBaXVG
U1AzVzlReDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFezIg
MA0GCSqGSIb3DQEBCwUAA4IBAQCNP3iVEvjD9I7C8RZZ6ILZJXWuHJFMSLs2VL9N
vLYNJOKIp+jwtlZsu2JIE2rbC2LDVie3HEvDOZRMoGEeDPi8DSXLodTW0wT6RVkb
clFmKsF7I+wJo4nUIM7Iax1lrRu9DTPtUeJCWvP5St4nmliBMJpk/XLQaIdZHvPv
i8UmWxzZxZHN3enL3xp3KZAzuyFeAE5BNT3sTr7zHcDFxu1nDmSLJGezD+G7BIiS
bzcUSq0SI5tJJVnU2p+KJyJaQtvZ+oc6D39H4l61rUcS/oHNylhyBf9LUtagDdD2
/ihIY6NKgApstz3FfiBcqsPb6qFE2scv3t6SPmdkJXe8hVE0
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org