Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/95Q6V6omb9q87VOuZdxQ2lO3WZU.roa
File: 95Q6V6omb9q87VOuZdxQ2lO3WZU.roa (raw, json)
Hash identifier: 4GlSAkbK+NoS8g6TIeodNunuODB+yCEyrtsKozU849M=
Subject key identifier: F7:94:3A:57:AA:26:6F:DA:BC:ED:53:AE:65:DC:50:DA:53:B7:59:95
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FA4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/95Q6V6omb9q87VOuZdxQ2lO3WZU.roa
Signing time: Fri 01 Sep 2023 08:29:22 +0000
ROA not before: Fri 01 Sep 2023 08:29:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 223.26.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4004 (0xfa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F7943A57AA266FDABCED53AE65DC50DA53B75995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:38:c2:dd:9a:42:b0:21:e5:57:24:2b:5c:
05:aa:b0:1f:66:ac:58:b0:90:7b:3f:15:99:f0:c8:
36:66:26:ea:7a:f0:85:e1:9f:43:ad:2d:d7:95:f8:
54:6b:ab:0d:e8:39:9a:59:9f:0a:a2:34:57:1b:d5:
e8:39:7d:2d:b8:cc:c9:53:43:c6:5c:b3:c3:46:3c:
86:63:28:50:c6:33:65:0c:3f:cd:3e:a0:7c:22:43:
54:b6:42:71:95:1c:34:d6:69:06:41:8a:b0:68:14:
26:25:7b:5e:81:36:62:51:20:f6:04:cd:2a:4b:8f:
27:a7:e4:38:45:a9:38:ac:94:dc:fa:16:a4:51:91:
41:ca:ed:da:e9:f5:e8:e9:4d:e4:98:67:bc:c4:f6:
0f:cc:73:05:b0:44:94:d3:1a:27:46:97:ac:34:36:
33:7b:76:9a:8c:3c:d6:6c:14:be:fe:3c:63:b4:36:
5a:d5:b1:49:3b:21:e8:2b:9d:fb:ef:6a:f1:31:5a:
58:b9:c8:42:83:41:b2:76:c4:0e:10:15:b7:fd:7d:
93:a2:9f:4a:17:3e:16:b7:ab:84:30:a3:27:e9:54:
ea:a6:ef:e2:c6:39:f3:00:95:96:49:90:60:5a:ba:
2d:6f:56:e2:ec:6e:3a:8a:bc:3f:7d:ad:0f:45:d0:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:94:3A:57:AA:26:6F:DA:BC:ED:53:AE:65:DC:50:DA:53:B7:59:95
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/95Q6V6omb9q87VOuZdxQ2lO3WZU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.70.0/24
Signature Algorithm: sha256WithRSAEncryption
50:94:20:a2:ba:c9:94:8f:10:8e:93:fb:9d:9e:48:71:db:51:
60:7d:c3:83:13:04:f9:39:eb:06:ba:03:2d:c3:8c:5a:ab:51:
c4:86:84:2f:33:7b:4a:f7:9b:0a:36:e4:a2:1d:6c:80:6e:71:
91:e6:72:ad:08:14:07:fe:69:b4:d9:3a:b3:7e:dc:6d:48:0d:
73:ed:0f:18:c1:ae:ba:da:25:4c:cc:6e:af:27:be:a6:b9:df:
01:d1:c0:1f:30:96:07:2f:d3:f0:86:a0:98:7f:ee:10:65:4d:
60:c9:01:2d:39:7c:09:64:d5:13:da:f8:c3:59:48:4c:50:fd:
48:c0:d0:db:32:09:4b:1a:39:fd:2d:e7:bb:30:d5:87:4b:48:
84:ee:48:23:60:61:d9:a1:03:48:af:bf:bb:c5:2e:98:3c:9b:
37:e5:32:61:13:5f:45:2f:d0:21:63:71:2c:cd:66:a0:99:14:
75:91:c1:ba:31:56:3c:25:c3:9b:28:a6:d8:17:95:76:4c:8f:
15:20:3a:ab:fb:83:be:c3:54:0d:d4:cf:dd:f5:5b:3a:93:12:
25:26:56:7f:d3:85:59:fb:66:d1:c8:b8:e6:16:47:08:a4:29:
81:3d:1a:8a:6a:55:a9:eb:d3:ba:b3:81:fb:c3:eb:7e:9e:bd:
c1:05:12:e1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY3OTQzQTU3QUEyNjZG
REFCQ0VENTNBRTY1REM1MERBNTNCNzU5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhCTjC3ZpCsCHlVyQrXAWqsB9mrFiwkHs/FZnwyDZmJup68IXh
n0OtLdeV+FRrqw3oOZpZnwqiNFcb1eg5fS24zMlTQ8Zcs8NGPIZjKFDGM2UMP80+
oHwiQ1S2QnGVHDTWaQZBirBoFCYle16BNmJRIPYEzSpLjyen5DhFqTislNz6FqRR
kUHK7drp9ejpTeSYZ7zE9g/McwWwRJTTGidGl6w0NjN7dpqMPNZsFL7+PGO0NlrV
sUk7IegrnfvvavExWli5yEKDQbJ2xA4QFbf9fZOin0oXPha3q4QwoyfpVOqm7+LG
OfMAlZZJkGBaui1vVuLsbjqKvD99rQ9F0FxpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU95Q6V6omb9q87VOuZdxQ2lO3WZUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy85NVE2VjZvbWI5cTg3
Vk91WmR4UTJsTzNXWlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQA3xpGMA0GCSqGSIb3DQEBCwUAA4IBAQBQlCCiusmUjxCOk/udnkhx21FgfcOD
EwT5OesGugMtw4xaq1HEhoQvM3tK95sKNuSiHWyAbnGR5nKtCBQH/mm02Tqzftxt
SA1z7Q8Ywa662iVMzG6vJ76mud8B0cAfMJYHL9PwhqCYf+4QZU1gyQEtOXwJZNUT
2vjDWUhMUP1IwNDbMglLGjn9Lee7MNWHS0iE7kgjYGHZoQNIr7+7xS6YPJs35TJh
E19FL9AhY3EszWagmRR1kcG6MVY8JcObKKbYF5V2TI8VIDqr+4O+w1QN1M/d9Vs6
kxIlJlZ/04VZ+2bRyLjmFkcIpCmBPRqKalWp69O6s4H7w+t+nr3BBRLh
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org