Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9VYAj6lMl06OKhd1D2inp09ePcQ.roa
File: 9VYAj6lMl06OKhd1D2inp09ePcQ.roa (raw, json)
Hash identifier: fgfIM3GsZxvSc07VQox394stfcTgrFqmTYFQ4cE2qFU=
Subject key identifier: F5:56:00:8F:A9:4C:97:4E:8E:2A:17:75:0F:68:A7:A7:4F:5E:3D:C4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F59
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9VYAj6lMl06OKhd1D2inp09ePcQ.roa
Signing time: Fri 01 Sep 2023 08:29:01 +0000
ROA not before: Fri 01 Sep 2023 08:29:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10085
IP address blocks: 203.163.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3929 (0xf59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F556008FA94C974E8E2A17750F68A7A74F5E3DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:46:15:d4:08:5b:f8:07:7a:6d:d9:8c:be:
76:c2:03:c8:3b:a7:40:46:3b:7d:65:ef:96:3f:e4:
d8:ac:ad:ba:1d:b2:95:1e:df:30:1c:0b:77:9e:ec:
60:78:4f:db:fc:58:20:00:04:c7:ce:d6:f4:23:f0:
b8:ac:2b:61:6b:9d:d6:25:9a:88:26:42:11:34:5d:
87:83:ab:7d:a2:11:4e:40:5d:46:84:e1:81:0e:95:
0c:d7:de:b5:66:66:c5:2b:f4:a1:bd:b2:38:8b:a1:
2b:63:be:37:71:2c:a6:9d:70:e3:a9:23:e9:ba:29:
4f:2d:52:e7:0b:0c:d5:5c:da:68:7d:b8:a9:70:4c:
b4:48:36:55:d3:e3:c9:fe:ec:54:73:43:c3:02:7b:
31:11:f2:52:62:83:ec:7d:6e:9d:57:3c:af:13:36:
28:ff:2f:2c:d8:1c:f7:fd:ca:5b:7a:7b:8c:1e:97:
25:bd:b7:3f:25:ef:f1:05:c6:0c:9a:dd:be:c8:32:
50:e3:16:32:1b:95:7f:dc:15:99:d5:cd:8c:b3:d8:
82:1f:f9:1f:fb:72:7b:e3:c1:b9:6e:78:b3:88:c1:
79:1b:c4:cc:33:7a:11:47:ea:43:09:60:d4:a2:1f:
5a:a7:4e:50:34:c2:b7:28:b8:9b:b1:89:3f:7b:85:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:56:00:8F:A9:4C:97:4E:8E:2A:17:75:0F:68:A7:A7:4F:5E:3D:C4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9VYAj6lMl06OKhd1D2inp09ePcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:a6:0f:cd:b2:27:af:da:9b:e7:66:ca:56:d8:39:1d:10:b7:
d5:e1:0c:5e:2b:f0:aa:02:de:6b:f7:bd:13:e0:fe:85:c0:b6:
58:6f:6f:d6:c2:61:83:18:6d:2f:cf:99:3c:08:57:de:ed:1c:
6e:e6:af:21:cb:0a:0b:c3:97:a7:8e:5b:a4:13:19:94:8c:f0:
45:84:4c:2a:51:6f:c1:ff:86:1f:29:47:b2:f2:f0:6e:87:8d:
84:43:60:4a:9a:68:8e:06:89:e1:2b:6b:2f:a9:bf:5c:29:18:
22:2b:d4:3c:d6:73:01:a7:6d:08:3e:5b:05:65:c7:44:b2:be:
3c:ac:bf:f7:04:d5:12:14:47:a1:5b:86:08:52:53:a0:f1:66:
a2:57:56:30:1e:05:77:0a:0e:b4:8c:43:4e:10:c9:90:1c:65:
88:e8:59:44:53:7d:80:59:9e:ba:6a:34:6c:4c:2f:d8:9e:c6:
2d:98:bb:c5:db:91:ad:b0:a6:82:25:4c:1e:ae:f2:1f:32:25:
49:af:16:7e:28:85:c4:fe:93:fe:f9:ad:17:47:12:96:3d:2a:
b2:13:52:32:a6:18:bb:2d:3b:e6:78:0e:33:0e:17:db:73:f6:
8d:63:bb:88:a4:1b:f9:ba:35:8b:77:bd:a8:6e:5e:d5:d5:73:
7c:b4:bf:d3
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY1NTYwMDhGQTk0Qzk3
NEU4RTJBMTc3NTBGNjhBN0E3NEY1RTNEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC28UYV1Ahb+Ad6bdmMvnbCA8g7p0BGO31l75Y/5NisrbodspUe
3zAcC3ee7GB4T9v8WCAABMfO1vQj8LisK2FrndYlmogmQhE0XYeDq32iEU5AXUaE
4YEOlQzX3rVmZsUr9KG9sjiLoStjvjdxLKadcOOpI+m6KU8tUucLDNVc2mh9uKlw
TLRINlXT48n+7FRzQ8MCezER8lJig+x9bp1XPK8TNij/LyzYHPf9ylt6e4welyW9
tz8l7/EFxgya3b7IMlDjFjIblX/cFZnVzYyz2IIf+R/7cnvjwblueLOIwXkbxMwz
ehFH6kMJYNSiH1qnTlA0wrcouJuxiT97haPFAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU9VYAj6lMl06OKhd1D2inp09ePcQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy85VllBajZsTWwwNk9L
aGQxRDJpbnAwOWVQY1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCy6PQMA0GCSqGSIb3DQEBCwUAA4IBAQB9pg/Nsiev2pvnZspW2DkdELfV4Qxe
K/CqAt5r970T4P6FwLZYb2/WwmGDGG0vz5k8CFfe7Rxu5q8hywoLw5enjlukExmU
jPBFhEwqUW/B/4YfKUey8vBuh42EQ2BKmmiOBonhK2svqb9cKRgiK9Q81nMBp20I
PlsFZcdEsr48rL/3BNUSFEehW4YIUlOg8WaiV1YwHgV3Cg60jENOEMmQHGWI6FlE
U32AWZ66ajRsTC/YnsYtmLvF25GtsKaCJUwervIfMiVJrxZ+KIXE/pP++a0XRxKW
PSqyE1Iyphi7LTvmeA4zDhfbc/aNY7uIpBv5ujWLd72obl7V1XN8tL/T
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org