Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa
File: TdI2a6b72I_bQe7auSCrkhZvhfU.roa (raw, json)
Hash identifier: SSH29jb/XINlYXag/jTrX7WS2COjGYEhC63raaxVx/8=
Subject key identifier: 4D:D2:36:6B:A6:FB:D8:8F:DB:41:EE:DA:B9:20:AB:92:16:6F:85:F5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F89
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa
Signing time: Fri 01 Sep 2023 08:29:15 +0000
ROA not before: Fri 01 Sep 2023 08:29:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9831
IP address blocks: 203.163.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4DD2366BA6FBD88FDB41EEDAB920AB92166F85F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:55:9e:4c:34:b6:cf:2d:94:89:44:41:f7:
44:5f:9d:39:f5:a5:95:ac:0e:36:4e:30:98:60:ea:
e0:97:ac:c3:93:51:0f:ec:ca:3c:6f:32:5f:87:dc:
f6:e0:1d:50:1a:aa:08:0d:56:bc:be:f8:95:07:c9:
90:ec:e7:f8:40:e3:79:6f:89:f6:ee:06:f8:11:c1:
c2:f4:a9:92:b2:f3:a3:79:57:98:92:14:09:81:c1:
0a:18:43:d5:1f:3a:27:4e:55:d4:00:c4:23:5f:73:
7b:88:fc:1d:85:76:3a:3c:79:99:da:01:b9:39:49:
f1:f3:8a:d4:a3:43:2a:4b:0a:f2:52:7c:03:be:42:
2c:06:67:87:a0:73:7e:5f:8a:0d:00:84:b9:9d:71:
b4:14:9a:19:2f:fb:70:29:8b:41:b0:1f:30:c0:a5:
3d:24:16:c4:3f:89:49:1a:76:20:25:92:5d:13:e8:
c3:50:2f:dd:78:39:ec:e7:64:31:2e:59:72:c8:e2:
55:01:39:c7:c3:91:df:15:ac:d1:41:b3:f1:e3:7e:
f4:34:5b:77:e4:7b:b3:81:d0:62:06:f0:c3:4c:7d:
c2:e6:4c:95:42:b7:91:cb:ff:9b:83:ad:08:49:36:
78:ba:8e:f0:49:e9:d1:0a:c7:39:1c:39:85:9b:eb:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:36:6B:A6:FB:D8:8F:DB:41:EE:DA:B9:20:AB:92:16:6F:85:F5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TdI2a6b72I_bQe7auSCrkhZvhfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f4:74:2b:4d:77:51:d8:65:db:fd:86:de:99:78:f0:df:97:
7a:38:01:91:bc:b3:33:9d:4e:13:ef:59:fc:47:36:48:7c:d8:
23:80:40:34:58:38:29:9d:08:eb:a7:bb:20:c4:be:81:46:14:
5e:59:d9:8b:f7:1e:a3:05:90:d4:57:37:a2:30:4c:70:d0:0b:
ad:8a:05:4f:1c:52:81:61:d2:4f:ba:d2:e9:18:35:93:ee:f2:
46:15:44:dd:67:f8:80:9e:84:b8:98:d9:b1:ad:c0:1f:df:9f:
1a:fc:0b:85:92:36:f0:e8:b4:3f:93:8b:ae:bc:66:c2:93:db:
a8:3b:3b:d5:98:57:06:cb:5c:9e:d1:a0:38:34:61:d3:16:bd:
80:df:55:a2:02:ba:bc:b3:34:88:8c:a3:10:b7:ca:cd:7a:50:
7f:85:3a:b3:23:ba:18:b6:d3:6b:cc:f0:8b:0a:ed:76:7d:ea:
d9:85:20:4e:f5:7c:f9:99:d6:ba:78:93:bb:e5:e7:8f:cc:fb:
0e:6c:f4:fa:4e:4b:52:6a:77:8a:78:16:da:84:0d:99:6a:36:
d7:2f:ae:4f:3f:3c:f5:f9:30:9b:24:d8:3d:8d:68:54:cd:cc:
7b:3d:f9:f9:0a:9f:14:1f:90:7b:80:26:cf:10:7f:97:d1:09:
db:de:61:4e
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRERDIzNjZCQTZGQkQ4
OEZEQjQxRUVEQUI5MjBBQjkyMTY2Rjg1RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB/lWeTDS2zy2UiURB90RfnTn1pZWsDjZOMJhg6uCXrMOTUQ/s
yjxvMl+H3PbgHVAaqggNVry++JUHyZDs5/hA43lvifbuBvgRwcL0qZKy86N5V5iS
FAmBwQoYQ9UfOidOVdQAxCNfc3uI/B2Fdjo8eZnaAbk5SfHzitSjQypLCvJSfAO+
QiwGZ4egc35fig0AhLmdcbQUmhkv+3Api0GwHzDApT0kFsQ/iUkadiAlkl0T6MNQ
L914OeznZDEuWXLI4lUBOcfDkd8VrNFBs/HjfvQ0W3fke7OB0GIG8MNMfcLmTJVC
t5HL/5uDrQhJNni6jvBJ6dEKxzkcOYWb699FAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUTdI2a6b72I/bQe7auSCrkhZvhfUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9UZEkyYTZiNzJJX2JR
ZTdhdVNDcmtoWnZoZlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAy6PJMA0GCSqGSIb3DQEBCwUAA4IBAQBn9HQrTXdR2GXb/YbemXjw35d6OAGR
vLMznU4T71n8RzZIfNgjgEA0WDgpnQjrp7sgxL6BRhReWdmL9x6jBZDUVzeiMExw
0AutigVPHFKBYdJPutLpGDWT7vJGFUTdZ/iAnoS4mNmxrcAf358a/AuFkjbw6LQ/
k4uuvGbCk9uoOzvVmFcGy1ye0aA4NGHTFr2A31WiArq8szSIjKMQt8rNelB/hTqz
I7oYttNrzPCLCu12ferZhSBO9Xz5mda6eJO75eePzPsObPT6TktSaneKeBbahA2Z
ajbXL65PPzz1+TCbJNg9jWhUzcx7Pfn5Cp8UH5B7gCbPEH+X0Qnb3mFO
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org