Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa
File: blrD0U-33_4ALsNFOOGlY0YPfjE.roa (raw, json)
Hash identifier: hCPqYrjy3MfPAZuS+jV76ZOyezGAXeqAgMQtbCVJwps=
Subject key identifier: 6E:5A:C3:D1:4F:B7:DF:FE:00:2E:C3:45:38:E1:A5:63:46:0F:7E:31
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FBB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa
Signing time: Fri 01 Sep 2023 08:29:29 +0000
ROA not before: Fri 01 Sep 2023 08:29:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10133
IP address blocks: 2406:d400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4027 (0xfbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E5AC3D14FB7DFFE002EC34538E1A563460F7E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:ca:d5:17:14:8e:55:f3:22:35:5e:1c:8a:
f5:c0:5e:e0:03:50:19:b8:07:c0:d0:10:08:91:b5:
37:61:8f:c5:90:c7:47:ae:7b:07:d9:cd:3f:33:68:
dc:0f:c9:48:0c:12:a1:ee:0b:33:57:5b:27:63:e4:
8d:85:0e:a4:91:1d:5e:2c:1f:e5:30:28:9f:c2:dd:
d4:9d:25:bd:a7:4e:a8:a3:65:c1:60:5d:47:2f:a5:
a2:e0:e4:97:11:07:95:03:c7:1d:f8:28:8b:cd:fe:
26:86:7d:4a:3b:87:a3:ae:71:d2:41:65:19:dd:a2:
7f:d3:0a:df:43:45:01:ad:6c:74:ea:b7:86:c1:70:
2f:a8:0e:47:8f:d5:0f:b7:63:a8:76:b6:b3:d0:c5:
33:94:9f:93:40:fa:13:c7:1d:97:43:79:e8:de:c0:
b4:72:80:ab:10:78:89:0b:fb:0e:f7:44:c8:1c:98:
25:5e:20:fa:ee:a0:bf:74:9f:eb:ee:16:83:54:47:
e6:a8:b9:54:7f:7a:f5:15:e9:ef:4a:df:43:d3:9e:
7a:e2:05:b3:84:d1:7a:1a:1c:d9:96:3e:2e:c3:fc:
f3:45:ff:83:eb:36:d4:3c:99:c0:3b:70:ac:af:f4:
38:1b:06:26:24:2a:f6:df:b5:54:2c:08:be:34:c6:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5A:C3:D1:4F:B7:DF:FE:00:2E:C3:45:38:E1:A5:63:46:0F:7E:31
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d400::/32
Signature Algorithm: sha256WithRSAEncryption
10:45:eb:4b:8f:ff:c7:30:7b:35:1e:4b:09:2d:cd:76:8e:c6:
5c:cc:5e:b0:15:65:fb:af:a1:cb:31:2a:a3:d2:33:77:5d:d6:
fd:58:55:38:05:9e:d7:be:fc:ef:2f:cb:31:23:05:ca:70:1b:
a4:f4:4f:ac:e2:63:5f:4c:cf:cc:49:bb:d7:4e:84:41:58:5c:
ed:80:1e:fc:6c:9a:7e:d8:41:99:bc:33:78:27:43:72:20:78:
6d:5a:9d:04:3b:4d:8f:59:6c:08:40:83:fb:72:10:e7:98:5f:
60:82:35:da:91:58:f0:ba:d8:9d:63:b2:eb:11:84:42:88:24:
60:fd:12:b8:ed:91:3b:0b:85:b8:27:89:56:e1:1d:a3:9e:c8:
76:c9:7f:84:8e:fb:42:86:24:81:1d:09:19:de:fa:e3:6b:75:
d8:22:4a:bb:81:28:14:8a:94:dd:40:6d:c4:0d:69:bc:b6:8e:
ea:7e:78:f7:52:9c:5f:aa:ea:d0:63:bc:d4:23:21:52:99:73:
e0:d1:d8:18:5f:86:f0:34:99:45:a1:0e:1b:ea:fe:82:a8:08:
be:d9:87:be:cc:2f:03:06:63:b3:9a:b5:06:f5:86:2a:38:8c:
34:16:1e:ce:f7:6b:bc:d6:7e:24:de:8b:07:f2:10:33:64:5a:
f2:cb:ea:e1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFNUFDM0QxNEZCN0RG
RkUwMDJFQzM0NTM4RTFBNTYzNDYwRjdFMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtdMrVFxSOVfMiNV4civXAXuADUBm4B8DQEAiRtTdhj8WQx0eu
ewfZzT8zaNwPyUgMEqHuCzNXWydj5I2FDqSRHV4sH+UwKJ/C3dSdJb2nTqijZcFg
XUcvpaLg5JcRB5UDxx34KIvN/iaGfUo7h6OucdJBZRndon/TCt9DRQGtbHTqt4bB
cC+oDkeP1Q+3Y6h2trPQxTOUn5NA+hPHHZdDeejewLRygKsQeIkL+w73RMgcmCVe
IPruoL90n+vuFoNUR+aouVR/evUV6e9K30PTnnriBbOE0XoaHNmWPi7D/PNF/4Pr
NtQ8mcA7cKyv9DgbBiYkKvbftVQsCL40xoKDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUblrD0U+33/4ALsNFOOGlY0YPfjEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9ibHJEMFUtMzNfNEFM
c05GT09HbFkwWVBmakUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAbUADANBgkqhkiG9w0BAQsFAAOCAQEAEEXrS4//xzB7NR5LCS3Ndo7GXMxe
sBVl+6+hyzEqo9Izd13W/VhVOAWe17787y/LMSMFynAbpPRPrOJjX0zPzEm7106E
QVhc7YAe/GyafthBmbwzeCdDciB4bVqdBDtNj1lsCECD+3IQ55hfYII12pFY8LrY
nWOy6xGEQogkYP0SuO2ROwuFuCeJVuEdo57Idsl/hI77QoYkgR0JGd7642t12CJK
u4EoFIqU3UBtxA1pvLaO6n5491KcX6rq0GO81CMhUplz4NHYGF+G8DSZRaEOG+r+
gqgIvtmHvswvAwZjs5q1BvWGKjiMNBYezvdrvNZ+JN6LB/IQM2Ra8svq4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org