Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qxlgesoSCNRDgXvsbIJw8EecCCs.roa
File: qxlgesoSCNRDgXvsbIJw8EecCCs.roa (raw, json)
Hash identifier: aA3DQxetBql5j+e+tmkS2jikyzxXEemI1wBJ1h+cwJc=
Subject key identifier: AB:19:60:7A:CA:12:08:D4:43:81:7B:EC:6C:82:70:F0:47:9C:08:2B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FB5
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qxlgesoSCNRDgXvsbIJw8EecCCs.roa
Signing time: Fri 01 Sep 2023 08:29:27 +0000
ROA not before: Fri 01 Sep 2023 08:29:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131273
IP address blocks: 150.116.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AB19607ACA1208D443817BEC6C8270F0479C082B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:ae:70:6a:fb:09:54:b4:fa:82:c5:6a:20:
42:0f:40:13:f8:c8:2c:67:04:ae:72:95:9b:19:2b:
5a:73:4c:dc:1a:fa:87:f4:b2:a5:34:97:35:4d:89:
5b:e2:71:fa:9b:ce:64:48:4f:92:05:8e:71:54:cf:
58:66:ae:43:b9:71:df:09:af:92:89:71:dc:77:b6:
2b:4e:27:cb:a3:c4:67:f7:7c:c3:94:8e:a1:4c:96:
38:1d:32:29:93:b3:ec:d0:13:5e:66:98:b7:c0:6a:
52:00:b9:eb:c1:ff:bf:6f:f9:b4:9f:bd:a9:98:37:
2f:9c:e7:62:62:ed:fd:a2:ee:12:29:c1:f0:2a:82:
65:ed:af:3f:f6:35:e8:1b:11:95:e9:ca:28:94:62:
c4:e9:2f:07:02:a9:89:2a:3c:99:a6:75:83:0d:37:
ef:54:4e:8c:b8:d1:3e:43:de:46:97:1d:6f:d1:2c:
f6:79:17:ca:5a:69:9f:64:43:69:70:69:ef:94:14:
7f:df:c7:93:25:db:d8:13:31:0a:2f:6a:0b:40:2f:
14:a7:fb:35:d3:da:ee:13:db:bb:5c:3a:56:5f:f4:
7e:f5:53:1d:a0:8e:8d:a0:2a:fc:c8:3a:24:90:d3:
e2:ae:40:8f:a4:dd:75:07:d9:5b:c8:c8:f7:68:9d:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:60:7A:CA:12:08:D4:43:81:7B:EC:6C:82:70:F0:47:9C:08:2B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/qxlgesoSCNRDgXvsbIJw8EecCCs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.80.0/24
Signature Algorithm: sha256WithRSAEncryption
99:02:81:7b:07:d0:7b:8f:2c:d0:06:ad:c6:dd:07:a9:b9:6d:
5e:3d:56:8b:81:86:64:f3:33:8b:0c:44:ac:61:58:f0:81:38:
b9:2b:cb:66:58:0a:c2:69:8e:2c:f8:29:a1:39:64:55:a9:41:
b4:47:b8:a6:39:60:bc:2f:78:8e:61:d4:cc:7e:58:c3:ce:7e:
de:b2:33:02:ce:6b:5f:be:3a:c4:30:c8:22:95:df:39:99:0e:
09:67:56:ae:40:b5:36:fe:79:6e:6e:8a:f8:a0:a5:d4:97:20:
2b:bd:30:35:78:e9:1a:54:29:d4:9f:f3:47:89:85:40:f7:d0:
d8:74:7f:5c:c3:59:fa:dc:fa:1f:6c:55:60:15:d4:8d:eb:a1:
92:00:f7:d6:6b:41:b6:64:77:0c:94:4a:9d:1c:a9:84:e4:d9:
03:f3:23:1a:0c:4d:76:b1:e0:52:86:5a:f7:d8:76:7d:32:4f:
6c:01:02:75:cb:40:38:39:f9:ab:d7:3f:10:70:34:c4:c4:95:
72:be:58:52:42:71:20:d3:c7:64:18:26:af:43:c2:32:63:71:
be:40:ac:c8:2e:fb:c1:a1:b8:67:26:94:69:83:1e:fd:d8:2c:
b4:c3:bf:11:68:5c:1c:7b:e0:75:3f:69:cd:96:31:14:a2:34:
c5:22:c4:75
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFCMTk2MDdBQ0ExMjA4
RDQ0MzgxN0JFQzZDODI3MEYwNDc5QzA4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDouq5wavsJVLT6gsVqIEIPQBP4yCxnBK5ylZsZK1pzTNwa+of0
sqU0lzVNiVvicfqbzmRIT5IFjnFUz1hmrkO5cd8Jr5KJcdx3titOJ8ujxGf3fMOU
jqFMljgdMimTs+zQE15mmLfAalIAuevB/79v+bSfvamYNy+c52Ji7f2i7hIpwfAq
gmXtrz/2NegbEZXpyiiUYsTpLwcCqYkqPJmmdYMNN+9UToy40T5D3kaXHW/RLPZ5
F8paaZ9kQ2lwae+UFH/fx5Ml29gTMQovagtALxSn+zXT2u4T27tcOlZf9H71Ux2g
jo2gKvzIOiSQ0+KuQI+k3XUH2VvIyPdonawtAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUqxlgesoSCNRDgXvsbIJw8EecCCswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9xeGxnZXNvU0NOUkRn
WHZzYklKdzhFZWNDQ3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnRQMA0GCSqGSIb3DQEBCwUAA4IBAQCZAoF7B9B7jyzQBq3G3QepuW1ePVaL
gYZk8zOLDESsYVjwgTi5K8tmWArCaY4s+CmhOWRVqUG0R7imOWC8L3iOYdTMfljD
zn7esjMCzmtfvjrEMMgild85mQ4JZ1auQLU2/nlubor4oKXUlyArvTA1eOkaVCnU
n/NHiYVA99DYdH9cw1n63PofbFVgFdSN66GSAPfWa0G2ZHcMlEqdHKmE5NkD8yMa
DE12seBShlr32HZ9Mk9sAQJ1y0A4Ofmr1z8QcDTExJVyvlhSQnEg08dkGCavQ8Iy
Y3G+QKzILvvBobhnJpRpgx792Cy0w78RaFwce+B1P2nNljEUojTFIsR1
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org