Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa
File: svprwrAisCPJsRnV0FCUTYV10uc.roa (raw, json)
Hash identifier: p9ISLkJmhy7rBEovMNqXHvWUMbIJ2BHVeVZ9okN2eTQ=
Subject key identifier: B2:FA:6B:C2:B0:22:B0:23:C9:B1:19:D5:D0:50:94:4D:85:75:D2:E7
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F96
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa
Signing time: Fri 01 Sep 2023 08:29:20 +0000
ROA not before: Fri 01 Sep 2023 08:29:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7532
IP address blocks: 150.116.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3990 (0xf96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B2FA6BC2B022B023C9B119D5D050944D8575D2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:06:1c:3e:79:d2:e3:28:46:cf:2e:b1:91:
59:91:05:9c:e8:27:ac:93:d5:1e:8a:8a:ef:4e:5b:
c6:5a:52:af:d6:b3:b1:bd:81:54:37:34:d3:21:e4:
53:52:dc:cc:4c:32:86:eb:2e:20:81:5e:30:41:51:
7a:b3:a2:fa:e0:37:ac:33:f3:97:af:71:fb:03:92:
b3:e0:a7:c1:90:db:d6:26:a7:f3:70:92:b7:ed:5f:
9a:d1:34:29:06:ac:16:db:d8:c9:fe:f9:70:90:b9:
c6:16:18:47:5d:62:ab:aa:d3:ef:10:85:c6:1e:52:
92:bf:e6:34:d4:8a:d8:6e:03:93:21:b8:c9:de:66:
ac:1e:74:aa:08:86:ce:f5:b2:83:a5:0d:9d:88:aa:
f0:58:f9:80:6c:89:18:10:8f:49:dd:d5:22:6e:96:
bd:b1:41:0d:d5:a6:60:cc:25:fa:87:c7:dc:db:24:
57:a7:14:18:fb:96:07:20:a6:2d:5f:fb:b8:a2:d9:
39:79:4a:f4:6a:75:78:e1:8e:80:10:5c:7b:4f:a1:
39:97:eb:d2:d5:9a:ff:93:3d:85:ec:15:03:0c:76:
34:d3:79:d4:84:5c:5d:df:48:db:db:f2:af:ba:ff:
56:af:0f:20:85:85:69:98:87:f3:1d:20:cb:d8:0b:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:6B:C2:B0:22:B0:23:C9:B1:19:D5:D0:50:94:4D:85:75:D2:E7
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/svprwrAisCPJsRnV0FCUTYV10uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4b:cd:d0:e7:1d:54:7d:78:49:f9:67:d8:19:63:63:12:54:
68:f5:6d:43:c2:f4:8b:7c:55:23:c1:87:34:0b:3d:fb:f5:74:
d3:8b:58:b4:27:29:72:2b:5c:21:e8:00:45:cc:67:c8:cd:af:
32:1f:23:c0:08:d3:8f:5c:4c:8f:54:0e:cf:16:eb:3f:cf:42:
f0:cd:c2:28:a6:0d:a3:23:62:0c:5d:83:71:c1:79:f1:34:03:
53:23:ea:31:86:85:1c:5a:b3:02:a1:0c:8e:af:90:43:ee:24:
85:85:1e:0c:20:8b:99:55:19:ef:30:dd:34:d3:0f:45:30:7b:
4e:f7:83:c1:0a:7a:c5:27:43:19:a8:c0:28:fc:a0:89:ff:e3:
1f:6b:c8:a1:72:7e:06:58:e3:06:87:83:8b:2d:da:61:33:20:
f1:2a:d8:39:26:f8:81:b5:a4:3c:c9:ef:d7:3a:b9:9f:4e:47:
2b:e5:e5:77:49:61:23:d8:5b:ad:18:7d:a4:71:9d:83:f2:64:
dc:df:b7:25:af:aa:9b:7d:17:9b:1d:9f:88:b2:84:56:c1:bc:
63:75:aa:c1:c4:b8:1f:11:f9:95:9f:dd:2e:99:40:37:0a:d8:
1b:bd:2f:f3:8b:35:dd:33:7b:11:37:21:36:7c:3f:4c:f9:d3:
a7:69:30:9b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw
ODI5MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyRkE2QkMyQjAyMkIw
MjNDOUIxMTlENUQwNTA5NDREODU3NUQyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1GAYcPnnS4yhGzy6xkVmRBZzoJ6yT1R6Kiu9OW8ZaUq/Ws7G9
gVQ3NNMh5FNS3MxMMobrLiCBXjBBUXqzovrgN6wz85evcfsDkrPgp8GQ29Ymp/Nw
krftX5rRNCkGrBbb2Mn++XCQucYWGEddYquq0+8QhcYeUpK/5jTUithuA5MhuMne
ZqwedKoIhs71soOlDZ2IqvBY+YBsiRgQj0nd1SJulr2xQQ3VpmDMJfqHx9zbJFen
FBj7lgcgpi1f+7ii2Tl5SvRqdXjhjoAQXHtPoTmX69LVmv+TPYXsFQMMdjTTedSE
XF3fSNvb8q+6/1avDyCFhWmYh/MdIMvYC5VhAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUsvprwrAisCPJsRnV0FCUTYV10ucwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9zdnByd3JBaXNDUEpz
Um5WMEZDVVRZVjEwdWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQ3MA0GCSqGSIb3DQEBCwUAA4IBAQAuS83Q5x1UfXhJ+WfYGWNjElRo9W1D
wvSLfFUjwYc0Cz379XTTi1i0JylyK1wh6ABFzGfIza8yHyPACNOPXEyPVA7PFus/
z0LwzcIopg2jI2IMXYNxwXnxNANTI+oxhoUcWrMCoQyOr5BD7iSFhR4MIIuZVRnv
MN000w9FMHtO94PBCnrFJ0MZqMAo/KCJ/+Mfa8ihcn4GWOMGh4OLLdphMyDxKtg5
JviBtaQ8ye/XOrmfTkcr5eV3SWEj2FutGH2kcZ2D8mTc37clr6qbfRebHZ+IsoRW
wbxjdarBxLgfEfmVn90umUA3CtgbvS/zizXdM3sRNyE2fD9M+dOnaTCb
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org