Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa
File: 3hYJoi6m26-E3az_pIphnWgXtbg.roa (raw, json)
Hash identifier: R2siSaU0gZGQsj1fTeGSiRhNwTkfyYOLnGRYx8vbUcQ=
Subject key identifier: DE:16:09:A2:2E:A6:DB:AF:84:DD:AC:FF:A4:8A:61:9D:68:17:B5:B8
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0B6D
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa
Signing time: Fri 01 Sep 2023 08:30:30 +0000
ROA not before: Fri 01 Sep 2023 08:30:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.234.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Sep 1 08:30:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DE1609A22EA6DBAF84DDACFFA48A619D6817B5B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:73:84:57:1d:44:88:54:c6:19:b4:ee:8f:
14:30:cb:df:67:7f:44:68:2e:25:c2:9b:00:4e:d0:
16:69:e6:57:b9:6a:58:b9:b4:bd:0c:fb:16:fc:ab:
90:54:03:05:5f:fb:fe:70:c0:7f:d0:2d:0d:9c:2d:
1d:6d:71:0a:53:d7:d1:d4:55:4c:3f:90:d1:15:5c:
15:22:14:46:34:98:51:f4:87:14:11:21:4c:3a:42:
2c:c5:7e:d2:31:4b:32:81:57:a2:a2:bb:7c:52:91:
93:e2:31:ae:61:9f:5f:22:0b:49:08:91:4b:f2:0c:
83:9e:9f:13:e6:ec:cf:64:97:4b:1e:86:28:8f:46:
dc:4a:11:c6:48:8f:f3:34:7e:01:af:02:dd:f3:83:
21:f1:2b:2c:7e:b8:31:05:8b:d2:ab:75:d1:82:3f:
dc:8a:5f:8e:b4:00:d1:5e:ca:37:cc:fd:96:53:b1:
3a:67:5b:03:f6:45:2c:ab:ee:cb:05:69:37:7e:4f:
35:7d:d6:4b:f8:6e:32:e2:e9:03:62:69:83:d0:75:
cc:07:c4:54:da:07:bb:de:98:e2:ff:21:7d:e2:96:
56:54:f6:1c:99:3b:6c:bc:1d:2b:cb:3b:f1:0a:52:
63:87:a9:36:29:06:77:27:1b:22:c4:6f:d1:e9:ef:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:09:A2:2E:A6:DB:AF:84:DD:AC:FF:A4:8A:61:9D:68:17:B5:B8
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.224.0/22
Signature Algorithm: sha256WithRSAEncryption
47:93:32:66:f3:87:82:59:b4:46:8e:00:0d:52:6b:62:10:db:
c3:74:81:53:d0:80:dd:49:d5:30:8d:58:82:64:8f:28:76:13:
1d:7f:05:80:a7:e7:a1:96:d4:54:3d:fd:31:5c:83:85:38:07:
87:69:8b:5f:d8:0c:ca:da:0c:03:0e:c6:a3:8a:ed:39:0e:68:
15:0a:3e:b2:08:7a:33:43:00:35:f6:ae:89:69:61:98:2c:a9:
c8:f7:70:b0:35:40:c9:a0:43:e6:47:64:9c:5a:92:93:61:31:
07:31:e7:42:cc:91:58:05:6e:bc:b1:a4:52:84:36:88:b0:b8:
32:1f:60:dc:3e:81:28:69:35:cb:ba:51:30:2e:6f:c3:d2:de:
b4:af:69:6e:ac:d5:20:a2:81:91:1f:c0:3d:61:75:33:9c:65:
52:ad:e3:8c:b3:18:c3:2e:1a:c8:66:c8:8c:38:95:77:4e:6e:
e9:2d:b4:39:0f:63:fc:ec:ff:00:9c:18:7d:2d:25:89:44:0d:
f3:28:2b:c8:54:ed:c4:27:14:cf:97:e1:83:85:9e:53:1e:8f:
4b:b1:b6:0e:4a:3e:7d:58:04:01:90:c3:a1:35:82:e7:f4:f2:
a7:2d:6c:82:7b:94:1f:82:04:2a:73:a9:10:1e:a9:2c:44:ff:
75:fc:c6:55
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMzA5MDEw
ODMwMzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFMTYwOUEyMkVBNkRC
QUY4NEREQUNGRkE0OEE2MTlENjgxN0I1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSrXOEVx1EiFTGGbTujxQwy99nf0RoLiXCmwBO0BZp5le5ali5
tL0M+xb8q5BUAwVf+/5wwH/QLQ2cLR1tcQpT19HUVUw/kNEVXBUiFEY0mFH0hxQR
IUw6QizFftIxSzKBV6Kiu3xSkZPiMa5hn18iC0kIkUvyDIOenxPm7M9kl0sehiiP
RtxKEcZIj/M0fgGvAt3zgyHxKyx+uDEFi9KrddGCP9yKX460ANFeyjfM/ZZTsTpn
WwP2RSyr7ssFaTd+TzV91kv4bjLi6QNiaYPQdcwHxFTaB7vemOL/IX3illZU9hyZ
O2y8HSvLO/EKUmOHqTYpBncnGyLEb9Hp71q1AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQU3hYJoi6m26+E3az/pIphnWgXtbgwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vM2hZSm9pNm0y
Ni1FM2F6X3BJcGhuV2dYdGJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfq4DANBgkqhkiG9w0BAQsFAAOCAQEAR5MyZvOHglm0Ro4ADVJrYhDb
w3SBU9CA3UnVMI1YgmSPKHYTHX8FgKfnoZbUVD39MVyDhTgHh2mLX9gMytoMAw7G
o4rtOQ5oFQo+sgh6M0MANfauiWlhmCypyPdwsDVAyaBD5kdknFqSk2ExBzHnQsyR
WAVuvLGkUoQ2iLC4Mh9g3D6BKGk1y7pRMC5vw9LetK9pbqzVIKKBkR/APWF1M5xl
Uq3jjLMYwy4ayGbIjDiVd05u6S20OQ9j/Oz/AJwYfS0liUQN8ygryFTtxCcUz5fh
g4WeUx6PS7G2Dko+fVgEAZDDoTWC5/Typy1sgnuUH4IEKnOpEB6pLET/dfzGVQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org