Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/k0xaANVexlZR9iy1MCdQGU5oaoc.roa
File: k0xaANVexlZR9iy1MCdQGU5oaoc.roa (raw, json)
Hash identifier: +BDwPPAW+c8P18Sn8QgEdQwUJ8HW206iufppdyIb1RQ=
Subject key identifier: 93:4C:5A:00:D5:5E:C6:56:51:F6:2C:B5:30:27:50:19:4E:68:6A:87
Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Certificate serial: F6
Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/k0xaANVexlZR9iy1MCdQGU5oaoc.roa
Signing time: Wed 20 Mar 2024 15:29:00 +0000
ROA not before: Wed 20 Mar 2024 15:29:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63910
IP address blocks: 103.130.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C
Validity
Not Before: Mar 20 15:29:00 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=934C5A00D55EC65651F62CB5302750194E686A87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:43:bf:e4:06:56:69:4e:2c:fa:15:2c:61:
53:49:02:ae:e8:55:d4:8e:fd:a9:55:f0:29:5b:25:
81:d6:e1:30:05:f4:4f:53:81:05:ef:b1:39:37:71:
1c:1c:70:7d:cd:ef:36:da:94:69:b8:22:4f:09:7b:
7c:ef:ee:c8:cd:e6:b7:a9:5f:75:ea:d7:d6:8e:16:
4d:ce:bb:aa:b7:3c:a3:4f:51:20:66:48:92:46:f2:
d6:31:31:1c:03:53:56:73:1d:2a:cf:0e:13:8c:cb:
e7:e4:30:1e:3a:14:8f:02:91:5c:5d:14:ee:86:7a:
ca:96:5a:d6:71:50:7a:31:da:f1:37:8a:37:e7:84:
1f:f9:fa:59:65:ef:bd:2d:65:76:7e:e4:9b:02:2d:
b9:95:d3:e5:2a:36:5f:f0:64:f2:ab:d8:3a:50:c0:
0f:d5:d5:41:63:99:5a:05:b8:ef:cf:6c:f3:d7:93:
32:51:b4:4b:fa:83:0b:9a:0f:8d:38:96:94:a0:72:
64:e8:cf:48:d3:09:ac:0c:3f:6d:4c:23:52:0f:95:
8e:a2:ae:38:39:c0:8b:12:f3:59:20:15:65:bd:d1:
fd:cb:53:b2:54:53:34:f6:23:42:a2:81:22:71:f7:
15:f2:7e:84:bc:b7:5b:43:a9:4f:6c:f2:26:f7:5b:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:5A:00:D5:5E:C6:56:51:F6:2C:B5:30:27:50:19:4E:68:6A:87
X509v3 Authority Key Identifier:
keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/k0xaANVexlZR9iy1MCdQGU5oaoc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.236.0/23
Signature Algorithm: sha256WithRSAEncryption
95:99:8b:60:f9:4d:df:12:4a:33:60:80:52:46:40:f1:ce:50:
78:30:0a:7b:b8:03:98:82:bb:92:cc:4f:a8:80:09:c4:7d:0c:
4d:25:d9:76:33:92:4f:9c:6f:1f:f7:36:cf:63:7c:8e:5f:98:
ba:d1:6a:93:01:bd:45:71:2c:89:57:37:61:d8:69:8e:70:97:
e3:9f:96:52:01:43:cc:64:c2:69:76:ff:66:d4:15:16:d1:b0:
c2:f4:42:26:a3:5a:80:ed:33:c2:71:82:2a:b2:95:01:96:d4:
4a:b0:68:c7:e5:6f:0f:11:16:54:1e:0c:c2:df:4b:1e:12:44:
75:0c:2a:47:e8:0c:5d:12:33:dd:b1:41:03:ae:9b:49:4f:8b:
af:b7:75:03:04:5c:29:5e:0a:44:38:55:75:3e:38:f7:72:61:
3f:f5:4d:96:f9:f3:70:6d:be:d4:0e:a3:21:55:a8:7b:9e:9b:
1c:28:78:8f:40:a0:49:87:81:b5:60:76:4f:a2:22:74:8a:2b:
e3:02:43:73:a1:5e:75:f3:7e:e2:b4:7b:f8:c4:1b:40:34:3e:
07:e5:76:00:14:8d:b9:cb:f6:56:9b:89:39:b9:ad:47:66:2b:
cd:38:c5:ae:6b:71:13:5a:b8:cf:e5:e0:89:c9:57:08:fc:d0:
bf:f3:cd:f0
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB
RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNDAzMjAx
NTI5MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzNEM1QTAwRDU1RUM2
NTY1MUY2MkNCNTMwMjc1MDE5NEU2ODZBODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8REO/5AZWaU4s+hUsYVNJAq7oVdSO/alV8ClbJYHW4TAF9E9T
gQXvsTk3cRwccH3N7zbalGm4Ik8Je3zv7sjN5repX3Xq19aOFk3Ou6q3PKNPUSBm
SJJG8tYxMRwDU1ZzHSrPDhOMy+fkMB46FI8CkVxdFO6GesqWWtZxUHox2vE3ijfn
hB/5+lll770tZXZ+5JsCLbmV0+UqNl/wZPKr2DpQwA/V1UFjmVoFuO/PbPPXkzJR
tEv6gwuaD404lpSgcmToz0jTCawMP21MI1IPlY6irjg5wIsS81kgFWW90f3LU7JU
UzT2I0KigSJx9xXyfoS8t1tDqU9s8ib3W9lTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUk0xaANVexlZR9iy1MCdQGU5oaocwHwYDVR0jBBgwFoAUdK8EAv71bDShktHS
GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv
ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy9rMHhhQU5WZXhsWlI5aXkxTUNk
UUdVNW9hb2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4Ls
MA0GCSqGSIb3DQEBCwUAA4IBAQCVmYtg+U3fEkozYIBSRkDxzlB4MAp7uAOYgruS
zE+ogAnEfQxNJdl2M5JPnG8f9zbPY3yOX5i60WqTAb1FcSyJVzdh2GmOcJfjn5ZS
AUPMZMJpdv9m1BUW0bDC9EImo1qA7TPCcYIqspUBltRKsGjH5W8PERZUHgzC30se
EkR1DCpH6AxdEjPdsUEDrptJT4uvt3UDBFwpXgpEOFV1Pjj3cmE/9U2W+fNwbb7U
DqMhVah7npscKHiPQKBJh4G1YHZPoiJ0iivjAkNzoV51837itHv4xBtAND4H5XYA
FI25y/ZWm4k5ua1HZivNOMWua3ETWrjP5eCJyVcI/NC/883w
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org